SQLCommand parameters to prevent SQL injections - C# Discussion Boards

Errm - you can inherit serializable classes. Who told you that you couldn't?

Take the following example:

[Serializable]
public class A
{
  private int count = 0;
  public virtual void OnInit()
  {
    count = 10;
  }
}

[Serializable]
public class B : A
{
  public override void OnInit()
  {
    base.OnInit();
  }
}

As you can see, B inherits from A. This is perfectly acceptable (and both classes would serialize just fine.

Deja View - the feeling that you've seen this post before.

VS 2003 that i'm working with tells me that serializable classes can't be inherited. i haven't tried inheriting them myself.
i'll just try it for myself.

Thanks for the example.
Regards Rose | [Rose]

Hai
I Fresher in C# i need a help. i using the datagrid view in a form1. i add the record the form another the form2. When the form2 use and load the form1.when form1 load the datagrid will automatical datagrid refresh.(form2 add record are show in the form1 datagrid)

nuraprakash

Hi,

i really don't understand your question.

You need to refresh the Grid (which is placed on Form1) from Form2?
If so: store a reference to your Grid from Form1 to your class Form2

Greetings

I have a stupid question like this
How do I copy a row and paste it into a new row at run time?
I know I can use the getClipboardContent method and work with this content. It seems to be a bad way, even unexpected result.
Help me solve my problem .
Thanks in advance

It seem to be a solution or an answer.

The ClipboardContent Method is ok.

pls put your code we will help you in this regard.

Regards,

Satips.

My code is here
private void copyToolStripMenuItem_Click(object sender, EventArgs e)
{
DataObject obj = dataGridView1.GetClipboardContent();
str = obj.GetText(TextDataFormat.CommaSeparatedValue).Substring(1).Split(',');

}

private void pasteToolStripMenuItem_Click(object sender, EventArgs e)
{
try
{
DataGridViewRow dgvRow = dataGridView1.Rows[0];
for (int i = 0; i < str.GetLength(0); i++)
dgvRow.Cells[i].Value = str[i];
dataGridView1.Rows.Add(dgvRow);
}
catch (Exception ex)
{

}
}

But it throws an exception "Rows cannot be programmatically added to the DataGridView's rows collection when the control is data-bound"
I am very confused. Kindly help me. Thanks

It seem to be a solution or an answer.

Hi,

Would this be a good way to prevent some SQL Injections?
I am trying to find the best easiest way to use of command parameters whenever i receive user input to query a database.
I have alot of queries so im trying to find a easy reusable procedures to make use of sqlcommand parameters.

<br />
SqlConnection conn = new SqlConnection(_WebConfig.ConnectionString.ToString());<br />
        try<br />
        {<br />
            <br />
            DataTable dtVal = new DataTable();<br />
            SqlDataAdapter da = new SqlDataAdapter("SELECT ID, Full_Name, Surname " +<br />
                                                                "FROM Users " +<br />
                                                                "WHERE Full_Name = @LoginUname " +<br />
                                                                  "AND Password = @LoginPword", conn);<br />
            da.SelectCommand.Parameters.Add("@LoginUname", SqlDbType.VarChar, 30);<br />
            da.SelectCommand.Parameters["@LoginUname"].Value = LoginUname;<br />
<br />
            da.SelectCommand.Parameters.Add("@LoginPword", SqlDbType.VarChar, 15);<br />
            da.SelectCommand.Parameters["@LoginPword"].Value = LoginPword;<br />
        <br />
            if (conn.State == ConnectionState.Closed | conn.State == ConnectionState.Closed)<br />
            {<br />
                conn.Open();<br />
            }<br />
            da.Fill(dtVal);<br />
<br />
            if (dtVal.Rows.Count == 1)<br />
            {<br />
                return true;<br />
            }<br />
            else<br />
            {<br />
                return false;<br />
            }<br />
        }<br />
        catch (Exception ex)<br />
        {<br />
            throw ex;<br />
        }<br />
        finally<br />
        {<br />
            conn.Close();<br />
            conn.Dispose();<br />
        }                  <br />

Any advice or other methods would be greatly appreciated
Thanks

SQL Injection Attacks and Some Tips on How to Prevent Them[^]

"Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning." - Rick Cook

www.troschuetz.de

Take a look at this[^]article it will help you.

