Visual Basic

Marcus J. Smith27-Feb-07 3:22

27-Feb-07 3:22

First I would say that it is a bad practice to create and drop real tables from a program. If you are just creating tables for temporary use that is different. Now that I got that out of the way.

Is it not as simple as saying DROP TABLE TABLENAME?

_Cle^AkO

"I think you'll be okay here, they have a thin candy shell. 'Surprised you didn't know that." - Tommy Boy
"Fill it up again! Fill it up again! Once it hits your lips, it's so good!" - Frank the Tank (Old School)

Colin Angus Mackay27-Feb-07 4:10

27-Feb-07 4:10

CleAkO wrote:
First I would say that it is a bad practice to create and drop real tables from a program.

Why?

Upcoming events:
* Glasgow: Geek Dinner (5th March)
* Edinburgh: Web Security Conference Day for Windows Developers (12th April)

My: Website | Blog | Photos

Marcus J. Smith27-Feb-07 4:28

27-Feb-07 4:28

Well for most DBs you would need to elevated priviledges in order to drop or add any table other than a #temp table.

Colin Angus Mackay27-Feb-07 4:49

27-Feb-07 4:49

CleAkO wrote:
Well for most DBs you would need to elevated priviledges in order to drop or add any table other than a #temp table.

Your original statement was more general than that. Assume that the user has the appropriate privileges. Why would it be bad practice to drop tables from a database in a program?

Upcoming events:
* Glasgow: Geek Dinner (5th March)
* Edinburgh: Web Security Conference Day for Windows Developers (12th April)

My: Website | Blog | Photos

Marcus J. Smith27-Feb-07 5:07

27-Feb-07 5:07

I thought we established that all user input is evil and by giving the permission to do this it could be taken advantage of, that's all. Cool | :cool:

Colin Angus Mackay27-Feb-07 6:09

27-Feb-07 6:09

CleAkO wrote:
I thought we established that all user input is evil and by giving the permission to do this it could be taken advantage of

You can sanitise the data to ensure that necessary tables are not dropped. The table may be dropped as part of a larger overall process and the drop functionality is not initiated by any specific user input.

Good (or best) practice shows ways to do things that that have a higher likelyhood of producing positive results. It does not deny the ability to do anything, it merely suggests better ways of doing things. If you need to drop a table then there are good ways of doing that.

The table name is 128 characters maximum (in SQL Server). If you ensure that all table names are made up of only specific characters (e.g. letters and numbers only) you can remove the possibility of people managing to inject malicious code into the drop statement because you can reject invalid characters. You can also surround your table name in square brackets. You can verify that the table exists prior to issuing the drop by querying the INFORMATION_SCHEMA.TABLES view using a parameterised query.

There are lots of things you can do to ensure that if you do need to drop a table from your application, you do it safely.

Big Grin | :-D

Upcoming events:
* Glasgow: Geek Dinner (5th March)
* Edinburgh: Web Security Conference Day for Windows Developers (12th April)

My: Website | Blog | Photos

Colin Angus Mackay27-Feb-07 4:11

27-Feb-07 4:11

Just DROP the database. However, in order for this to work you need to ensure that no one is already using the database, and that the connection you are using connects to a different database (e.g. Master)

Upcoming events:
* Glasgow: Geek Dinner (5th March)
* Edinburgh: Web Security Conference Day for Windows Developers (12th April)

My: Website | Blog | Photos

slashes in textbox

amaneet27-Feb-07 2:27

amaneet

27-Feb-07 2:27

Sir/Madam
Can i insert the slashes in the textbox (two slashes) for the user to insert the date(day,month,year).
Please help
Thanks and Regards
Pankaj

Marcus J. Smith27-Feb-07 2:38

27-Feb-07 2:38

Unless something has changed with 2.0, you will have to create a custom control for this. I did something similar but it was kind of ugly by taking 5 textboxes, the 1st, 3rd, and 5th had the appropriate borders blanked out and the 2nd and the 4th contained the slashes then you put them all side by side with no spaces. Then you use an autotab JS function to make it seem as if they are just typing through a mask in the textbox.

