Re: How to avoid extra slashes and quotes??? - ASP.NET Discussion Boards

Sean8924-Apr-06 15:50

Sean89

24-Apr-06 15:50

I dont think you are understanding my question. The user is not getting directed to the right page because they are not being authenticated when they hit login.

I put:

Response.Write(User.IsAuthenticated.ToString());

on the page that the user kept getting directed to after they logged in and it says false.

So for some reason, its not authenticating the user the first time they login. Which is weird because I have made it so that you need to be logged in before you can access the user page and yet it is letting them go there. So its a bit odd Confused | :confused:

Furthermore, when I switch Server.Transfer to Response.Redirect it keeps sending the user back to the login page!!?

Any ideas?

Re: User Login

minhpc_bk24-Apr-06 16:04

minhpc_bk

24-Apr-06 16:04

Sean89 wrote:
I dont think you are understanding my question.

I'm sorry.

Sean89 wrote:
Any ideas?

IMO, there are a couple of reasons as to why the application sends the user back to the login page:
+ The username/password is not correct (might not be this case).
+ The user account is not authorised to view the web page in the Admin or SuperAdmin folder. So could you double check the authorization settings of your application, especially for the Admin/SuperAdmin folder.
+ The authentication ticket is not added.

Have you tried to debug your application and step through your sample code line by line and see what is actually happening?

Re: User Login

sudharsong23-Apr-06 20:30

sudharsong

23-Apr-06 20:30

please check with the ispostback is true or false

with regards,
susa

How to avoid extra slashes and quotes???

sinanju23-Apr-06 5:13

sinanju

23-Apr-06 5:13

this is the entry in db
<span id="Label1" style="font-family:Arial Narrow;font-size:XX-Large;font-weight:bold;font-style:italic;text-decoration: overline;">

Now when i retrieve in source code

string str = ds.Tables[0].Rows[1][1].ToString();

my str value contains the following value, where i found extra slashes with each quote, plus two extra quotes at the each end of the string

"<span id=\"Label1\" style=\"font-family:Arial Narrow;font-size:XX-Large;font-weight:bold;font-style:italic;text-decoration: overline;\">"

how to get rid of these quotes and slashes?

Re: How to avoid extra slashes and quotes???

Guffa23-Apr-06 5:33

Guffa

23-Apr-06 5:33

How do you reckon that value looks like that? Are you singe stepping through the code and looking at the watch windows?

That's the way you would write that string as a string constant, so that's how it's displayed.

---
b { font-weight: normal; }

Re: How to avoid extra slashes and quotes???

sinanju23-Apr-06 5:52

sinanju

23-Apr-06 5:52

>>How do you reckon that value looks like that? Are you singe stepping through the code and looking at the watch windows?

As i didn't get the desired result, so i stepped through the code looking at the watch window, and encounter these extra stuff.

>>That's the way you would write that string as a string constant, so that's how it's displayed.

sorry, i couldn't understand this.

Re: How to avoid extra slashes and quotes???

Guffa25-Apr-06 4:02

Guffa

25-Apr-06 4:02

sinanju wrote:
>>That's the way you would write that string as a string constant, so that's how it's displayed.

sorry, i couldn't understand this.

An example:

If you have this text:

Text with "funny" characters.

and put that in a string in the code, it would be written:

string s = "Text with \"funny\" characters."

This is the way that the watch windows show it. It does so to be able to show unprintable characters like line breaks.

---
b { font-weight: normal; }

Re: How to avoid extra slashes and quotes???

NeverHeardOfMe23-Apr-06 13:58

NeverHeardOfMe

23-Apr-06 13:58

If a string contains quotes - which are interpretted by the compiler as start/end of string - you have to escape them to tell it that they are part of the string and not delimiting it.

Don't know about C, but in VB you can do this by by sinply doubling them - viz:

Dim str As String = ds.Tables[0].Rows[1][1].ToString.Replace(Chr(34), Chr(34) & Chr(34))

(Since Chr(34) = the quote character)

Hope that helps
Phil

Re: How to avoid extra slashes and quotes???

sinanju23-Apr-06 17:08

sinanju

23-Apr-06 17:08

This doesn't seem to help, im afraid.

istead the following seems to be a step to the solution

char[] strArr = ds.Tables[1].Rows[1][1].ToString().ToCharArray();

here strArr doesn't have the extra slashes or quotes, but now how to use this char array instead of string in my code.
As casting it back to string will get me the string with extra slashes as before.

Request-Response problem

ndkit23-Apr-06 1:32

ndkit

23-Apr-06 1:32

I'm using AJAX to write Web application, there have two client (client1, client2) and server. Now i use XmlHttpRequest to send request to Server from Client1, after that, i want server send the response to Client2. But if i use Response.write(something here), Server always send to Client1, not Client2. How can i do???
Thanks!

Re: Request-Response problem

Guffa23-Apr-06 1:38

Guffa

23-Apr-06 1:38

You can't do that. The HTTP protocol simply doesn't work that way. You have to send a request from the client to be able to send a response back from the server.

---
b { font-weight: normal; }

Re: Request-Response problem

ndkit23-Apr-06 1:45

ndkit

23-Apr-06 1:45

So are there any way to do that? example some game online ?

Re: Request-Response problem

CWIZO23-Apr-06 2:59

CWIZO

23-Apr-06 2:59

Just do a request every N seconds that will ask the server if it has anything for the client. Of course you will have to write the code at the server side that will be able to do that.

But if you will only have two clients then you should defenitly write a windows application!

