Web Development

22-Jan-04 23:34

When ever I have an apostrophe in a SQL statement, then there is always and error. Sometimes I have to add something like brendan's to a field. I am using an Access database. So a simple statement would look like...

SELECT User_UserFriend FROM tblUser where User_UserFriend = 'brendan's'

henningbenk22-Jan-04 23:36

22-Jan-04 23:36

Replace the Single Apostrophe (') with two apostrophes ('').
SELECT User_UserFriend FROM tblUser where User_UserFriend = 'brendan''s'

Brendan Vogt22-Jan-04 23:43

22-Jan-04 23:43

The string brendan's is going to come in from a textfield. I can't tell the user to add to apostrophes everytime. Is there no other way of bypassing this?

henningbenk23-Jan-04 0:00

23-Jan-04 0:00

Assuming the user input from textbox is stored in the string-variable "userinput":

in ASP (VBScript) do this:

SQL = "SELECT User_UserFriend FROM tblUser where User_UserFriend = '" & Replace(userinput,"'","''") & "'"

in ASP.NET(C#) do this:

SQL = "SELECT User_UserFriend FROM tblUser where User_UserFriend = '" + userinput.Replace("'","''") + "'"

Brendan Vogt23-Jan-04 2:09

23-Jan-04 2:09

Thank you.

Would you mind looking at my other SQL problem that I have posted on the site.

Smile | :)

ASP SQL Password Validation Not Working

Mike Dimmick26-Jan-04 5:50

Mike Dimmick

26-Jan-04 5:50

Use a parameter.

Assuming we're using VB[Script] and ADO:

Dim cmd As New ADODB.Command
cmd.CommandText = "SELECT User_UserFriend FROM tblUser WHERE User_UserFriend = ?"
 
cmd.Parameters.Add cmd.CreateParameter("FriendName", adVarChar, 40)
 
' Set cmd.ActiveConnection before doing this
cmd.Execute

ADO then does any escaping necessary, or passes the parameter directly to the underlying provider.

Brendan Vogt22-Jan-04 23:29

22-Jan-04 23:29

I want to check if the user name and password exists in the database. Table name is tblUser. User name is brendanvogt, and password is for example codeProject. I have a problem in that I can type codeproject in capital letters, and it will still accept the password. I can write a mixture of capitol letter and small letters, and it still accepts the password. I tried using the LIKE keyword, and it still does not work. Here is my SQL statement. I am using an Access database.;)

SELECT User_Username FROM tblUser WHERE User_Username = 'brendanvogt' AND User_Password LIKE('codeProject')

henningbenk23-Jan-04 2:14

23-Jan-04 2:14

Try this one:

SELECT User_Username FROM tblUser WHERE User_Username = 'brendanvogt' AND strcomp(User_Password,'codeProject',0) = 0

Brendan Vogt23-Jan-04 2:19

23-Jan-04 2:19

Thanks, will try it at home later.

Smile | :)

Sarvesvara (BVKS) Dasa23-Jan-04 21:57

Sarvesvara (BVKS) Dasa

23-Jan-04 21:57

gninneh wrote:
strcomp

SQLSERVER 2000 gives me an error stating this is an unrecognised function.

I was born intelligent
Education ruined me!.

Passing Values from One Page to Other

Richard Deeming18-Feb-04 2:59

Richard Deeming

18-Feb-04 2:59

For SQL Server 2000, you can specify a different collation for the comparison:

SELECT
    User_Username
FROM
    tblUser
WHERE
    -- Username is case-insensitive
    User_Username = 'brendanvogt'
AND
    -- Password is case-sensitive
    User_Password = 'codeProject' COLLATE Latin1_General_CS_AI

Or, you can specify a different collation for the column:

ALTER TABLE tblUser
    ALTER COLUMN User_Password COLLATE Latin1_General_CS_AI

To get a list of available collations, execute:

SELECT * FROM ::fn_helpcollations()

On earlier versions of SQL Server, or other databases, the simplest approach would be to return the password from the query, and perform the comparison in your ASP code.

HTH,
Richard

"These people looked deep within my soul and assigned me a number based on the order in which I joined." - Homer

Sukhen21-Jan-04 18:25

Sukhen

21-Jan-04 18:25

Can anybody help me how to pass variable values from one page to anothe rithout Querystring. I have dynamic database from which vaues are captured through a menu. I am trying to pass values in each row of the menu when user clicks a choice to another page. WTF | :WTF:

Re: Passing Values from One Page to Other

alex.barylski21-Jan-04 22:29

alex.barylski

21-Jan-04 22:29

3 choices

1) Query string
2) POST
3) Cookies

The word of the day is legs, let's go back to my house and spread the word Poke tongue | ;-P

Re: Passing Values from One Page to Other

Roger Wright22-Jan-04 6:03

Roger Wright

22-Jan-04 6:03

4) Session variables
5) Hidden INPUT form fields

Heard in Bullhead City - "You haven't lost your girl -
you've just lost your turn..." [sigh] So true...

Problem regarding Website structure design

coolvcguy21-Jan-04 14:19

coolvcguy

21-Jan-04 14:19

Hi all,
I m going to develop a site that is having lot's of category/sub category and different products. For example, www.amazon.com,www.ebay.com,www.shopping.com.

