|
erikhjerpe wrote: About Injection attacks Im´not afraid since the application is supposed for a closed network and without any input from users other than to load a form
Statistically most system breaches are inside jobs.
Upcoming events:
* Glasgow: Mock Objects, SQL Server CLR Integration, Reporting Services, db4o, Dependency Injection with Spring ...
"I wouldn't say boo to a goose. I'm not a coward, I just realise that it would be largely pointless."
My website
|
|
|
|
|
You´re right, at the moment I´m taking my first trembling steps in programming, and it´s probably a good Idea to learn from the start to think about security.
Thanks
|
|
|
|
|
We all have to start somewhere. Just a few tips of my own and I apologize if any are repeats.
Think stored procedures. That will solve the Sql injection attack problem by itself. At the very least use parameterized queries. This will solve more than just security issues. Imagine the headache of having to debug your app at 2am because somebody entered "Bob O'Malley" into a textbox?
put data connections, data readers, and commands into using statements. Especially the connections. Again, you don't want to be figuring out why your server came to a screeching halt at 2am because no connections ever closed.
DataSets are great, you can also use the reader to load that data into a collection of objects, close your connections, then pass the collection around anywhere you need it.
I know some of this may seem advanced if you're just getting started, but remember this is where you want to be going. It's never to early to start doing it right.
Oh, one more thing that I just noticed: you don't need a priming read on your datareader. This will actually cause you to throw away the first row of data. HTH.
J
Make the logo bigger
|
|
|
|
|
Dear all,
I am facing a problem with a javascript function i had with me javascript for country generation and also on change of country state generation w.r.t of country but i want to fetch the selected value of country and state and to update in the database using sqlserver.
sai krishna
|
|
|
|
|
If you divide your text into sentences, it might be possible to understand what you are trying to say.
As I gather it, you want to do something (update? insert?) with an MS SQL Server database from Javascript?
You can't do that. Well, it's possible, but that would mean that you expose your database login to everyone.
You have to post the information to the server, where you do the database work.
---
single minded; short sighted; long gone;
|
|
|
|
|
Thanks guffa,
for ur prompt msg, but i have a javascript code written for country selection and this is the aspx statement i am writing to call javascript
but in the javascript onchange event is to give the corresponding state of the country another javascript so what i have to do to get the selected value of the country
thanks once again
sai krishna
|
|
|
|
|
I'm not entirely sure I understand your problem either, but what it sounds like you want to do is populate a state combo box based on the users selection in a country combo box. You don't want connection strings in your web page unless your resume is up to date. I think you're going to have to look into an ajax solution unless you want to do a full postback each time the user changes their selection.
J
Make the logo bigger
|
|
|
|
|
dsaikrishna wrote: I am facing a problem with a javascript function i had with me javascript for country generation and also on change of country state generation w.r.t of country but i want to fetch the selected value of country and state and to update in the database using sqlserver.
Okay.
#1. Declare one variable in code-behind to hold the status.
string selectedCountry = string.Empty;
#2. Add one server-side hidden field (a HTML hidden field with RunAt="Server") in your page.
<input id="Hidden1" type="hidden" runat="server" onserverchange="Hidden1_ServerChange"/><br />
#3. Add change event of this hidden field
<br />
protected void Hidden1_ServerChange(object sender, EventArgs e)<br />
{<br />
<br />
}
#4. In onchange event of Country list, you can set the value to this hidden field.. For example, if you select "Singapore" from combobox, set this to hidden field by using javascript.
var objHdf = document.getElementById('Hidden1');<br />
objHdf.value = document.getElementById('cboCountry').selectedtext;<br />
#5. As soon as the value of hidden field get changed, the server side event of hidden field will be invoked. So, get the value from hidden and set it to string that we declare earlier..
<br />
protected void Hidden1_ServerChange(object sender, EventArgs e)<br />
{<br />
selectedCountry = Hidden1.Value; <br />
}
Okay. now, you get the value so, you can insert it to SQL database..
Hope it helps.. 
Thanks and Regards,
Michael Sync ( Blog: http://michaelsync.net)
If you want to thank me for my help, please vote my message by clicking one of numbers beside "Rate this message". Why vote? Plz Read it here. Thank you.
|
|
|
|
|
i would like to know how to create and use crystal reports in c#.net . do any one can briefly explain this.
|
|
|
|
|
1- you have to add crystal Report Viewer
2- add new crystal report on your applicatin (go to application solution explorer right click ,choice new item and choice crystal report)
3- you have to specify provider ado for example and choice the table
4- go to properties and choice your report in field report source
|
|
|
|
|
Hi guys I know this is simple but still could u help me out !
for instance I ve got 2 forms (in one project), in the first form i have a text box with a button, I enter something in the box and click the button. the second form pops up and i want to use that text that I entered previously, how can I do it ? cause if I creat a new instance of the first form all the values would be wiped out !
Thanx
Mr.K
|
|
|
|
|
You must get that data from your first form and give them to the second form you can do this using constructor for second form
if you see it from outside it would be like this (there are tons of other ways to do this)
<br />
<br />
Form1 frmGetData=new Form1();<br />
<br />
frmGetData.ShowDialog();<br />
<br />
Data myData=frmGetData.GetData();
<br />
Form2 frmUseData=new From2(myData);<br />
<br />
frmUseData.Show();<br />
<br />
good luck
|
|
|
|
|
|
Like I said here "Get control from another form"[^], you can create public property.
eg: Form1.
