ASP.NET

econner10-Dec-06 7:14

10-Dec-06 7:14

Thanks for the reference. I will take a closer look.

What is the best method of converting the java classes to C#? I have only tried this once before by using the conversion wizard in VS and wasn't successful. Did you code the conversion manually or use a conversion tool?

Thanks

econner10-Dec-06 7:22

10-Dec-06 7:22

After taking a closer look, it looks like these classes convert the CSS file into a DOM XML document. Does the CSSParser also have functions to parse the elements of the XML document, or do you need to use SAC 1.3?

I currently have a control that converts the CSS file to XML and back. This sounds similar to the descripition of the CSSParser. I am also looking to be able to edit the elements of the node in the XML tree and stay CSS complinant. The control I have does not have the ability to parse the elements of the XML document.

Did you have to convert/use both the CSSParser and the SAC 1.3? Or, was everything in the CSSParser?

g00fyman10-Dec-06 12:31

g00fyman

10-Dec-06 12:31

Hi,

The conversion was done using the JLCA (Java Language Conversion Assistant) that comes with VS .NET 2005. My task was only to convert the source to a usable format for other team members. From memory though (and it was a while ago) they were attempting to achieve what you are trying to achieve, so I assume the CSSParser application contains all that is required.

Sorry for my vagueness but I was not directly involved in the latter stages of development, I was only called on because I knew both languages (JAVA & .NET).

Regards,
g00fy

econner10-Dec-06 14:12

10-Dec-06 14:12

Thanks.

I tried converting the SAC 1.3 java classes with the JLCA in Visual Studio 2003. The conversion had 3 errors and 1 warning. I haven't had a chance to check into the errors.

I will take a look at the CSSParser classes as well.

Thanks for your help.

econner10-Dec-06 16:52

ASP.net form tampering is not possible?

10-Dec-06 16:52

I downloaded the CSSParser and used the JLCA from VS .NET 2003 to convert the classes. The conversion had 119 errors. The most common is:

The equivalent in .NET for method 'java.lang.Throwable.getMessage' may return a different value.

Genbox9-Dec-06 5:49

9-Dec-06 5:49

Hi.

I've made a sample ASP.net 2.0 page to demonstate form tampering. But the problem is that i can't get it to work. (normally that should be a good thing).

This is my ASP.net page:

<form id="form1" runat="server">
<asp:DropDownList ID="DropDownList1" runat="server">
<asp:ListItem Value="value1">value1</asp:ListItem>
<asp:ListItem Value="value2">value2</asp:ListItem>
</asp:DropDownList>
<asp:Button ID="Button1" runat="server" Text="Make postback" />
</form>

and my C# backend page:

protected void Page_Load(object sender, EventArgs e)
{
Response.Write(DropDownList1.Text);
}

Now, the problem is that when i edit the source of the HTML site that the browser displays, and press the submit button, the newly created value dont get registered on the server as it's supposed to (form tampering). I had already disabled EventValidation as i figured that it would throw me an exception because the HTML source would have changed on the postback.

The result i get instead is that the page postbacks and selects the first item in the DropDownList1 instead of the item i created client-side (in the HTML)

Do you guys have a solution to this? any help would be nice.

Guffa9-Dec-06 7:26

Guffa

9-Dec-06 7:26

When you post the form, only the value from the selected item in the dropdown list is included in the form data, not all the items, and not the entire items. Just that single value. Therefore it's impossible to recreate a list item from the form data.

When the page is recreated, the dropdown list is recreated with the options that exists in the original code. Then the selected value that was sent from the form is checked against the items that exist, and as it doesn't match any of those, none of them will be selected.

---
b { font-weight: normal; }

Genbox11-Dec-06 1:44

11-Dec-06 1:44

That i am aware of.

If i select an item, the item will be displayed by Response.Write(DropDownList1.Text).
But if i add an extra option manually in the source of the HTML, select it and make a postback, then it's not displayed on the page.

That only happens of the control that i am using (dropdownlist) has a runat="server" in it.
if i make my own html dropdownlist (HTML select) and fetch the values by using Request.Form, then the values vorks and i can make a form tampering.

So asp.net has to do some implicit that i would like to know of.

Guffa11-Dec-06 2:52

Guffa

11-Dec-06 2:52

I explained how the items in the dropdown list is created, how the item is selected according to the form data, that an item that does not exist can not be selected, and why you can't add items to the server control by adding them to the html code.

You say that you are aware of that, but still you ask why you can't select an item that does not exist. As I already answered that question, you have to explain what it is in my answer that you don't understand.

---
b { font-weight: normal; }

Genbox11-Dec-06 9:22

11-Dec-06 9:22

I misunderstood what you said.

I think I understand it now, you can't retrive data from a server control that has not been declared at the rendering fase of the site, am i correct?

But that also mean that i can't create a javascript to populate the dropdownlist and then get it's data by referring to the dropdownlist object? I guess that it's a fair trade of functionality to security.

amirafouad219-Dec-06 4:31

amirafouad21

9-Dec-06 4:31

when i login an type a password in new user give me that error, any on know why!!!

Password length minimum: 7. Non-alphanumeric characters required: 1.

thanks

Re: login Question

Genbox9-Dec-06 6:34