C#

Clonus wrote:

generate a keypair using .net 2.0

Clonus wrote:

private key secured with a passphrase

• Generate the public and private key from the RSACryptoServiceProvider.
• Select a password and use PasswordDeriveBytes to generate a strong DES key.
• Using DESCryptoServiceProvider encrypt the private key of the RSA Key Pair with the bytes generated in step 2.
• Do what you want

• The simplest would be to generate some random bytes once and hard-code these into your application as the salt-bytes.  This however is not very secure or wise.
• The better way to accomplish this would be to write an algorithm (or find one) than generates some random bytes based on the password string, this would mean that the string changes each time the password changes but remains the same for the same password.

int threadTimeout = 2000; 
 
for (int loop=0; loop < syncServers.Length; loop++) 
{
    Console.WriteLine("Loop = " + loop.ToString());

    this.syncServer = syncServers[loop];
 
    Thread syncThread = new Thread(new ThreadStart(DoSync));

    Console.WriteLine("Starting Thread");

    syncThread.Start();
    
    Console.WriteLine("Main Thread is sleeping");

    //sleep the main thread
    Thread.Sleep(threadTimeout);

    Console.WriteLine("Main Thread Awake");

    if (syncThread.IsAlive) 
    { 
        Console.WriteLine("  Sync thread is alive");
       syncThread.Abort() 
       Console.WriteLine("  Sync thread is dead");
    } 
}
Console.WriteLine("Finished");

NaNg15241 wrote:

"Select * from Costs where Costs.PartID = Parts.ID And Costs.PartID = " + strPartNumberInput;

string SQLString = "Select * FROM Costs WHERE costs.PartID = " + strPartNumberInput;

Gerald Schwab wrote:

string SQLString = "Select * FROM Costs WHERE costs.PartID = " + strPartNumberInput;

Gerald Schwab wrote:

Uhh, he asked what he should concatenate to the end of the SQLString string variable in order to generate a SQL statement that would filter by Parts.ID

string SQLString = "Select * FROM Costs"; //What else to put here??

How do I programatically say, 'strPartNumberInput is Parts.ID'

Gerald Schwab wrote:

I simply demonstrated how to create the SQL string he was interested in creating. I am fully aware of SQL injection attacks and always use typed parameters with stored procedures in "my" solutions.

Gerald Schwab wrote:

Maybe you should try being less arrogant next time.

Wasif Ehsan wrote:

String SQLString="SELECT * FROM Costs WHERE PartID= "+txtPartNumber.Text;

string SQLString = "SELECT * FROM Costs WHERE Costs.PartID = @PartID";
SqlCommand cmd = new SqlCommand();
cmd.Connection = myConnection;
cmd.CommandText = SQLString;
cmd.Parameters.Add("@PartID", strPartNumberInput);

cmd.CommandText = "SELECT * FROM Products where Name = '"+txtSearch.Text+"'";

'; DELETE FROM Products; --

SELECT * FROM Products where Name = ''; DELETE FROM Products; --

'; UPDATE Products SET Price = 0.01; --