|
That looks very much like the original code you posted. You're missing all of the required encoding.
For example, try entering a username of <script>alert("Test")</script> - you'll either get a message box pop up when the success page loads, or your browser will prevent access to the page with a warning about cross-site scripting.
You need to encode the value according to the context:
register.aspx.vb:
Dim name As String = HttpUtility.UrlEncode(username.Text)
Dim target As String = String.Format("~/Success.aspx?Name={0}", name)
Response.Redirect(target, True)
success.aspx.vb:
Public Class success
Inherits System.Web.UI.Page
Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load
Dim theName As String = Request.QueryString("Name")
If Not String.IsNullOrEmpty(theName) Then
Dim encodedName As String = HttpUtility.HtmlEncode(theName)
Name.Text = String.Format("{0}, ", encodedName)
End If
End Sub
End Class
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
Hello Richard
Thanks for that.
I actually have in aspx.vb:
Dim target = String.Format("~/Success.aspx?Name={0}", username.Text)
' Perform your Redirect '
Response.Redirect(target, True)
and in success.aspx.vb:
Public Class success
Inherits System.Web.UI.Page
Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load
If Request("Name") IsNot Nothing Then
' It exists, so set your label (and a trailing comma) to display your name '
Name.Text = String.Format("{0}, ", Request("Name"))
End If
End Sub
End Class
That seems to work, but I don't have HttpUtility.UrlEncode or HttpUtility.HtmlEncode.
Thanks again for your time.
|
|
|
|
|
Richard Deeming wrote: it is to prevent a cross-site scripting (XSS)[^] attack.
Yes, I intentionally left that out as to not overwhelm, but valid point.
Note, most browsers do a good job preventing that anyway.
There are only 10 types of people in the world, those who understand binary and those who don't.
|
|
|
|
|
I have an unordered list of Html.ActionLinks that work just fine except now we want the Admin link to become a hover dropdown with the actual Html.ActionLinks to be contained in the sub-menu items. What I have done is wrap<div> around the main Admin menu item on the Main menu bar and child <div> below. First below is the code I am using to do this:
VIEW
<ul>
<li>@Html.ActionLink("Home", "Index", "Home")|</li>
<li>@Html.ActionLink("My Account", "", "")|</li>
<li>@Html.ActionLink("Admin", "Index", "Admin")|</li>
</ul>
<div align="center">
<div class="content_head">
Admin Main Menu
</div>
<div class="content_body">
@Html.ActionLink("Admin Page", "Index", "Admin")
</div>
<div class="content_body">
@Html.ActionLink("Admin Info", "Index", "Admin")
</div>
</div>
<ul>
<li>@Html.ActionLink("Log Out", "LogOffAbacus", "Home")</li>
</ul>
}
SITE.css
.content_head {
width: 150px;
height: 30px;
background-color: #CCCCCC;
cursor: pointer;
}
.content_body {
display: none;
width: 150px;
height: 50px;
background-color: #9999FF;
}
SITE.js
$(".content_head").hover(function () {
$(".content_body").hide(100);
$(this).next(".content_body").slideToggle("slow");
})n;
Now, this does not work because of jQuery error "Microsoft JScript runtime error: Object expected" and I am unsure why. Now the big question, this method looks likes a bad way of doing this. Is there a better way to do this?
.
|
|
|
|
|
guys;
I gave a problem with __VIEWSTATE hidden input it lays on the page like a huge spider web. I want to reduce its size efficiently without adding enableViewState="false" to every control.
is it possible to do so?
Help people,so poeple can help you.
|
|
|
|
|
|
|
Hello friends, I need your help in this issue. Am working on exam system using asp.net. There is a feature I would like to apply. On the onload event of the welcome page, the application should check the devices' date and compare it with the current date. If the devices' date is not same as current date, the person should be redirected to a warning page with a warning message the device date is not accurate. Please set time and date. Example, if the current date is 10-09-2014 and the devices' date is 09-09-2014, that means the devices' date is not accurate. I really need this because the date and time student logged in will be auto-captured and saved to database for officials' use. I have googled alot but couldn't found any match and am not even sure if am using the right keywords. Please, any idea on how to play around this will be highly appreciated.
|
|
|
|
|
I think that you should not use the client date instead use your server date on student login so you would face no problem as the server date appears on the screen.
