|
As a general rule of thumb web database security usually goes something like principle of least privilege.
1) Strip out any non essential characters
2) Check the format/validate
3) Check the length of data (although i'm sure languages like Perl and PHP or MySQL use dynamic memory allocation, so i'm not sure why length checking is important, except for just incase theres a bug, type situations.)
4) You may have to escape special characters (single quote, etc)
Use regex to quickly and easily strip non-required characters and check the format of the input.
See Regex Library[^] to save yourself some work.
Cheers 
How do I print my voice mail?
|
|
|
|
|
I have a problem with asp page, i have this statement:
" con.execute("insert into members ( first_name, last_name, mobile, email, username, password) values('"&firstname&"','"&lastname&"','"&mobile&"','"&email&"','"&username&"','"&password&"')")"
and i use access database
when i run this page i have an error that told me to make "updatetable query" and i don't know how to do this
could any one help me please
|
|
|
|
|
Check the permissions on the access .mdb file. If the iusr_machine account does not have write/modify access on the database, you cannot perform any updates. Also, because you have to modify these permissions, if possible move the access database outside of your IIS root folders.
|
|
|
|
|
1-Check your access database file .You must write,update permissions on it.
2-Try to open open database in write,update mode by code.
'---- LockTypeEnum Values ----
Const adLockReadOnly = 1
Const adLockPessimistic = 2
Const adLockOptimistic = 3
Const adLockBatchOptimistic = 4
--junior coder--
|
|
|
|
|
I have a need to do an ASP form for authenticating users against an LDAP server. Once the user has successfully authenticated, I need to programmatically set the REMOTE_USER environment variable to faciliate later access to a third party application.
Is there anyway to manually set the REMOTE_USER ServerVariable from server side ASP?
|
|
|
|
|
I need to logout a user when he goes to a page external to the site.
help please?
Chaitanya
|
|
|
|
|
Helo
well Dear what actually you need to do tell breifly
thanks
Balouchi
|
|
|
|
|
Thanks for your response.
I am trying to make a web application in which i want to logoff the user when he goes to a site url outside my application.
For eg. he is on the default page of my website and he goes to hotmail.com.
The problem is that session_end is not firing properly nor the session timeout is working.
I can't logoff the user on Unload event as he will get logged off browsing through the site also.
Basically i want to call logooff.asp when the user browses to a new site other than any of the web pages in my site.
|
|
|
|
|
Every control like textbox, dropdown in C#.Net web got to set the property AutoPostBack = True to run the event. Is it possible not to set PostBack to generate the event?
|
|
|
|
|
since the asp controls run on the server so the server should know about the event when it occurs and execute the right procedure, so the AutoPostBack property should be set to true, but if u don't need to postback to the server so i think u need to use HTML controls which runs on the client.
|
|
|
|
|
hi every one,
I have two HTML pages, tmp1.htm and tmp2.htm. In tmp2.htm i have one para like <p id="para1">..............</p>. When i need to refer this particular portion of tmp.htm from tmp1.htm, i write anchor tag as <a href="tmp2.htm#para1">.
Here i need your help, when i click on the link which is placed on tmp1.htm, it should call a javascript function placed in tag
Now tell me by using which event should i call that function.
try this link
http://www.geocities.com/seshu_raj/tmp1.htm
thanks a lot in advane
raju
|
|
|
|
|
When u click on the link then javascript function can be called on onClick event as:
<a href="tmp2.htm#para1" onclick="fonction1()">Something</a>
|
|
|
|
|
Hi,
Hi,
I am new to ASP (or ASP .NET) and I am trying to find resources to create an event-driven weekly calendar. I know there are many COTS products out there but I don't have budget to buy any so I need to do it on my own. I found a good example in MSDN ( http://msdn.microsoft.com/library/default.asp?URL=/library/en-us/dnasp/html/calendar.asp[^] )that shows you how to do it, this is a great start but the example is for a monthly view. I need a weekly view. Can anyone tell me where to find an example or how do I do the algorithm? ASP or ASP .NET would do. Thanks in advance.
PP.
|
|
|
|
|
Now, I'm no internet website expert. I've been developing some .htm files for use with a windows application (html help feature). I find a certain aspect of using word 2003 to be peculiar and was hoping someone could help me with some insight.
