Share via


Statement.executeUpdate Method

Executes a SQL INSERT, UPDATE, or DELETE statement.

Syntax

public int executeUpdate(str statement)

Run On

Called

Parameters

  • statement
    Type: str
    The string that contains the SQL statement being passed to the database.

Return Value

Type: int
An updated row count; otherwise, 0 (zero) for SQL statements that return nothing.

Remarks

SQL statements that return nothing, such as SQLDDL statements, can also be executed.

If users control input to the executeUpdate method, an SQL injection thread can occur. Therefore, this method runs under Code Access Security. Calls to this method on the server require permission from the . The following are safer alternatives for interacting with the database:

  • Queries

  • Views

  • X++ select statements

Record level security is not enforced on the Statement class. If data is exposed to the user, perform explicit security validation.

See Also

Reference

Statement Class