Help people,so poeple can help you.
|
|
|
|
|
Thanks. But, how can I capture the server date?
|
|
|
|
|
easily.
When a student logged in you save getdate() which would return the database time. or you pass the value of DateTime.Now for the web server time. and you can do the same for the time you want to send it with the response.
Help people,so poeple can help you.
|
|
|
|
|
Thanks I really appreciate your response. But, when if I use DateTime.Now, is the client device date that will be captured and the date might not be current. This is what am trying to avoid. To be more specific, assuming today's date now which is 11/09/2014 and maybe the student might not have his device date set(assuming the students' device date is 10/08/2014 instead of 11/09/2014, I want to compare the current date with the device date then if match, student should be allowed else should be prompt for system date correction. Anyway? Please.
|
|
|
|
|
Calling DateTime.Now from server-side code will capture the current date and time on the server. The client's date/time settings will have no effect.
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
Ok. Thanks. But, please how can I call the DateTime.Now on the server side?
|
|
|
|
|
Just add it to the code that's saving the details to the database:
yourInsertCommand.Parameters.AddWithValue("@StartDate", DateTime.Now);
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
I reset my systems' date to incorrect date and tried what you suggested. But, it was the system's date which is inaccurate it captured. Or will this before solve when the site has been host?
|
|
|
|
|
If you're testing the site locally, the client and server will be the same machine. If you change the client's date, then you're also changing the server's date.
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
I have .net application which loads data from file into DB2 , Drive iSeries to connect to DB2.
Its running really slow (10,000 rows per 1 hour).
The application is simple doing bunch of inserts/updates. Any idea how I can speed it up?
|
|
|
|
|
I had problems like that last year, but with MySQL.
That's the speed rate I had, about 10K per hour, going from disk drive to database.
I had about 50 sets of data that were over 250K rows each, Some took about 8 hours, others 3 hours.
I ended up buying a new workstation, which cut the time down to about 3 minutes per 10K records, over a network.
This is with a Dell T3600 with a 6 core Xeon CPU. What a difference.
Then there's code optimization.
Load up everything first, then write each record one at a time,
There are a number of ways to go about it, not sure what you choose, you sort of vague there.
|
|
|
|
|
|
Hi everybody,
i would need help on creating a layout just like that of GMail using CSS... there would be three divs, the left and right divs are to be fixed while the middle div should scroll- but with the scroll bar at the right most part of the window{ not within the middle div itself}
I have tried to create somthing similar but all i could end up getting it having the scroll bar within the middle div itself... 
any help would be appreciated
|
|
|
|
|
you mean this layout?
co nt en t co nt en t content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
content
co nt en t co nt en t
if so try this code
<div style="width:300px;height:400px;">
<div style="width:250px;background-color:gray;margin:0 auto;">
<div style="height:40px;border:dashed 1px blue;"></div>
<div style="float:left;border:dashed 1px blue;width:22px;">content content content content </div>
<div style="float:left;border:dashed 1px blue;width:200px;max-height:180px;overflow-y:auto;">content content content content </div>
<div style="float:left;border:dashed 1px blue;width:22px;">content content content content </div>
<div style="clear:both;"></div>
</div>
</div>
and you can also use some jquery solution for scrolling
Help people,so poeple can help you.
|
|
|
|
|
Something like this?
http://jsfiddle.net/37moe1oa/[^]
<style>
#left
{
width: 200px;
position: fixed;
top: 0;
left: 0;
}
#right
{
width: 200px;
position: fixed;
top: 0;
right: 0;
}
#middle
{
margin: 0 200px;
}
</style>
<div id="left">
Left column content here...
</div>
<div id="middle">
Middle column content here...
</div>
<div id="right">
Right column content here...
</div>
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
thanks a million.... just exactly what i wanted......
|
|
|
|
|
i wanna make a simple form login with asp.net using ibm db2 ...
but i'm still new do not understand about db2 ,
hope someone can help me and give me simple tutorial ..
thanks first ...
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
