Click here to Skip to main content
15,892,674 members
Home / Discussions / Visual Basic
   

Visual Basic

 
AnswerRe: Addint items to a combobox Pin
AliAmjad19-Nov-07 2:49
AliAmjad19-Nov-07 2:49 
GeneralRe: Addint items to a combobox Pin
Luc Pattyn19-Nov-07 10:12
sitebuilderLuc Pattyn19-Nov-07 10:12 
GeneralRe: Addint items to a combobox Pin
Dave McCool20-Nov-07 23:02
Dave McCool20-Nov-07 23:02 
Questionhow 2 send pic with mail plz help! Pin
King of Kingz19-Nov-07 0:13
King of Kingz19-Nov-07 0:13 
AnswerRe: how 2 send pic with mail plz help! Pin
_mubashir19-Nov-07 2:00
_mubashir19-Nov-07 2:00 
AnswerRe: how 2 send pic with mail plz help! Pin
AliAmjad19-Nov-07 3:02
AliAmjad19-Nov-07 3:02 
QuestionIndexOutOfRange..please help Pin
kc_renji18-Nov-07 22:48
kc_renji18-Nov-07 22:48 
AnswerRe: IndexOutOfRange..please help Pin
Colin Angus Mackay18-Nov-07 22:58
Colin Angus Mackay18-Nov-07 22:58 
kc_renji wrote:
What would be the problem?


What line is causing the exception? You didn't say.


kc_renji wrote:
strVerifyMbr = "SELECT MemberId FROM datMember WHERE memberUserName='" + txtUserId.Text + "' AND memberPassword='" + txtPwd.Text + " '"


The above line is using SQL Injection. It is vulnerable to attack. Please read SQL Injection Attacks and Tips on How to Prevent Them[^]


kc_renji wrote:
Session("password") = sqlReader("memberPassword")


Why do you need to store the password in the session. This is privileged information, it shouldn't be passed around so freely. It would be better to store the password as a salted hash and compare the hash values.


kc_renji wrote:
Response.Write("window.alert('Invalid Password. Please try again.');<" + "/script>")</blockquote>

Never tell the user this much detail. It is a security risk. Tell them that the user name and password don't match.

Also, you shouldn't have database code in the presentation layer. There is no protection for the connection or reader in case something fails with the database interaction (i.e. you have no Try/Catch/Finally blocks)

<div class="ForumSig"><hr><small>Upcoming FREE developer events:
* Developer! Developer! Developer! 6
* Developer Day Scotland

<b>My <a href="http://www.colinmackay.net">website</a></b></div>

GeneralRe: IndexOutOfRange..please help Pin
kc_renji18-Nov-07 23:02
kc_renji18-Nov-07 23:02 
AnswerRe: IndexOutOfRange..please help Pin
Colin Angus Mackay18-Nov-07 23:00
Colin Angus Mackay18-Nov-07 23:00 
GeneralRe: IndexOutOfRange..please help Pin
kc_renji18-Nov-07 23:05
kc_renji18-Nov-07 23:05 
GeneralRe: IndexOutOfRange..please help Pin
Colin Angus Mackay18-Nov-07 23:47
Colin Angus Mackay18-Nov-07 23:47 
GeneralRe: IndexOutOfRange..please help Pin
kc_renji18-Nov-07 23:07
kc_renji18-Nov-07 23:07 
GeneralRe: IndexOutOfRange..please help Pin
Colin Angus Mackay18-Nov-07 23:50
Colin Angus Mackay18-Nov-07 23:50 
GeneralRe: IndexOutOfRange..please help Pin
kc_renji27-Nov-07 5:43
kc_renji27-Nov-07 5:43 
Questionvb2005 Pin
vb.net818-Nov-07 22:05
vb.net818-Nov-07 22:05 
AnswerRe: vb2005 Pin
DigiOz Multimedia19-Nov-07 8:55
DigiOz Multimedia19-Nov-07 8:55 
AnswerRe: vb2005 Pin
nishkarsh_k19-Nov-07 16:38
nishkarsh_k19-Nov-07 16:38 
QuestionHow to save datagridview contents into xml and retrieve the same Pin
VB 8.018-Nov-07 20:37
VB 8.018-Nov-07 20:37 
Questioncode error Pin
kc_renji18-Nov-07 20:36
kc_renji18-Nov-07 20:36 
AnswerRe: code error Pin
pmarfleet18-Nov-07 21:27
pmarfleet18-Nov-07 21:27 
GeneralRe: code error Pin
kc_renji18-Nov-07 22:07
kc_renji18-Nov-07 22:07 
QuestionDataGridView autogenerated columns Pin
divyesh143218-Nov-07 20:05
divyesh143218-Nov-07 20:05 
AnswerRe: DataGridView autogenerated columns Pin
Dave Kreskowiak19-Nov-07 10:09
mveDave Kreskowiak19-Nov-07 10:09 
QuestionPlz help me Pin
poonams18-Nov-07 19:58
poonams18-Nov-07 19:58 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.