Regards,

Satips.

Hi,
that link i snot giving any perticular information regrading validation.

pls help

I need help on encrypting password authentication using MD5, although i found the answer to doing it but it is done on Visual studio 2003, as iam doing it on Visual studio 2005 it is different coding style and when i dowloaded the vs 2003 coding file, it is unable to convert it to visual studio 2005 coding file, so i need your help on this problem or u can redirct me to any site that is doing this? i need the codes for password encrpytion using MD5. I am using Visual studio 2005 and sql server 2005. Thank you in advance.

The Article by Faina here may help you.

Regards,

Satips.

Hello,

Can you please tell me how can I MessageBox.Show the tag property of a listView item when a sub item is clicked?

Thanks.

ListView.HitTest returns an object that contains a reference to the ListViewItem AND the ListViewSubItem that was clicked.

If it was the first column, those will be the same; for subsequent columns, it will contain the correct item. You'll have to do some checking on those objects as it sets them to null sometimes and I forget now what the exact conditions are.

Hello everyone,

I am trying to create my own ContextMenu for a button in my Windows Application. The following is the code that I am using to have the ContextMenu. I was wondering how I can assign click event to the options in the ContextMenu?

//Declare the menu items and the shortcut menu.<br />
        MenuItem[] menuItems = new MenuItem[]<br />
        {<br />
            new MenuItem("Button Info. 1"),<br />
            new MenuItem("Button Info. 2"),<br />
            new MenuItem("Button Info. 3"),<br />
            new MenuItem("Exit")<br />
        };<br />
        ContextMenu buttonMenu = new ContextMenu(menuItems);<br />
        buttonMenu.Show(btnTest, new System.Drawing.Point(70, 30));

Thank you very much and have a great day.

Khoramdin

Hi,

ContextMenu behaves like other menus; you can add MenuItems to it as you wish.
So I suggest you create one MenuItem, set all its properties, add it to the
ContextMenu; then continue with the next one.

Smile | :)

Luc Pattyn

[My Articles]

Hi All,
Here I created a C# application, but now i want to deploye that application but the problem is that, how to create satup for that application, i don't know. if any one know plz helh me

thanx & regards
smk

Deploying C# Application.[^]

Regards,

Satips.

hey...

currently working on a graphics application using C# and openGL....intially the whole from was used for drawing...but now I want to refine my application by adding controls and drawing in a picture box but having problems properly defining a drawing area in a picture-box....kindly help me in this regard

thanks

You should not use a picture box, just draw your image in a paint event handler.

Christian Graus - Microsoft MVP - C++
Metal Musings - Rex and my new metal blog
"I am working on a project that will convert a FORTRAN code to corresponding C++ code.I am not aware of FORTRAN syntax" ( spotted in the C++/CLI forum )

How to read and write the word document file using string reader,writer c# with asp.net 2.0

Ravich.K

Article by victorbos this[^] may help you.

Regards,

Satips.

I want to dispose my previous form on the after select event of tree view control but when i try to do so i get the following exception message

System.ObjectDisposedException: Cannot access a disposed object named "TreeView".
Object name: "TreeView".

This problem has definate solution but It is bit complicated and I m not able to understand it plz any one can help me out in simple words or even some one only tell me that how can i close one form another form ....I tried it to close it even by making its object on that form n then call its close function ...But it too doesnt work ...i m building Windows application In C# 2003.Thanx for Ur help Smile | :)

Implement IDisposable Interface in all the pages and use the dispose method !!!

Regards,
Jaiprakash M Bankolli
jaiprakash.bankolli@gmail.com
http://jaiprakash.blog.com/