1) Can you suggest some articals or notes about having very good database design for the same ? As you can imagine there will be lots of category, sub category, inside category etc.

2) What should be the links of the differnet category ?
As some sites are having something like this http://www.epinions.com/btech ,http://www.epinions.com/bsrv-Office_Services ,http://www.epinions.com/bsrv-Office_Services-Business_Travel-All , http://www.epinions.com/bsrv-Office_Services-Online_Fax-All-eFax

Some of the compnies having url containing category and sub category.
some companies having just main category id.

I m sure they are doing considering search engines as well as
structure of the url.

Can some one can share their knowledge and experience to make my decision better?

Re: Problem regarding Website structure design

Colin Angus Mackay22-Jan-04 12:45

Colin Angus Mackay

22-Jan-04 12:45

I'd suggest a table relationship like the following:

Category
--------
CategoryID
CategoryName
ParentCategoryID

Product
-------
ProductID
ProductName
ProductLink
CategoryID

NOTE: If a product will appear in more than one category, delete the CategoryID in Product and add

ProductCategory
---------------
ProductID
CategoryID

Category had a zero/one-to-many relationship with itself.
Category has a one-to-many (or the second option a many-to-many) relationship with Product

Top level categories do not have a parent CategoryID

As for the links within the site - I'd just go for something like:
http://www.mysite.com/category.aspx?categoryID=354

From the code you can pick up the query string and use it to look the database up quickly.

IMO the directory approach is more difficult to set up and maintain.

Does this help?

--Colin Mackay--

EuroCPian Spring 2004 Get Together[^]
"You can have everything in life you want if you will just help enough other people get what they want." --Zig Ziglar

Re: Problem regarding Website structure design

coolvcguy22-Jan-04 16:29

coolvcguy

22-Jan-04 16:29

Thanks for your input..
It will certainly help to take decision.

Regards,
Coolvcguy

What parameters in IE makes my code invalid?

jan larsen21-Jan-04 3:06

jan larsen

21-Jan-04 3:06

I am using this piece of script to open and close categories in a menu bar:

<script language='JavaScript'>
function switchVisibility(strObjName)
{
   var opFolSrc = 'sysimageaction.asp?imagename=WebIcon_minus';
   var clFolSrc = 'sysimageaction.asp?imagename=WebIcon_plus';
   var theObject = document.all.item(strObjName);

   if (theObject.style.display == 'none')
   {
      document.all.item('IMG' + strObjName).src = opFolSrc;
      theObject.style.display = 'block';
   }
   else
   {
      document.all.item('IMG' + strObjName).src = clFolSrc;
      theObject.style.display = 'none';
   }
}
</script>

While it sucks like something that sucks a lot, it usually does what it is supposed to.
But at one of our customers the item list will never unfold (They are running IE6).
'Aha!', I thought, 'This must be a parameter in the internet options, piece of cake, just a matter of checking or unchecking an item'.
But I can't find any obvious settings that would disable JavaScripts, has anyone got a clue?

"After all it's just text at the end of the day. - Colin Davies

"For example, when a VB programmer comes to my house, they may say 'does your pool need cleaning, sir ?' " - Christian Graus

Re: What parameters in IE makes my code invalid?

henningbenk23-Jan-04 2:18

Re: What parameters in IE makes my code invalid?

23-Jan-04 2:18

I think it's under SecuritySetting of the (Internet)Zone:

Scripting > ActiveScripting

(I use german IE, so don't blame me, if it's not the correct naming for the english menu entries)

jan larsen23-Jan-04 2:25

jan larsen

23-Jan-04 2:25

Thank's a lot, that was the right setting.
Big Grin | :-D

"After all it's just text at the end of the day. - Colin Davies

"For example, when a VB programmer comes to my house, they may say 'does your pool need cleaning, sir ?' " - Christian Graus

sending byte stream to browser

Abhi Lahare21-Jan-04 1:58

Abhi Lahare

21-Jan-04 1:58

Hi all,

i got asp code for showing ms-excel file in broswer window, from microsoft site.
http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/Q193/9/98.ASP&NoWebContent=1[^]when i try to send the bytestream to the browser, it does nothing,But the readBinFile() function sets the binary stream perferctly.

Can anyone tell me why it is not showing excel file contents in the browswer?
(p.s: .xls File is not empty)

Thanks in advance,
AL

Re: sending byte stream to browser

l a u r e n22-Jan-04 16:37

l a u r e n

22-Jan-04 16:37

r u sending the right http headers b4 u send the data?

"there is no spoon"
biz stuff about me

Re: sending byte stream to browser

Abhi Lahare22-Jan-04 17:25

Abhi Lahare

22-Jan-04 17:25

Hi Lauren,

I am sending something like this

<br />
<% Response.Buffer = TRUE <br />
 Response.ContentType = "application/ms-excel" %><br />
<html><br />
<body><br />
<%<br />
   Dim vntStream<br />
   Set oMyObject = Server.CreateObject("MyObject.BinRead")<br />
   vntStream = oMyObject.readBinFile("c:\temp\tempxls.xls")<br />
   Response.BinaryWrite(vntStream)<br />
   Set oMyObject = Nothing<br />
   Response.End<br />
%><br />
</body><br />
</html><br />

Thanks in adavance,
AL

Re: sending byte stream to browser

henningbenk23-Jan-04 2:23