ASP.NET

Re: Get value from javascript function into Dropdown and Display selected Value

27-Jun-09 2:08

your question is clear... Plzzzz send the code upto which level you have tried and the line where u r getting that error...

Padmanabhan
My Articles:
Articles[^]
My latest Article:
Word Automation[^]

.NET- India 27-Jun-09 2:15

.NET- India

27-Jun-09 2:15

This is my javascript function
function myFunc()
{
if(document.getElementById("ddlCountry").value=="India")
{
//Remove Existing Values
var e=document.getElementById("ddlState");
while(e.firstChild)
{
e.removeChild(e.firstChild);
}
var myArray=new Array(2);
myArray[0]="Delhi";
myArray[1]="Mumbai";

for(var i=0;i<myArray.length;i++)
{
//Option(Text,Value)
e.options[i]=new Option(myArray[i]);
}

}
else if(document.getElementById("ddlCountry").value=="America")
{
//Remove Existing Values
var e=document.getElementById("ddlState");
while(e.firstChild)
{
e.removeChild(e.firstChild);
}

var myArray=new Array(2);
myArray[0]="Washington";
myArray[1]="LA";

for(var i=0;i<myArray.length;i++)
{
//Option(Text,Value)
e.options[i]=new Option(myArray[i]);
}
}

}

This is my .aspx code
<asp:DropDownList ID="ddlCountry" runat="server" onchange="myFunc(this)">
<asp:ListItem Text="Select Country" Value="Select Country"></asp:ListItem>
<asp:ListItem Text="India" Value="India"></asp:ListItem>
<asp:ListItem Text="America" Value="America"></asp:ListItem>
</asp:DropDownList>
<asp:DropDownList ID="ddlState" runat="server">
</asp:DropDownList>

This is my Code-Behind(on button click event) code
string name = ddlCountry.SelectedItem.Text+","+ddlState.SelectedItem.Text;
Label1.Text = name.ToString();

And ddlState.SelectedItem.Text getting null that's why that's throwing error

Re: Get value from javascript function into Dropdown and Display selected Value

padmanabhan N27-Jun-09 2:29

Re: Get value from javascript function into Dropdown and Display selected Value

27-Jun-09 2:29

i too got the same error from your code... The problem is due to postback. The ddlCountry value is maintained but ddlState value is not maintained. So, the error appears. Try to maintain the value for the ddlState too...

Padmanabhan
My Articles:
Articles[^]
My latest Article:
Word Automation[^]

nitin_vatsus28-Jun-09 8:37

nitin_vatsus

28-Jun-09 8:37

Save the state of drop down list get value from request.form or query string do not fill all entry every time because if you did so every time new values is filled and state can not be maintained you can try one more option before submitting the form save the value into hidden variable by using java script and then get values from request object not from drop down because it lost their value when it fill again

ado.net

naveen attri27-Jun-09 1:41

naveen attri

27-Jun-09 1:41

hi
In my asp.net application i m updating a table.After that i m using those values
now i want to reverse those changes .i hav no idea how to do it
help me its urgent

Re: ado.net

padmanabhan N27-Jun-09 1:55

27-Jun-09 1:55

you can use transaction (commit and rollback) option.

Padmanabhan
My Articles:
Articles[^]
My latest Article:
Word Automation[^]

Re: ado.net

Abhijit Jana27-Jun-09 2:42

Abhijit Jana

27-Jun-09 2:42

naveen attri wrote:
In my asp.net application i m updating a table.After that i m using those values
now i want to reverse those changes .i hav no idea how to do it

U can have a look on Transaction .
Here is an sample,
HOW TO: Roll Back Updates After an Error When You Use DataAdapter and DataSet in ADO.NET and Visual C# .NET

naveen attri wrote:
help me its urgent

Not for all.

cheers,
Abhijit
CodeProject MVP
Web Site:abhijitjana.net
View My Recent Article

Strored procedure help

paypony27-Jun-09 1:27

27-Jun-09 1:27

set ANSI_NULLS ON
set QUOTED_IDENTIFIER ON
go

ALTER proc [dbo].[Usp_D_et_Login1234]
@name nvarchar(max),
@pwd nvarchar(100),
@type nvarchar(5)

as
begin
if @type='1'
begin
select DId,LoginName from dd_login where LoginName=@name and Password=@pwd
end

if @type='0'
begin
select RId,LoginName from dr_login where LoginName=@name and Password=@pwd
end

end

Is this stored procedure can be injected?
If yes tell me how ?
and also how to recover from it?

Member 387988127-Jun-09 1:30

Member 3879881

27-Jun-09 1:30

what u want exactly?,
u need how to excute and get the values in code part?