--------------------------------------------------------
My development blog
Q:What does the derived class in C# tell to it's parent?
A:All your base are belong to us!

error in asp.net

dadax_8523-Apr-06 1:32

dadax_85

23-Apr-06 1:32

hey
i'll know how i can catch error in asp.net DADAX

-- modified at 13:51 Sunday 23rd April, 2006

Re: error in asp.net

CWIZO23-Apr-06 3:00

CWIZO

23-Apr-06 3:00

Please write so somebody can understand you. I didn't understood a word you said.

--------------------------------------------------------
My development blog
Q:What does the derived class in C# tell to it's parent?
A:All your base are belong to us!

Re: error in asp.net

dadax_8523-Apr-06 12:24

dadax_85

23-Apr-06 12:24

hey and sorry

just i need to know how i can catch error in asp.net

i hope that you understand me Frown | :(

and thanks anyway

DADAX

Re: error in asp.net

gyokusei23-Apr-06 15:37

gyokusei

23-Apr-06 15:37

Using "try catch" block:

try {
    // do something
}
catch( Exception ex ) {
    // do something if an error in try block occurs 
}

Re: error in asp.net

dadax_8523-Apr-06 22:48

dadax_85

23-Apr-06 22:48

but the code is write in the file.asp
coz i create datasource and formview and the command of add is writen in ASP
so if i write try catch in the code VB or C# it's didn't worked

i hope that you understand me

DADAX

Stored Procedures

LAYEEQ AHMED KHAN22-Apr-06 23:44

LAYEEQ AHMED KHAN

22-Apr-06 23:44

Hi laks here,i want some help regarding stored procedures usage,how we can use stored procedure in ASP.net,plz explain me with example D'Oh! | :doh:

Re: Stored Procedures

CWIZO22-Apr-06 23:47

CWIZO

22-Apr-06 23:47

Stored procedures have nothing to do with ASP.NET directly.
Stored procedures are stored on a databse server, and you can call them from .NET using ADO.NET

--------------------------------------------------------
My development blog
Q:What does the derived class in C# tell to it's parent?
A:All your base are belong to us!

Re: Stored Procedures

dadax_8523-Apr-06 0:23

dadax_85

23-Apr-06 0:23

hey i'll give you an example asp.net ( VB.net ) for executing a stored procedure in sql server 2005 but it same in another database
1) the stored procedures to add record and take the paramters from textboxes
the code for stored procedures in sql is :
create PROCEDURE SP1

(
@ID bigint ,
@Name nvarchar(50),
@Description nvarchar(500),
@ProjectID bigint

)

AS
INSERT INTO [TBASE].[dbo].[TaskType]
([ID]
,[Name]
,[Description]
,[ProjectID])
VALUES
(@ID ,@Name,@Description,@ProjectID)

RETURN

2) to execute this stored procedures from asp.net
Imports System
Imports System.Data
Imports System.Data.OleDb

Dim con As New OleDbConnection("Provider=SQLNCLI.1;Data Source=DADAX\DADAX;Integrated Security=SSPI;Initial Catalog=TBase")
con.Open()
Dim MyCommand As New OleDbCommand()
MyCommand.Connection = con
Dim proc As String
proc = "EXEC SP1 " & TextBox1.Text & ",'" & TextBox2.Text & "','" & TextBox3.Text & "'," & TextBox4.Text
MyCommand.CommandText = proc
MyCommand.ExecuteReader()

I wish that help you

DADAX

Re: Stored Procedures

Colin Angus Mackay23-Apr-06 3:10

Colin Angus Mackay

23-Apr-06 3:10

dadax_85 wrote:
OleDbConnection

Why are you using OleDb to connect to a SQL Server. Why not use a SqlConnection?

dadax_85 wrote:
proc = "EXEC SP1 " & TextBox1.Text & ",'" & TextBox2.Text & "','" & TextBox3.Text & "'," & TextBox4.Text

This is a security nightmare. You are advising people down the route to a SQL Injection Attack. Don't do this! See: SQL Injection Attacks and Tips on How To Prevent Them[^]

"On two occasions, I have been asked [by members of Parliament], 'Pray, Mr. Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able to rightly apprehend the kind of confusion of ideas that could provoke such a question."
--Charles Babbage (1791-1871)
My: Website | Blog

Re: Stored Procedures

dadax_8523-Apr-06 12:32

dadax_85

23-Apr-06 12:32

sorry !!!!!!!!!!!1

DADAX

Re: Stored Procedures

dadax_8523-Apr-06 12:37

dadax_85

23-Apr-06 12:37

Dim con As New SqlConnection("Data Source=eyetech\sqlexpress;Initial Catalog=TBase;Integrated Security=True" providerName="System.Data.SqlClient" )
Dim MyCommand As New SqlCommand
con.Open()
MyCommand.Connection = con
Dim proc As String
proc = "EXEC SP1 " & TextBox1.Text & ",'" & TextBox2.Text & "','" & TextBox3.Text & "'," & TextBox4.Text
MyCommand.CommandText = proc
MyCommand.ExecuteReader()

DADAX

Re: Stored Procedures

gyokusei23-Apr-06 15:54

gyokusei

23-Apr-06 15:54

dadax_85 wrote:
proc = "EXEC SP1 " & TextBox1.Text & ",'" & TextBox2.Text & "','" & TextBox3.Text & "'," & TextBox4.Text

very dangerous!

using these code instead:

[C#]

SqlCommand cmd = new SqlCommand("SP1", con);
cmd.CommandType = CommandType.StoredProcedure;

cmd.Parameters.Add("@ID", TextBox1.Text);
cmd.Parameters.Add("@Name", TextBox2.Text);
cmd.Parameters.Add("@Decription", TextBox3.Text);
cmd.Parameters.Add("@ProjectID", TextBox4.Text);

cmd.ExecuteNonQuery();

-- modified at 21:55 Sunday 23rd April, 2006

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.