ASP.NET

Save file from library class referenced from webservice

2-Apr-09 19:05

Hi,

Can u also pls send yr SP code as well.

Regards
Anil Pal

AlexeiXX32-Apr-09 11:29

Re: Save file from library class referenced from webservice

2-Apr-09 11:29

Hi, thanks for looking

I have a library class "BL" and a webservice "WS", i added a reference to BL from the webservice
I need to sent some data to the webservice from client apps (files and the files info and other stuff, ill save the info in the DB and want to save the file as separate files in the server)

How can i save the file in a folder in my web service WITHOUT sending the root from the web service (because the root will be calculated depending the id generated in DB)??
If i were doing this from a class in the webservice, i could use something like HttpContext.Current.Server.MapPath ("/")

Any suggestions??

Thanks in advance

Alexei Rodriguez

anilpal2-Apr-09 19:08

Re: Save file from library class referenced from webservice

2-Apr-09 19:08

Hi,

Can u also share ur root which is genrated based on ID.

Regards
Anil Pal

AlexeiXX32-Apr-09 19:11

Re: Save file from library class referenced from webservice

2-Apr-09 19:11

Alexei Rodriguez

anilpal2-Apr-09 19:18

Re: Save file from library class referenced from webservice

2-Apr-09 19:18

hi,

I am sying that can u give an example of yr root.

/MainFolder/File1

Regards
Anil Pal

AlexeiXX33-Apr-09 8:21

Re: Save file from library class referenced from webservice

3-Apr-09 8:21

Well
I need to save images inside an images folder in the website root, lets call it "Images/"
But the thing is that i dont know what the physical path will be in the server

If i were in a website i could use server.mappath but how do i access that from inside a separate class library project??
I would not like to send the physical path to this library class as a paremeter

Alexei Rodriguez

anilpal5-Apr-09 21:23

Re: Save file from library class referenced from webservice

5-Apr-09 21:23

Hi,

Here u go:

Solution1: You can pass imagePath as paramter from website, which may actually calling yr class lib project.

Solution2: You can define the image pathin web.config file n then from there u can read imagePath from class Lib proj.

Feel free to ask.

Regards
Anil Pal

AlexeiXX36-Apr-09 5:26

unable to retain value of session variable

6-Apr-09 5:26

Thaks for the reply
Unfortunately, none of these 2 approaches would work:
The first one requires the webservice to send the root as aparameter
The second one requieres that i know the final path, if i have a shared hosting, what would happen if the physical root is moved?? My app would stop working, thats why i cant use a fixed path, and should not send the root a s a parameter from the webservice calling the class, because of ntier separation, you know all that stuff about ntier development

The only solution is using the server.mappath("")
I could access this by adding a reference to system.net to the class library and then get the root with httpcontext.current.server.mappath("~/Images")

Alexei Rodriguez

parkash_C2-Apr-09 9:51

2-Apr-09 9:51

i m gettin problem with session variables

con.Open()
Dim cid, cpass
Dim cmd As New OleDbCommand("select stdid,passwrd from table1 where stdid='" & TextBox1.Text & "',passwrd = '" & TextBox1.Text & "'", con)
Dim dr As OleDbDataReader
dr = cmd.ExecuteReader
If dr.HasRows Then
While dr.Read
cid = dr(0)
cpass = dr(1)
con.Close()
Session("cid") = cid

Exit While
End While

Response.Redirect("details.aspx?cid=" & cid, False)

Else
Label1.Text = "Invalid username/password."
End If
con.Close()
Catch ex As Exception

Label1.Text = ex.Message

if i put cid = 'any direct value' it navigates coreectly
bt when i assign it a variable,it doest
it details page the line goes like
Dim cmd As New OleDbCommand("select name1,branch,grade from table2 where stdid= " & Request.QueryString("cid"), con)
here request.querystring("cid" ) isnt able to read the value
plz help me out ...

