|
|
Hi!
I m developing an application in C# asp.net....when i give value like <abc>in my text box and then insert it into sql server by using insert query ....it gives exception message
A potentially dangerous REquest.Form value was detected from the client
is there any way to insert values like this coz i have to do it must
|
|
|
|
|
The exception is being thrown is a SqlException? Or is it from the page? It is more likely the exception is being thrown from the page as a HttpRequestValidationException. Setting ValidateRequest=true on the page will stop this, however it opens you potentially dangerous attacks.
ValidateRequest
Indicates whether request validation should occur. If true, request validation checks all input data against a hard-coded list of potentially dangerous values. If a match occurs, an HttpRequestValidationException exception is thrown. The default is true.
This feature is enabled in the machine configuration file (Machine.config). You can disable it in your application configuration file (Web.config) or on the page by setting this attribute to false.
Note
This functionality helps reduce the risk of cross-site scripting attacks for straightforward pages and ASP.NET applications. An application that does not properly validate user input can suffer from many types of malformed input attacks, including cross-site scripting and Microsoft SQL Server injection attacks. There is no substitute for carefully evaluating all forms of input in an application and making sure that they are either properly validated or encoded, or that the application is escaped prior to manipulating data or sending information back to the client.
only two letters away from being an asset
|
|
|
|
|
thanx i will try that then i will inform U 
|
|
|
|
|
Asalam o Alaikum:
I have made a desktop application in c# which gets text from the controls like textboxes.on some forms it works fine but sometime gives this error
Access violation writing location 0x00000000
how this error can be removed.
Thanx
|
|
|
|
|
This will happen when you assign something to a NULL pointer.
Put a break point and debug step by step. See the variable at the left of error happening line.
Best Regards,
Suman
|
|
|
|
|
It happens when this line executes
SendMessage(lvwHwnd, LVM_GETITEMTEXT, selectedrow, _lvi);
_lvi is the pointer which is not null it has some address.
hopefully this info will help u to answer
Thanx
|
|
|
|
|
Seems the wrong forum (C++ one is more appropriate), anyway...
you have to pass valid pointer to a valid LVITEM struct, i.e. a properly initialised struct (you have to take special care with pszText and cchTextMax members, the former must point to an allocated buffer, the latter must contain the size of the buffer itself, see MSDN [^]).
Hope that helps.
If the Lord God Almighty had consulted me before embarking upon the Creation, I would have recommended something simpler.
-- Alfonso the Wise, 13th Century King of Castile.
|
|
|
|
|
Hi,
if you happen to send a message to another process, and that message needs an address,
then that address must be valid in that process, not in the local process.
whatever, publishing the entire method (and relevant data members) may allow us
to comment.
|
|
|
|
|
Hello,
I want to generate random numbers to rename files when i uploaded employees CV.
suppose first i uploaded a cv for emp1 name aa.doc i rename it a random numbers.
then i uploaded a cv for emp2 name bb.doc. but also that files i remaned it randomly.
pls help me.
thanks.
|
|
|
|
|
generate a GUID or use the Random class.
hope this helps.
V.
I found a living worth working for, but haven't found work worth living for.
|
|
|
|
|
To generate random numbers, use Random class.
Not so detailed, I know, but you post wasn't that clear...
If the Lord God Almighty had consulted me before embarking upon the Creation, I would have recommended something simpler.
-- Alfonso the Wise, 13th Century King of Castile.
|
|
|
|
|
Hi;
I want to debug my application(which has been developed in c#) with Windbg.but i dont know how to use this software.
Can anybody guide me.
Thanx
|
|
|
|
|
|
|
Have you looked and tried to follow what the error description says
It is an error to use a section registered as allowDefinition='MachineToApplication' beyond application level. This error can be caused by a virtual directory not being configured as an application in IIS.
Is the virtual directory configured as an application in IIS?
-----
|
|
|
|
|
Is the GDIPlus functionalty in .Net threadsafe?
e.g For Bitmap class, the MSDN states "Any public static (Shared in Visual Basic) members of this type are thread safe. Any instance members are not guaranteed to be thread safe. ".
I am using the GDIPlus functionality inside .Net web services, is that safe?
Thank you,
Amit.
|
|
|
|
|
Hello friends ,
I have a problem with window services, actually i am new to it. and i have to complete few things.
i want my service get started as soon as system boots up. but i want it to perform any task only when any particular system event occurs..
so my question is How can i do this?
Can i add another event with apart from OnStart and OnStop
and if yes then how can i check the any perticular system event has occured..
Thanks in adv 
Ravi Kant Srivastava
(System Analyst)
HandsOn Technology & Engineering
Gurgaon
(India)
e-mail:ravikant@hte.co.in
|
|
|
|
|
Hi All,
I'm reasonably new to C# and have recently been coding parts of a C# user interface which operates in tandem with a C/C++ back-end. Things have been going O.K. until I had to make use of a function, whose prototype looks like this:
int functionName (const char* param1, const char* param2, char* nastyParam)
In my C# code, I have been dealing with the const char* params by mapping them to C# strings...that has been working quite well. Now the problem with nastyParam above is the intention is for the function to (possibly) return some string value to the caller via nastyParam. The following is what I have done thus far for the function above:
...<br />
private static extern int functionName(<br />
[MarshalAs(UnmanagedType.LPStr)] param1,<br />
[MarshalAs(UnmanagedType.LPStr)] param2,<br />
[MarshalAs(UnmanagedType.LPArray)] IntPtr nastyParam);
I've been trawling the net for solutions and came across a suggestion which involved mapping the char* to a C# IntPtr (as above)...the explanation in that article made sense to me, so I gave it a go but no luck thus far.
Anyone have any ideas?
cheers!
-- modified at 4:44 Friday 6th April, 2007
|
|
|
|
|
Have a look here [^] (see the author's approach to GetClassName marshaling).
Hope that helps
If the Lord God Almighty had consulted me before embarking upon the Creation, I would have recommended something simpler.
-- Alfonso the Wise, 13th Century King of Castile.
|
|
|
|
|
Hi,
you want a StringBuilder of sufficient capacity.
And it would be safer to pass the capacity (of buffer size) as a parameter as well
(so your C/C++ function can be made safe, in order to prevent buffer overflow problems).
|
|
|
|
|
Thanks guys. I'll give it a go and see how it turns out...
|
|
|
|
|
Worked beautifully. Thanks!
|
|
|
|
|
In C# (window application), I want to download a webpage content (ex:"http://codeproject.com") how can I do?
I know about "web browser control" but I don't want to use it.
Please help me!
Thanks!
|
|
|
|
|
Take a look at the HttpWebRequest class.
"Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning." - Rick Cook www.troschuetz.de
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
