ASP.NET

Re: when I press ENTER search button it automatically opening another page. why is that so?

27-Sep-15 22:42

We can't say from what you've posted. When you press enter in a textbox the first button of the form is clicked. So you'll need to find the first button on your form and try and work out from that what is happening. It could be clicking that button is activating js or something, we don't know.

Member 1201610628-Sep-15 0:07

Member 12016106

28-Sep-15 0:07

Re: when I press ENTER search button it automatically opening another page. why is that so?

F-ES Sitecore28-Sep-15 0:15

Re: when I press ENTER search button it automatically opening another page. why is that so?

28-Sep-15 0:15

Wrap your search box and button in an asp:Panel and set the DefaultButton

http://www.aspnettutorials.com/tutorials/controls/defaultbutton-panel-aspnet/[^]

Member 1201610628-Sep-15 0:27

Member 12016106

28-Sep-15 0:27

I tried that too, its work. Now the problem is I have 3 buttons in 1 panel. There are search, submit and log out. for the submit button I created as once insert data and click on submit button it will go to another page but when I use defaultbutton its remaining on the same page. because of that I did not use defaultbutton in panel.

Thank you

IsPostBack

Member 1116162527-Sep-15 19:26

Member 11161625

27-Sep-15 19:26

HI,

I want to know that,
What is the important of ISPostBack in asp.net???

Can AnyOne help???

Richard MacCutchan27-Sep-15 21:44

Richard MacCutchan

27-Sep-15 21:44

See https://www.google.com/search?q=ISPostBack+in+asp.net[^].

PANKAJMAURYA27-Sep-15 22:00

PANKAJMAURYA

27-Sep-15 22:00

IsPostBack is a property by which you can check that is your page is loading first time or postbacking.

In ASP.NET application every event (like clicking a button) causing postback of same page. So the code block written in the page load will execute every time.

If you does not want to execute it everytime then enclose that code block with a if(!IsPostBack){}.

PANKAJ MAURYA
SOFTWARE ENGINEER (Daffodil S/W)
Gurgaon

deepankarbhatnagar30-Sep-15 2:39

deepankarbhatnagar

30-Sep-15 2:39

HI,
I

Quote:
IsPostBack is a Page level property, that can be used to determine whether the page is being loaded in response to a client postback, or if it is being loaded and accessed for the first time.

example.

if(!ispostback){
}
else
{
}
When page response very first time then it go into if condition, after that your else statement will call always.

HtmlTextWriter vs HtmlTable.RenderControl

sridhar_thota7-Oct-15 21:16

sridhar_thota

7-Oct-15 21:16

This property is used to restrict the postback of page every time unnecessarily.
check like below in you code.
if(!IsPostback)
{
//this is your first visit.
}
else
{
//this is not your first visit.
}

Sridhar Thota.

dashing_inn200323-Sep-15 17:57

dashing_inn2003

23-Sep-15 17:57

I have a confusion here.
Both HtmlTextWriter and HtmlTable.RenderControl gives similar outputs then what is the difference considering the performance.
Thanks

Re: HtmlTextWriter vs HtmlTable.RenderControl

Richard MacCutchan23-Sep-15 21:45

Richard MacCutchan

23-Sep-15 21:45

See https://msdn.microsoft.com/en-us/library/system.web.ui.htmlcontrols.htmltable.rendercontrol(v=vs.110).aspx[^]. The RenderControl method sends the output to a HtmlTextWriter.

How to display results based on employees manager and department

samflex22-Sep-15 17:23

Re: How to display results based on employees manager and department

22-Sep-15 17:23

Dear experts,

I do really appreciate your highly valued expertise.

I am trying to think up a solution but I am frozen.

First we have two tables ( I didn't design it in case it is flawed), Emp table and Angulers table.

The emp table contains the following fields:

EmpID,

EmpName

Password

Dept

And several others but those above are the relevant ones.

Then Angulers table with following relevant fieldnames:

EmpID - Foreign Key to Emp table

ManagerID -related to EmpID on Emp table

Status (Status has a value of Pending or Done)

The history:

The process is that employees will log in first to register their grievances and suggest a remedy.

Once an employee is done and clicks the Done button, next time that employee logs in, that employee is no longer allowed to make any changes.

By the way, employees log in with empID as username and Password as password.

This works fine.

Now that that employee is done, his or her manager then logs in to a page called EmployeeSummary.aspx to view a list of his/her employees.

Each manager can view his/her employee based on his/her ID and the department that s/he and his/her employees belong to.

This is where I am having problem.

How do I make a manager log into EmployeeSummary.aspx page and only see those employees that are in his/her department?

Here is the code I am working with but it is coming blank when I run it.