It will appear to be a textbox but there has to be a better way.

KeithF27-Feb-07 2:57

KeithF

27-Feb-07 2:57

There is a MaskedTextBox in .Net 2.0 using Visual Studio 2005 that you can use.

Marcus J. Smith27-Feb-07 3:16

27-Feb-07 3:16

Thank goodness!

JustmeNick27-Feb-07 6:05

JustmeNick

27-Feb-07 6:05

if you need those / for date purposes..its easier to declare a date object to collect the information
and asign the input to that variable.. after the variable or object gets the input as string..u format it to represent what u want...

example:

dim TD as Date

TD = textbox1.text

msgbox(TD.tostring("dd/MM/yyyy")

i just use a message box to display the result..but the same applies were ever u use it..

Nab

Marcus J. Smith27-Feb-07 7:56

27-Feb-07 7:56

Thats true but I think the OP is asking how to display those in the textbox so that someone understands that it is looking for a date.

_Cle^aKO

"I think you'll be okay here, they have a thin candy shell. 'Surprised you didn't know that." - Tommy Boy
"Fill it up again! Fill it up again! Once it hits your lips, it's so good!" - Frank the Tank (Old School)

JustmeNick27-Feb-07 8:15

JustmeNick

27-Feb-07 8:15

just use a datetimepicker

Nab

Referential classes

amaneet27-Feb-07 2:17

amaneet

27-Feb-07 2:17

Sir/Madam,
Can somebody please tell me the meaning of Referential classes and if possible please send the link of code that illustrates the referential classes
Thanks and regards
Pankaj

Mybase keyword

Pankaj Garg27-Feb-07 1:57

Pankaj Garg

27-Feb-07 1:57

Sir/Madam,
I wanted to know the basic meaning of MyBase and one more thing , which is that , I read somewhere MyBase.Finalize Finalize is the destructor , I know but I wanted to know the meaning of MyBase.Finalize.
Please help
Thanks and Regards
Pankaj

Re: Mybase keyword

Guffa27-Feb-07 3:38

Guffa

27-Feb-07 3:38

Do you mean myBase[^], or what do you mean?

If MyBase is a class of yours that has a Finalze method, then that method is the finalizer of the class. A finalizer is usually only used as a backup for the Dispose method in a class that implements the IDisposable interface.

(Classes in C++ have destructors, and the same syntax is used for finalizers in C#, but finalizing in .NET works differently from destruction in C++, so I prefer the term finalizer to emphasise the difference).

When an object is about to be garbage collected, and it has a finalizer, the object will instead be placed in a queue of objects to be finalized. A background thread will run the Finalize method of each object in turn, and after that the object can be garbage collected.

---
single minded; short sighted; long gone;

Re: Mybase keyword

Dave Kreskowiak27-Feb-07 4:37

Dave Kreskowiak

27-Feb-07 4:37

MyBase refers to the base class that your class inherits from. It's normally used to call methods or set properties, or what have you, that are implemented in the base class.

Public Class MyTextBoxClass
    Inherits System.Windows.Forms.TextBox
 
    ...
    ' Sets the location of the top left corner of our TextBox
    MyBase.Location = New Point(40,20)

Also, there are no such things as destructors in the .NET Framework. Dispose and Finalize just gives an object it's last chance to clean up any resources it has to before the GC collects the object.

Dave Kreskowiak
Microsoft MVP - Visual Basic

IDispose Interface

Pankaj Garg27-Feb-07 1:51

Pankaj Garg

27-Feb-07 1:51

Sir/madam,
I wanted to know the utility of IDispose interface in the code.Can u please explain with the help of an example.
Thanks and Regards
Pankaj

Re: IDispose Interface

Marcus J. Smith27-Feb-07 2:41