Colin Angus Mackay2-Apr-09 10:19

*Developer Day Scotland - Free community conference Delegate Registration Open

2-Apr-09 10:19

parkash_C wrote:
if i put cid = 'any direct value' it navigates coreectly

What does that mean? You put cid in multiple places? Do you mean in the session or on the Query String?

parkash_C wrote:
Dim cmd As New OleDbCommand("select stdid,passwrd from table1 where stdid='" & TextBox1.Text & "',passwrd = '" & TextBox1.Text & "'", con)

That code is vulnerable to a SQL Injection attack. Please learn how to protect yourself. Read this for a start: SQL Injection Attacks and Some Tips on How to Prevent Them[^]

parkash_C wrote:
here request.querystring("cid" ) isnt able to read the value

Again, what do you mean by that? Where is that code anyway? Is it in the details.aspx page?

parkash_C wrote:
Dim cmd As New OleDbCommand("select name1,branch,grade from table2 where stdid= " & Request.QueryString("cid"), con)

Again, this is vulnerable to a SQL Injection Attack. You don't even validate your input! A mallicious user could put anything on the Query string and attack your application.

parkash_C wrote:
plz help me out ...

I'm not entirely sure how. I don't understand what is wrong. Your title says "unable to retain value of session variable" but you never attempt to retrieve the session variable anywhere.

parkash_C2-Apr-09 10:32

2-Apr-09 10:32

thanks fr injection attacks
even i m layman at dis...
i wnt to send stdid to another page"details aspx"
i m using response.redirect("details.aspx?cid=" & cid,false)

in details page i m retrieving it thru stdid = request.querysting("cid")
bt it gives error dat no value given to stdid
i hope u cn undertsnd.....
or give me brief idea hw cn i pass values thru pages....so dat session retain their values.
thanku

Colin Angus Mackay2-Apr-09 11:19

*Developer Day Scotland - Free community conference Delegate Registration Open

2-Apr-09 11:19

Please don't use SMS/TextSpeak. It makes it increadibly difficult to understand you.

fr = from
dis = this
wnt = want
bt = but
dat = that
cn = can
undertsnd = understand
hw = how

You are not saving much with these abbreviations. And the time spent by me decrypting them is just irritating. In general people will be much more receptive to your request for help if you write properly.

Now, when you log in you should not ever pass the log in token (which is what cid effectively is) via a query string. It is very easy to hack and pretend to be someone else.

You have a Session so store the value in there. You can then retrieve it from the Session in the next page.

Ditch the query string as a way of passing information (especially something as sensitive as this) between pages unless you expect the user to also use the mechanism for linking directly to some page.

parkash_C2-Apr-09 11:26

2-Apr-09 11:26

ok...
i am storing session as if like Session("cid") = dr(0).
is this wrong way??
yes i m passin sensitive information.
but right now,i jus want it to work..
which is unfortunately not working..
Is there something like Viewstate, which can help me out..

Colin Angus Mackay2-Apr-09 12:04

*Developer Day Scotland - Free community conference Delegate Registration Open

2-Apr-09 12:04

parkash_C wrote:
i am storing session as if like Session("cid") = dr(0).

So far so good. You are storing the value of the first column in the session.

On your other page you can then do

cid = Session("cid")

However, if no rows are returned from the database then cid won't have anything in it. Are you sure data is being returned from the database?

parkash_C wrote:
Is there something like Viewstate, which can help me out..

Viewstate is for page postbacks. It has a very short lifespan. It sounds like you need a book or good article describing the state system in ASP.NET.

parkash_C2-Apr-09 12:11

2-Apr-09 12:11

yes cid and session("cid") do get values from database ,i m sure on this.
could u just tell me d difference between cid and session("cid")
or please provide me a good link
thanks.....

Colin Angus Mackay2-Apr-09 12:35

*Developer Day Scotland - Free community conference Delegate Registration Open

2-Apr-09 12:35

parkash_C wrote:
could u just tell me d difference between cid and session("cid")

cid is a variable in your program Dim cid, cpass. You have to make it again in the other page(s)

Session("cid") requests a value named "cid" from the Session state on your page.

parkash_C wrote:
please provide me a good link

It is your code. I'm just echoing it back with corrections/suggestions.

Yusuf2-Apr-09 12:30

Yusuf

2-Apr-09 12:30

parkash_C wrote:
thanks fr injection attacks

Do you know what you talking about?

Yusuf

Oh didn't you notice, analogous to square roots, they recently introduced rectangular, circular, and diamond roots to determine the size of the corresponding shapes when given the area. Luc Pattyn[^]

Colin Angus Mackay2-Apr-09 12:37

*Developer Day Scotland - Free community conference Delegate Registration Open

2-Apr-09 12:37

I get that a lot. I suspect many people either don't speak English all that well, or don't read the article so they don't know what's actually in it and then thank me for the opposite of what I gave them.

parkash_C2-Apr-09 12:49