Session.ExecuteNonQuery(String, String[], QueryParameterCollection) Method

SECURITY-RELATED CONSIDERATIONS

This method executes a raw SQL query string. Always validate, sanitize, or parameterize externally supplied SQL query strings to prevent unauthorized access to sensitive information.

Executes the specified SQL statement and returns the number of rows affected.

Namespace : DevExpress.Xpo

Assembly : DevExpress.Xpo.v25.2.dll

NuGet Package : DevExpress.Xpo

csharp

public int ExecuteNonQuery(
    string sql,
    string[] parameterNames,
    QueryParameterCollection parameters
)

Public Function ExecuteNonQuery(
    sql As String,
    parameterNames As String(),
    parameters As QueryParameterCollection
) As Integer

Parameters

Name	Type	Description
sql	String

Specifies an SQL statement.

| | parameterNames | String[] |

Specifies parameter names.

| | parameters | QueryParameterCollection |

Specifies query parameter values.

Returns

Type	Description
Int32

The number of rows affected by the executed SQL statement.

Remarks

Use the ExecuteNonQuery method to execute SQL statements that do not produce result sets, such as UPDATE, INSERT, and DELETE statements.

Use QueryParameterCollection to pass strongly-typed parameters. See examples here: Always Encrypted (SQL Server only).

To learn more about executing SQL statements in XPO, refer to Direct SQL Queries.

Note

The ExecuteNonQuery method sends statements directly, so the correct statement syntax and parameter names format depends on a particular database server.