PHP

<div align="center">
    <asp:GridView ID="GridView1" runat="server" AutoGenerateColumns="false" AllowPaging="true"
        OnPageIndexChanging="OnPageIndexChanging" PageSize="10">
        <Columns>
             <asp:HyperLinkField DataNavigateUrlFields="ManagerID,department"
                DataNavigateUrlFormatString="employeeDetails.aspx?ID={0}&Dept={1}" Text="Add Comments" />
            <asp:BoundField ItemStyle-Width="200px" DataField="empname" HeaderText="Employee Name" />
            <asp:BoundField ItemStyle-Width="250px" DataField="department" HeaderText="Department" />
         </Columns>
    </asp:GridView>
</div>

--Code Behind:

    Inherits System.Web.UI.Page
    Protected Sub Page_Load(ByVal sender As Object, ByVal e As EventArgs) Handles Me.Load
        If Not Me.IsPostBack Then
            Me.BindGrid()
        End If
    End Sub

    Private Sub BindGrid()
        Dim constr As String = ConfigurationManager.ConnectionStrings("constr").ConnectionString
        Using con As New SqlConnection(constr)
            Using cmd As New SqlCommand("SELECT e.empID, e.empname, e.department, a.managerID, a.status FROM Emp e INNER JOIN Angulers a ON a.empID = e.empID WHERE a.status = 'Done' and e.ManagerID = '"&querystring("ID") & "' and e.department = '"&uerystring("dept") & "' ")
                'We use parametized query to prevent sql injection attack
                '  Dim p1 As New SqlParameter("@dept", Session("dept"))
                'cmd.Parameters.Add(p1)
                Using sda As New SqlDataAdapter()
                    cmd.Connection = con
                    sda.SelectCommand = cmd
                    Using dt As New DataTable()
                        sda.Fill(dt)
                        GridView1.DataSource = dt
                        GridView1.DataBind()
                    End Using
                End Using
            End Using
        End Using
    End Sub

    Protected Sub OnPageIndexChanging(ByVal sender As Object, ByVal e As GridViewPageEventArgs)
        GridView1.PageIndex = e.NewPageIndex
        Me.BindGrid()
End Sub

Thank you in advance

Herman<T>.Instance23-Sep-15 0:24

Herman<T>.Instance

23-Sep-15 0:24

Is this homework?

In Word you can only store 2 bytes. That is why I use Writer.

Re: How to display results based on employees manager and department

Richard Deeming23-Sep-15 1:55

Richard Deeming

23-Sep-15 1:55

Your code is vulnerable to SQL Injection[^].

NEVER use string concatenation to build a SQL query. ALWAYS use a parameterized query.

VB.NET

Private Sub BindGrid()
    Dim constr As String = ConfigurationManager.ConnectionStrings("constr").ConnectionString
    Using con As New SqlConnection(constr)
        Using cmd As New SqlCommand("SELECT e.empID, e.empname, e.department, a.managerID, a.status FROM Emp e INNER JOIN Angulers a ON a.empID = e.empID WHERE a.status = 'Done' and e.ManagerID = @ManagerID and e.department = @Department")
            cmd.Parameters.AddWithValue("@ManagerID", querystring("ID"))
            cmd.Parameters.AddWithValue("@Department", querystring("dept"))
            
            Using sda As New SqlDataAdapter(cmd)
                Using dt As New DataTable()
                    sda.Fill(dt)
                    GridView1.DataSource = dt
                    GridView1.DataBind()
                End Using
            End Using
        End Using
    End Using
End Sub

Everything you wanted to know about SQL injection (but were afraid to ask) | Troy Hunt[^]
How can I explain SQL injection without technical jargon? | Information Security Stack Exchange[^]
Query Parameterization Cheat Sheet | OWASP[^]
SQL injection attack mechanics | Pluralsight [^]

"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

Re: How to display results based on employees manager and department

samflex23-Sep-15 2:37

Re: How to display results based on employees manager and department

23-Sep-15 2:37

Thank you very much Richard, as always.

You can see that I am actually using parametized query but commented it out just to get the code to work first before using it again.

F-ES Sitecore23-Sep-15 5:56

Re: How to display results based on employees manager and department

23-Sep-15 5:56

You'll need to debug your code, apart from the typo (uerystring("dept")) we don't know what is wrong as we can't run your code in context, we don't know your inputs and we don't know your data. If it "doesn't work" then I suggest you examine the command you are building as querystring("ID") or querystring("dept") might not be what you think they are. If the manager ID is numeric then the issue might be that you're wrapping it in quotes which is only for text

"SELECT e.empID, e.empname, e.department, a.managerID, a.status FROM Emp e INNER JOIN Angulers a ON a.empID = e.empID WHERE a.status = 'Done' and e.ManagerID = "&querystring("ID") & " and e.department = '"&querystring("dept") & "' ")

samflex23-Sep-15 17:36

Re: How to display results based on employees manager and department

23-Sep-15 17:36

I am really sorry guys.

I was showing wrong code.

The correction made by Richard is great and will be used on employeeDetails.aspx page.

However, where my issue lies on the current page.

We would like to show all records related to a department to be displayed when the manager of that department logs on to that page.

As a result, I am trying to use the managerId and department to filter the records.

I am trying to hide the managerId and department Id on the markup but use them to filter the records.

Currently, I am using just the department. If it works, I will add the manager but the department is not working.

