|
Good Afternoon,
Can someone please point to me how the architecture of a web site where database access is required should be used…
I have a site that connects to a SQL express database and I have a provider setup in the web config file to access the database. If a user logs into the site they will use this username and password to access data and determine if it is a valid user. (This password is at this time unencrypted)
If someone should get hold of this password they can have access to the database and do what they want to. Is this correct? Or should I do something else? Also what roles should this common user have?
Thanks,
Chris
|
|
|
|
|
Chris Tiaan wrote: If a user logs into the site they will use this username and password to access data
Are you talking about the user that is registered into the database. Means are they just a single record from Users table of the Database or they are the actual user which is used to connect to the database.
Generally, uid and password can be protected using SSL connection.
Yes if you send password unencrypted, it might be exposed to others. But if they are not sensitive enough, it is unnecessary to do Encryption using SSL.
For our general websites , We take uid and password and check with db using the connection string(which has UID and password) stored in the server.
|
|
|
|
|
Hi Abhishek
Thanks for your reply. Currently I have the SA user in the config file for testing.
...Which earns me a BAD award 
...but it is only on my local PC. 
If I were to create a new user to use what rights and roles should I grant the user?
Thanks for your reply,
Chris
|
|
|
|
|
Chris Tiaan wrote: If I were to create a new user to use what rights and roles should I grant the user?
How can I answer this.. .
It totally depends on your requirement. If you make db_owner, it can do anything. 
|
|
|
|
|
Hi
What I dont understand is if I were to make it the DB owner. What prevents someone from getting that login and password onto my database and change data?
can the config file be access from the outside word?
Many Thanks,
Chris
|
|
|
|
|
Looks like you new to ASP.
ASP is server side, code including web.config is only visible to the server, no client can access those files.
|
|
|
|
|
I dont think from ASP.NET, anyone can get the UID and password as it is secure and cant be called. If you are unsure that someone else who have access to the server can see it through file system, you can also make use of encryption of web.config.
Now regarding the role, you can either make it db_owner or sys_admin based on the requirement.
|
|
|
|
|
i have set autogenerate property of gridview to true as i need to decide at runtime gridview columns ,I have added radiolist in one of the columns.
problem is ,radiolist disappear on postback.
|
|
|
|
|
When you postback dynamic controls will not be posted back.
Do all UI generation in Pre_Init to have ViewState data embedded within the body.
|
|
|
|
|
Hi to all,
In my table there is a coloum CreatedDate(DateTime) which stores datetime in UCT Time.
Now I want to show this time to user's local time.(i.e. User From US can see US time, User from india can see Indian local time.) how can i convert? should i have go through Cultureinfo? or may it creates daylight saving problem?
Thanks in advance.
!- F - R - I - E - N - D - S -!
|
|
|
|
|
The following code only works with .NET 3.5 or higher.
TimeZoneInfo cstZone = TimeZoneInfo.FindSystemTimeZoneById("Central Standard Time");
DateTime cstTime = TimeZoneInfo.ConvertTimeFromUtc(timeUtc, cstZone);
To enumerate all known timezones use:
ReadOnlyCollection<TimeZoneInfo> zones = TimeZoneInfo.GetSystemTimeZones();
[edit] modified the enumerate statement
Greetings
Covean
|
|
|
|
|
Thanks for reply.
but , I don't have users time zone right now. This thing i have to implement on Live site containing around 10000 users.
How can i know user local time / time zone using cs file not using not a javascript.
!- F - R - I - E - N - D - S -!
|
|
|
|
|
Ever tried to look if you can use some data delivered by the HttpRequest?
I hope this can help you.
Greetings
Covean
|
|
|
|
|
Hi all,
<HTML>
<HEAD>
<script language='javascript'>
function fChildren()
{
alert("The value is changed !");
}
</script>
</HEAD>
<BODY OnChange="javascript:fChildren()">
<P> </P>
<select name="ddlNumberOfChildren" id="ddlNumberOfChildren" >
<option value="0">0</option>
<option value="1">1</option>
<option value="2">2</option>
<option value="3">3</option>
</select>
<INPUT TYPE="text" VALUE="Enter email address" NAME="userEmail" />
</BODY>
</HTML>
this works in Firefox browser as expected, but it does not work in IE Browser
If some one knows please help me
thanks in advance
|
|
|
|
|
|
Again Cross post.. 
|
|
|
|
|
I want to use Ajax in External .js File...