Thanks & Regards,
Member 3879881,
please don't forget to vote on the post

paypony27-Jun-09 1:32

27-Jun-09 1:32

no, i want to know whether anyone can enter into my database by using sql injections?

Member 387988127-Jun-09 1:38

Member 3879881

27-Jun-09 1:38

u can check it out in code part...,
like this:
private string [] BlackList;
          public string chkHome;
          public int chkAdminFold;
          private void Page_Load(object sender, System.EventArgs e)
          {
               try
               {
                    BlackList = new string[]{"--", "/*", "*/", "@@", "function", "truncate", "procedure",
                                                       "alter", "begin",   "create", "cursor",
                                                       "declare", "delete", "drop", "end", "exec",
                                                       "execute", "fetch", "insert", "kill",
                                                       "sysobjects", "</title>","<script","</script>","function", "syscolumns","table", "update"};

                    string ErrorPage = "/InputErrorPage.htm";

                    chkHome = Request.ServerVariables["URL"];
                    chkAdminFold = chkHome.ToLower().IndexOf("admin");
                    if(chkAdminFold!=1)
                    {

                         // Form
                         //for(int i=0; i<Request.Form.Count;i++)
                              //if(CheckStringForSQL(Request.Form[i].ToString()))
                                   //Response.Write(chkHome);
                                   //Response.Redirect(ErrorPage);

                         // Query String
                         for(int i=0; i<Request.QueryString.Count;i++)
                              if(CheckStringForSQL(Request.QueryString[i].ToString()))
                                   Response.Redirect(ErrorPage);

                         // Session
                         for(int i=0; i<Session.Count;i++)
                              if(CheckStringForSQL(Session[i].ToString()))
                                   Response.Redirect(ErrorPage);
                    }
               }
               catch(Exception ex)
               {
                    Response.Write(ex.Message);
               }
          }
          private bool CheckStringForSQL(string pStr)
          {
               if(pStr == string.Empty)
                    return false;
               else if(pStr == "")
                    return false;
               else if(pStr == null)
                    return false;

               if (pStr.CompareTo("")==0)
                    return false;

               string lstr = pStr.ToLower();

               for(int ii=0;ii<BlackList.Length;ii++)
               {
                    if(lstr.IndexOf(BlackList[ii])>=0)
                         return true;
               }
               return false;

          }

Thanks & Regards,
Member 3879881,
please don't forget to vote on the post

padmanabhan N27-Jun-09 1:33

27-Jun-09 1:33

paypony wrote:
Is this stored procedure can be injected?

first of all this is asp.net forum...

paypony wrote:
also how to recover from it?

what do u want to recover from it LoginName and Password!!!!
use output paramater and return it....

Padmanabhan
My Articles:
Articles[^]
My latest Article:
Word Automation[^]

paypony27-Jun-09 1:37

Re: Strored procedure help [modified]

27-Jun-09 1:37

Why are you waisting your time, if you dont know about sql injections. what is asp.net without database. And i m executing procedure from asp.net frontend ok

padmanabhan N27-Jun-09 1:42

27-Jun-09 1:42

paypony wrote:
what is asp.net without database

we can develop lot of application using asp.net(without using back end)... The idea of telling that you are posting it wrongly is not to irritate you... if you post it in SQL forum you could have get more answers....

Padmanabhan
My Articles:
Articles[^]
My latest Article:
Word Automation[^]

modified on Saturday, June 27, 2009 7:51 AM

paypony27-Jun-09 1:59

27-Jun-09 1:59

ok I have already posted there also.
but developer can better uggest me

Abhijit Jana27-Jun-09 2:25

Abhijit Jana

27-Jun-09 2:25

paypony wrote:
Why are you waisting your time,

Nobody is here to waste there time. CP Member are here to help all, based on their interest.

paypony wrote:
what is asp.net without database. And i m executing procedure from asp.net frontend ok

This is very common scenarios, that you are executing SP's from Asp.net. Even, you can execute the SP from other Languages also.

Your question is totally related with Database, and CP has a very strong DB Forum so, you should ask the question over there and will get the better answer.

paypony wrote:
if you dont know about sql injections.

Some one telling you the forum rule and not giving the answer, doesn't mean that he don't know the answer.

BTW : Here is one of my best article regarding SQL injection. Hope it help you in future.
SQL Injection Attacks and Some Tips on How to Prevent Them
By Colin Angus Mackay

Thank You !

cheers,
Abhijit
CodeProject MVP
Web Site:abhijitjana.net
View My Recent Article

padmanabhan N27-Jun-09 2:32

27-Jun-09 2:32

thanks for your support...

Padmanabhan
My Articles:
Articles[^]
My latest Article:
Word Automation[^]

paypony28-Jun-09 19:28