how to create expander dynamically?

Create a table dynamically in sql from values in textboxes in webform?

• hey guys, i m trying to create a table dynamically in sql from the values entered by user in two textboxes in asp.net using c#, i have tried with the below snippet of code but its giving error, Please help friends asap, waiting for reply protected void Button1_Click(object sender, EventArgs e) { conn.Open(); cmd = new SqlCommand("Insert into standard VALUES(@st,@di)", conn); cmd.Parameters.AddWithValue("@st", std.Text); cmd.Parameters.AddWithValue("@di", div.Text); cmd.ExecuteNonQuery(); cmd = new SqlCommand("Create table class'" + std.Text + div.Text + "'(rollno int primary key, std nchar(10), div nchar(10),name text,pwd text)'", conn); //cmd = new SqlCommand("Create table std'" +@st+"'div'"+@di+ "'(rollno int primary key,std nchar(10), div nchar(10),name text,pwd text)'", conn); cmd.ExecuteNonQuery(); }

• Answer:

  Risky..very risky. You're just asking for an sql injection attack...