I have some code in PHP which is similar to following...
function Validate()
{
var pars="selectedIndex="+strUname+"&objname=checkPid";
var url ='/checkUser.php';
var sucReqUname=function(t){
document.getElementById("chackingmsg").innerHTML="";
avail_uname=t;
if(t == "1"){ val_failed();
return false;
}
else{ val_success(o.id);}
}
getAjaxRes(url,pars,sucReqUname);
}
//common ajax
function getAjaxRes(url,params,ResRetFun){
var http = new GetXmlHttpObject();
http.open("POST", url, true);
//Send the proper header information along with the request
http.setRequestHeader("");
http.setRequestHeader("Content-length", params.length);
http.setRequestHeader("Connection", "close");
http.onreadystatechange = function() {
if(http.readyState == 4 && http.status == 200)
ResRetFun(http.responseText);
}
http.send(params);
}
function GetXmlHttpObject(){
var xmlHttp=null;
try{ xmlHttp=new XMLHttpRequest();}
catch (e){// Internet Explorer
try{ xmlHttp=new ActiveXObject("Msxml2.XMLHTTP");}
catch (e){ xmlHttp=new ActiveXObject("Microsoft.XMLHTTP");}
}
return xmlHttp;
}
i want to use this code in java script .. can any one tell me how to use
this in asp.net in external .js file...
its urgent........
Thanks in advance....
modified on Wednesday, November 11, 2009 4:21 AM
|
|
|
|
|
Hi,
We have developed an (ASP.NET) Web Application in VS 2008 & developed a setup project for the same and successfully installed in our local environment (Windows XP/ Windows 2003 server).
This web setup project contains the below:
1. Web Application (Primary output/ Content)
2. Primary output of BLL & DAL
3. Few custom actions
4. Few UI Forms to get the Database details/ etc from user
5. One Windows service
This setup fails immediatley in the client environment. The client also using the Windows XP SP2/ 32 bit version. But the windows root folder is "C:\WINNT"; bcos the system has been upgraded from Windows 2000 to XP it seems.
After that we have removed the custom actions and Windows service from the setup project (to narrow down the issue) & tried to install, it also failed.
We dont have any clue on this. Can you please help...
Thanks in Advance !! 
Jey
|
|
|
|
|
hi sir
i want separate two columns of crystal report by colon( .and i want 3 records of two column in half vertical portion of the page and next 3 records display on remaining part of same page with colon.
and i mean i want something like this please help me
Sno rollno student name Sno rollno student name
1. 001:A 4. 004
2. 002:B 5. 005:E
3. 003:C 6. 006:F
|
|
|
|
|
hi
i m using radiobuttonlist with images like this
<asp:RadioButtonList ID="rbtnthumb1" runat="server">
<asp:ListItem Value ="News_icon.jpg"> <img src="images/News_icon.jpg" alt="News" align="absmiddle"> News</asp:ListItem>
<asp:ListItem Value ="imageicon.bmp"><img src="images/imageicon.bmp" alt="Image" align="absmiddle">Image</asp:ListItem>
<asp:ListItem Value ="Video97.gif" ><img src="images/Video97.gif" alt="Video" align="absmiddle">Video</asp:ListItem>
</asp:RadioButtonList>
In design view it show radiobuttonlist with images but when i use insert query.it stored this value in mytable
<img src="images/News_icon.jpg" alt="News" align="absmiddle"> News
but i only want to store News_icon.jpg(image file name)and i m using this way for adding value
cmd.Parameters.AddWithValue("@ChooseThumbnail", rbtnthumb1.SelectedItem.Text)
please let me know how to stroe only imagefile name in database table
regard's
|
|
|
|
|
What have you tried ? How much do you know about the languages you're using ? What do you think the solution might be ?
Seems to me like the most likey solution is to use some string mashing to extract the value, or a regex.
Christian Graus
Driven to the arms of OSX by Vista.
Read my blog to find out how I've worked around bugs in Microsoft tools and frameworks.
|
|
|
|
|
thanks for reply
i m beginner and trying to save a imgefilename in database with radiobuttonlist.i do't know may be my approach wrong or right
can you tell me right concept about my question ? if i m doing wrong then what is the right way
mustafa
|
|
|
|
|
creative77 wrote: i m beginner
Then this task is way too complex for you. You should abandon it, and spend some time learning basic exercises instead. Except you're being paid for this code, right ?
Christian Graus
Driven to the arms of OSX by Vista.
Read my blog to find out how I've worked around bugs in Microsoft tools and frameworks.
|
|
|
|
|
Use this :
cmd.Parameters.AddWithValue("@ChooseThumbnail", rbtnthumb1.SelectedValue)
If you call
SelectedItem.Text
it will return the innerhtml under the listitem.
On the other hand if you call SelectedValue, it will return the value attribute assigned in asp:ListItem.
Hope you like it.
Another thing it is better to write like
<img src="images/Video97.gif" alt="Video" align="absmiddle" />
You havnt closed any img tag using /> on the right.
![Rose | [Rose]](https://codeproject.global.ssl.fastly.net/script/Forums/Images/rose.gif) 
|
|
|
|
|
How to get live stream from webcam in our web page?
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