Let's say I create a new document within word and save it as a file MyFile.htm. Now, I want to display a picture in this file. I don't want a link to the picture. I want the actual picture to be shown in the file. So select "insert file" and choose the source directory where my file is. Now, I save the web page. Something peculiar happens. Now microsoft office has created a new directory and the pictures I inserted have been copied from the source directory into this new directory. Is this normal? I've already created a directory called "images" underneath the directory that contains all of my .htm files anyhow; this was the "source" directory I was using to store all of my image files (.jpg, .gif, etc.). I guess I didn't need to do that if office just creates a new directory anyhow. Anyone know why office does this when I use it to build web pages? Do all html editors do this? Any insight would be helpful.
Shawn
|
|
|
|
|
hi shawn,
its normal that the word creates a dir(with the same name of the html file) of its own and keep all the pic files in it. you dont have to worry about how to keep the images in a dir of your own.
but be sure when moving the file to move the dir also with it.
|
|
|
|
|
Personally I would not use Word to create webpages.
I use Notepad, but you can also find free html editors on the net.
You can also use dreamweaver or frontpage or something. Even Visual Studio can be of assistance.
These will give you more free choice on how to create you site-structure.
Good luck.
"If I don't see you in this world, I'll see you in the next one... and don't be late." ~ Jimi Hendrix
|
|
|
|
|
Hi...
I'm not sure this is the right place to ask - but cant find any better place...!
I'm writing an C# Application...
but i'm going to upload and download a file from a server...
I have no problem doing the download...
but i cannot figure out a way to upload it...!
Can anyone help me please...?
Thanks..!
QzRz
|
|
|
|
|
i'm using asp.net C#,
anyone know how to use an asp control in a java client side script ??
any suggestions ?
thanx in advance.
|
|
|
|
|
Generally all ASP.NET controls spit out HTML to the client-side. So there isn't an ASP.NET control for JavaScript to interact with.
For instance if you use asp:TextBox then it outputs input type="text". Your JavaScript can interact with that normal HTML input control.
What are you trying to do?
regards,
Paul Watson
South Africa
Michael Dunn wrote:
"except the sod who voted this a 1, NO SOUP FOR YOU"
Crikey! ain't life grand?
|
|
|
|
|
i'm trying to set a property of an asp control from client-side javascript coz i don't want to post back to the server,
can it be done ?
|
|
|
|
|
The valid answer is no, no you can't access an ASP.NET controls properties from the client side.
But, do you require valid HTML?
I ask because there is a way but it will invalidate your HTML. This way involves using control.Attributes.Add("propertyname", "propertyvalue");
You can then use JavaScript and the DOM to access that attribute on the client side.
It isn't valid though. If you need valid HTML then use hidden form fields and access them via JavaScript. Or place the data in the QueryString if you can (JavaScript can access that).
regards,
Paul Watson
South Africa
Michael Dunn wrote:
"except the sod who voted this a 1, NO SOUP FOR YOU"
Crikey! ain't life grand?
|
|
|
|
|
thanx for ur time, i got what u mean.
|
|
|
|
|
Hi,
I am trying to integrate an ActiveX component into a WebPage. The ActiveX returns Bytes to the Application in an Variant Array of Bytes. However I do not know how to read them. The VarType returns 8209 (Array 8192 + Byte 17). UBound returns the number of elements correctly However how do I get to the data !!!!
Sub I2CControl1_I2CMessage(ByVal Address)
Dim MessageData
Dim String
Dim DataLen
MessageData = I2CControl1.Input
DataLen = UBound(MessageData)
'This doesn't work
'String = I2CControl1.Input(0)
ListView1.ListItems.Add 1, , String
End Sub
Thanks in advance of anyones help.
Adrian
|
|
|
|
|
I'm facing a problem with using a function in a dll written in C++ for my webpage.
I need to call a function returning a string for display on my webpage but there's an "Unspecified error" message when i call the function on the webpage.
I have tried JNI in Java application and there's no problems there.
I can pint out the returned string with System.out.print but when i call the function in an applets the error message appears again.
Any suggestions or feedback is much appreciated. Thanks
|
|
|
|
|
Does anyone know if the back arrow can be disabled on the browser using ASPX.
Thanks
Mike
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
