|
get it Search Engine [^]
please don't forget to vote on the post that helped you.
|
|
|
|
|
Hi
Throughout my application I have used stored procedures however on a few occasions I have wrritten the sql query into the c# as a string.
Is it a risk to have any sql queries written directly into the c# or is it only certain circumstances where it is a risk?
thanks 
|
|
|
|
|
This question has nothing to do with ASP.NET.
Try typing SQL Injection into the search box for this site, and you'll find an excellent article explaining what SQL injection is ( I am assuming you do not know ) and how to avoid it. This should help you work out if your queries could be affected by it.
Christian Graus
Please read this if you don't understand the answer I've given you
"also I don't think "TranslateOneToTwoBillion OneHundredAndFortySevenMillion FourHundredAndEightyThreeThousand SixHundredAndFortySeven()" is a very good choice for a function name" - SpacixOne ( offering help to someone who really needed it ) ( spaces added for the benefit of people running at < 1280x1024 )
|
|
|
|
|
Christian Graus wrote: This question has nothing to do with ASP.NET.
I wouldnt say it has nothing to do with asp.net
I have written the applicaion in asp.net and used c# as the backend code.
The context of the question relates back to an asp.net application
But thanks for the article advice
|
|
|
|
|
OK, I have read the article but I would like to clarify my question
If I had the following:
string sql = "Select * from table"
If the above code was on a page_load event and was not linked to a textbox i.e. was not selecting a value from the database which matched the value in the textbox then surely this would not be vulnerable?
An attacker would not be able to manipultate this query as it is not linked to an input control, am I right?
thanks
|
|
|
|
|
Yes. In this case attacker won't be able to do injection. It usually happens when the query is formed by string concatenations.
|
|
|
|
|
|
I am using asp.net + c#.In my form i am using gridview in that i add one dropdownlist and textbox.dropdownlist filled values from database.when i change the selected index of the dropdown list i want to display corresponding datavalue in textbox.
How can i do it.I cant get the row index o the gridview when i select the dropdownlist selectedindex changed event.If anyone know this pls give the code.
|
|
|
|
|
You can use the find control to find the dropdownlist in the gridview
|
|
|
|
|
You can also do it using javascript.
Look at this example code.
HTML Source code
<asp:DropDownList ID="ddl" runat="server" onclick="GetValue(this);">
<asp:ListItem Value="1" Text="One"></asp:ListItem>
<asp:ListItem Value="2" Text="Two"></asp:ListItem>
<asp:ListItem Value="3" Text="Three"></asp:ListItem>
</asp:DropDownList>
<asp:TextBox ID="ddltext" runat="server"></asp:TextBox>
Javascript Code
function GetValue(ddlObj)
{
document.getElementById(ddlObj.id + 'text').value=ddlObj.options[ddlObj.selectedIndex].value;
}
please don't forget to vote on the post that helped you.
|
|
|
|
|
The only problem with javascript is that users can disable it in their browser.
|
|
|
|
|
i think u cant understand my problem.I filled dropdownlist with database values.and set datatextfield to "id" and datavalue field to "Name".When i change the index of the dropdownlist i want to fill the text box with corresponding datavalue field of the dropdown list.These dropdown and text box are in grid view.I use that code but u call javascript in onclick event so it display '1' .I think u understand my problem.pls replay to me
|
|
|
|
|
Looking For Selected Value In Dropdownlist In Gridview Using Javascript +asp Net?
|
|
|
|
|
Yes.I understood your problem.I have given you an example.
Put dropdownlist and textbox in ItemTemplate,Bind Dropdownlist with data.
When you select items from dropdownlist,selected item value will be filled in textbox using that javascript.call javascript on onclick event of dropdownlist,you can not call selectedIndexChanged event because it will execute on server side while onclick event will execute on client side.
please don't forget to vote on the post that helped you.
|
|
|
|
|
The datagrid gets populated with data, meaning to say it has no problem with retrieving data from database.
i have added the follwing in the webconfig.
<add key="CommandTimeout" value="60000">
<httpruntime maxrequestlength="2097151" executiontimeout="3600000">
still on exporting the data to excel i get timeout Expired.
code for exporting to excel
Response.Clear();
Response.Buffer = true;
Response.Charset = "";
Response.AddHeader("Content-Disposition", "attachment; filename=Export.xls");
Response.AddHeader("content-disposition", "filename=Export.xls");
Response.ContentType = "application/vnd.ms-excel";
StringWriter stringWriter = new StringWriter();
HtmlTextWriter htmlWriter = new HtmlTextWriter(stringWriter);
grdExport.RenderControl(htmlWriter);
htmlWriter.Write(stringWriter );
Response.Write(stringWriter.ToString());
Response.End();
Kindly help.
Thank you.
I live Quarter ahead from time
|
|
|
|
|
Can you schedule a job from ASP.NET so that a background worker process can do that and send an email to the user?
Vasudevan Deepak Kumar
Personal Homepage
Tech Gossips
A pessimist sees only the dark side of the clouds, and mopes; a philosopher sees both sides, and shrugs; an optimist doesn't see the clouds at all - he's walking on them. --Leonard Louis Levinson
|
|
|
|
|
which database extension file (sdb)
|
|
|
|
|
ServerBoss Database File (Proprietary database format used by multiple versions of ServerBoss; supports file locking to improve performance under heavy loads; ServerBoss setup data is stored in the ServerBoss.sdb file.)
|
|
|
|
|
can u give me link (download the serverboss software)
|
|
|
|
|
|
currently i m using asp.net with c# (.net 2005, 2.0 framework).
here i m having 5 variables (Either int or string) say.... A,B,C,D,E. And the variables contains....
A=1;B=2;C=1;D=3;E=2;
Here, i need the output of the counts of the values...
i.e.,
count1=2 (since, 1 value occur twice in the A,B,C,D,E collection)
count2=2 (since, 2 value occur twice in the A,B,C,D,E collection)
count3=1 (since, 3 value occur only once in the A,B,C,D,E collection)
how to do this? - KARAN
|
|
|
|
|
Build a hashtable, which stores the number as a key, and the number of times it appears as the value. That would be flexible for any numbers that get added to your collection.
Christian Graus
Please read this if you don't understand the answer I've given you
"also I don't think "TranslateOneToTwoBillion OneHundredAndFortySevenMillion FourHundredAndEightyThreeThousand SixHundredAndFortySeven()" is a very good choice for a function name" - SpacixOne ( offering help to someone who really needed it ) ( spaces added for the benefit of people running at < 1280x1024 )
|
|
|
|
|
How can i find only the current page gridview rows?
If you have an apple & I have an apple and we exchange our apples, then each of us will still have only one apple but if you have an idea & I have an idea and we exchange our ideas, then each of us will have two ideas!
|
|
|
|
|
What do you mean?
You can set the gridview so paging is disabled.
There must be a current page tag you can use as well
|
|
|
|
|
i meant , in my first page , which contains 10 rows , how can i loop only for those ten rows .
If you have an apple & I have an apple and we exchange our apples, then each of us will still have only one apple but if you have an idea & I have an idea and we exchange our ideas, then each of us will have two ideas!
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