<br />
public string MyValue<br />
{<br />
get<br />
{<br />
return "This is my value";<br />
}<br />
}<br />
<br />Form2
<br />
Form2 obj = new Form2();<br />
MessageBox.Show(obj.MyValue);
Hope it helps..
Thanks and Regards,
Michael Sync ( Blog: http://michaelsync.net)
If you want to thank me for my help, please vote my message by clicking one of numbers beside "Rate this message". Why vote? Plz Read it here. Thank you.
|
|
|
|
|
Hello Friends,
I had an mdiParent form and an other form2 (this is not child form).
their is an label on mdiParentForm whose text value is "XYZ" and I want to change its text value on the click event of button on form2 and at the same time it should reflect on mdiParentForm.
But i am unable to do so.
I am using this .
ON button_click event
i made an object of mdiParentForm
and with that object i change the text value of label but it is not reflected on mdiParent.
Regards,
rahul saini
|
|
|
|
|
Hi
I think you make a new instance of your MdiForm and set the text value for it and so your onld mdi does not reflect that (maybe I'm wrong)
It can be do like that
create an object of your mdiForm and use it and when you create an object from form2 pass mdiObject to form2
<br />
MdiForm frm;<br />
public Form1(MdiForm frm)<br />
{<br />
InitializeComponent();<br />
this.frm=frm;<br />
}<br />
<br />
private void button1_Click(object sender, EventArgs e)<br />
{<br />
this.frm.label1.Text = "Hello";
Application.DoEvents();
}<br />
and if you use the mdiForm in it other forms frequently you can make access to it through a static Class
good luck
|
|
|
|
|
Hi,
Thanks for your help.
But it is giving error.
NullReferenceException was unhandled.
Object reference not sent to an instance of an object.
Regards,
rahul saini
|
|
|
|
|
Are you sure you pass a form to it ??!!
if you don't pass mdiForm always, you must check it for being not null for changing the text.
here is the code I checked it right now and it works!
<br />
<br />
namespace TestForms<br />
{<br />
public partial class Form1 : Form<br />
{<br />
Form2 frm;<br />
public Form1(Form2 frm)<br />
{<br />
InitializeComponent();<br />
this.frm = frm;<br />
}<br />
<br />
private void button1_Click(object sender, EventArgs e)<br />
{<br />
frm.label1.Text = "Hello";<br />
<br />
}<br />
}<br />
<br />
<br />
<br />
public partial class Form2 : Form<br />
{<br />
public Form2()<br />
{<br />
InitializeComponent();<br />
Form1 frm = new Form1(this);<br />
frm.Show();<br />
}<br />
}<br />
}<br />
<br />
Hope this one helps
|
|
|
|
|
namespace validation
{
public partial class Form1 : Form
{
public Form1()
{
InitializeComponent();
}
private void Form1_Load(object sender, EventArgs e)
{
// ArrayList d = new ArrayList(8);
Class1 d;
d = new Class1();
}
}
}
thsi is the form class(winodw form class)
following ios the user defined class
namespace validation
{
class Class1
{
internal protected int h = 0;
internal int i=0;
}
}
i know what is the internal and internal protected
that means in the same project , i can access the internal , internal protected member data/function anywhere???
Sonia Gupta
Soniagupta1@yahoo.co.in
Yahoo messengerId-soniagupta1
Love is Friendship and Friendship is Love....
|
|
|
|
|
You already have a thread about this that you started yesterday. Why don't you continue in that thread, instead of ignoring the people that actually tried to help you in that thread?
---
single minded; short sighted; long gone;
|
|
|
|
|
hello:
you hint an't in focus ,cannot comprehend you question..
sorry,english not is very godd!...
|
|
|
|
|
Hiiiii,
how i will get thumbnail image from a video clip.
that the thumbnail clips are only first frame of the video.
Please any one help me.
Thank you
sathishkumar
|
|
|
|
|
this might help -> http://www.codeproject.com/csharp/steganodotnet4.asp[^]
<--my signature. -->
<font color="blue">Csharp</font> me = (<font color="blue">Csharp</font>)Dynamic_Sysop; <font color="#008000">// My Signature.</font><br><font color="#008000">$twins</font> = <font color="#008000">me.twins</font>(<font color="#800080">"Taylor"</font> , <font color="#800080">"Delta"</font>); <font color="#C0C0C0">// My twin daughters.</font><br>echo <font color="#008000">$twins</font>;
|
|
|
|
|
Why does AppDomain.Load() give me so much greaf when Assembly.LoadFrom() works like a charm? I need users to be able to browse for an assembly that's not in the apps directory, and it would be nice to be able to unload that assembly when they're done. But at least half of the time AppDomain.Load() fails.
|
|
|
|
|
Hi,
(first post up here )
I'm doing an MDI. I have the parent form (mdi container) and some child forms. My parent has a ToolStripPanel and my childs have a ToolStripContainer (first they had also a ToolStripPanel but they told me i'd better use a container instead of a panel for the childs)
When I create a ToolStrip in one of my childs or my parent and I want to drag it then I can move my ToolStrip to every panel/container from child to child from parent to child etc..
How can I make that I can only move my ToolStrip in the window where I created it. That I cannot drag it to an other form.
tnx
(sorry kinda new to c#)
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
