Server Error in '/' Application.

An SQL error occurred while processing your request.

Exception Details: System.Data.SqlClient.SqlException (0x80131904): Incorrect syntax near ' OR '1'='1'.

Source Error:


                    Line 15: using (SqlCommand command = new SqlCommand(sql, connection))

                    Line 16: {

                    Line 17:     SqlDataReader reader = command.ExecuteReader();

                    Line 18: }

Source File: c:\inetpub\wwwroot\Default.aspx.cs Line: 15

[SqlException: Incorrect syntax near ' OR '1'='1'.]
at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)
at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)
at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj, Boolean callerHasConnectionLock, Boolean asyncClose)
at System.Data.SqlClient.TdsParser.TryRun(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj, Boolean& dataReady)
at System.Data.SqlClient.SqlDataReader.TryConsumeMetaData()
at System.Data.SqlClient.SqlDataReader.get_MetaData()
at System.Data.SqlClient.SqlCommand.FinishExecuteReader(SqlDataReader ds, RunBehavior runBehavior, String resetOptionsString)
at System.Data.SqlClient.SqlCommand.RunExecuteReaderTds(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, Boolean async, Int32 timeout, Task& task, Boolean asyncWrite)
at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method, TaskCompletionSource`1 completion, Int32 timeout, Task& task, Boolean asyncWrite)
at System.Data.SqlClient.SqlCommand.ExecuteReader(CommandBehavior behavior)
at _Default.Page_Load(Object sender, EventArgs e) in c:\inetpub\wwwroot\Default.aspx.cs:line 15