Here is the department that I added to the gridview:

XML

<asp:BoundField DataField="department">
 <ItemStyle CssClass="dhide"/>

XML

<asp:BoundField DataField="department">
 <ItemStyle CssClass="dhide"/>

and I want to pass the value to the SELECT statement on codebehind.

Any ideas how to do this?

I will show the code again for clarity with some slight modifications:

XML

<head>
    <style type="text/css">
    .dhide
    {
        display:none;
    }
</style>
</head>
<div align="center">
    <asp:GridView ID="GridView1" runat="server" AutoGenerateColumns="false" AllowPaging="true"
        OnPageIndexChanging="OnPageIndexChanging" PageSize="10">
        <Columns>
             <asp:BoundField DataField="department">
              <ItemStyle CssClass="dhide"/>
              <asp:HyperLinkField DataNavigateUrlFields="ManagerID,department"
                DataNavigateUrlFormatString="employeeDetails.aspx?ID={0}&Dept={1}" Text="Add Comments" />
            <asp:BoundField ItemStyle-Width="200px" DataField="empname" HeaderText="Employee Name" />
            <asp:BoundField ItemStyle-Width="250px" DataField="department" HeaderText="Department" />
         </Columns>
    </asp:GridView>
</div>

'//Code behind:
<pre>    Inherits System.Web.UI.Page
    Protected Sub Page_Load(ByVal sender As Object, ByVal e As EventArgs) Handles Me.Load
        If Not Me.IsPostBack Then
            Me.BindGrid()
        End If
    End Sub
 
    Private Sub BindGrid()
        Dim constr As String = ConfigurationManager.ConnectionStrings("constr").ConnectionString
        Using con As New SqlConnection(constr)
            Using cmd As New SqlCommand("SELECT e.empID, e.empname, e.department, a.managerID, a.status FROM Emp e INNER JOIN Angulers a ON a.empID = e.empID WHERE a.status = 'Done' and e.ManagerID = '"&querystring("ID") & "' and e.department = '"&uerystring("dept") & "' ")
                'We use parametized query to prevent sql injection attack
                '  Dim p1 As New SqlParameter("@dept", Session("dept"))
                'cmd.Parameters.Add(p1)
                Using sda As New SqlDataAdapter()
                    cmd.Connection = con
                    sda.SelectCommand = cmd
                    Using dt As New DataTable()
                        sda.Fill(dt)
                        GridView1.DataSource = dt
                        GridView1.DataBind()
                    End Using
                End Using
            End Using
        End Using
    End Sub

F-ES Sitecore23-Sep-15 21:57

Re: How to display results based on employees manager and department

23-Sep-15 21:57

Any data you want to store and get back on postback but you don't need to be a visible or editable field can be stored in the ViewState.

ViewState["DepID"] = id;

to read it after postback

int id = (int)ViewState["DepID"];

samflex24-Sep-15 3:42

Re: How to display results based on employees manager and department

24-Sep-15 3:42

My question though is how do I grab the value of the following and:

XML

    <style type="text/css">
    .dhide
    {
        display:none;
    }
</style>
<asp:BoundField DataField="department">
 <ItemStyle CssClass="dhide"/>
</asp:BoundField>

and pass it to the SELECT query on the BindGrid sub in codebehind and use it as filter like WHERE e.department = the value of dhide

How do I do that?

F-ES Sitecore24-Sep-15 3:48

How to open javasript pop on button click

24-Sep-15 3:48

I never use binding like that I'm afraid, however rather than using a datagrid to "store" data (something you see a lot of) you should remember that it is simply there to *display* data. The grid is simply being bound to a datasource and if you want to read values then you should read them direct from the datasource you are binding the grid too rather than the grid itself.

It might be advisable to leave datagrids etc behind and use more basic mechanism like repeaters etc, and using the code-behind to bind your data rather than using auto-bound template fields. You end up with greater control over things.

Member 1200294722-Sep-15 1:34

Member 12002947

22-Sep-15 1:34

Hi!

I was trying to open a Javascript pop up on click of button. Though I am able to open the pop up, but my problem is it does not file the onlclick event of the button.

---code for opening the pop up-----

XML

<a href="#"  title="Edit" style=" background-color:#FFF;" data-toggle="modal" data-target="#myModal1"  style="background-color:#FFF;">
                    <asp:ImageButton id="imgedit" runat="server" ImageUrl="boot/img/pen2.png" CommandName="BtnEdit" style="width:20px; height:20px;"/></a>

------------------------------
My above code opens up the popup but the code written behind onclick event is not firing.

Please suggest how I can make my click event work and open the javascript popup

Thanks & Regards

Re: How to open javasript pop on button click

JHizzle22-Sep-15 2:47

JHizzle

22-Sep-15 2:47

You've got no onclick event on the imagebutton itself. Easiest way is to double click it in your VS designer as this'll generate the blank method for you and put you into the .cs/.vb/.whatever codebehind you're using.

Downside: It'll postback your page which should stop your popup. What are you trying to achieve exactly?

Re: How to open javasript pop on button click

F-ES Sitecore22-Sep-15 7:17