C# Discussion Boards - CodeProject

Re: Looking for help in converting REG_BINARY to readable values

15-Jul-11 3:05

Can anyone help me convert this registry key into readable values?

http://img714.imageshack.us/img714/7929/regbinary1.jpg

into readable values? For some reason I can pull the registry key as a char[], but it ignores "4F 16 AB C1 4F

The other values convert to "System Byte []" , I'm not sure what the logic is behind the way these are setup?

Thanks for reading!

modified on Wednesday, July 20, 2011 1:29 PM

Richard MacCutchan15-Jul-11 4:47

Richard MacCutchan

15-Jul-11 4:47

1. Your link is wrong.
2. It does not have a "readable value", it's obviously some form of binary value used by the application that set it up in the first place.
3. A better post would be to explain why you want to interpret this, and what problem you are trying to solve.

The best things in life are not things.

Re: Looking for help in converting REG_BINARY to readable values

turbosupramk315-Jul-11 4:59

Re: Looking for help in converting REG_BINARY to readable values

15-Jul-11 4:59

The link is fixed, sorry about that.

I'm trying to figure out where the settings for power management ( Control Panel\All Control Panel Items\Power Options\Edit Plan Settings ) are saved in the registry. It appears they are stored as binary values in either:

HKEY_CURRENT_USER\Control Panel\PowerCfg
but more likely
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\PowerSettings\19cbb8fa-5279-450e-9fac-8a3d5fedd0c1\12bbebe6-58d6-4636-95bb-3217ef867c1a

... I'd like to decrypt them and find out if that is true, so I can reencrypt and deploy new values.

Mark Salsbery15-Jul-11 6:03

Mark Salsbery

15-Jul-11 6:03

turbosupramk3 wrote:
It appears they are stored as binary values in either:

They may be stored in both places - the first for per-user settings, the second for system-wide settings.

I don't think anything is encrypted. If you search you can find a lot of documentation - even whitepapers from Microsoft.

Mark Salsbery
Microsoft MVP - Visual C++
Java | [Coffee]

Re: Looking for help in converting REG_BINARY to readable values

turbosupramk320-Jul-11 7:29

Re: Looking for help in converting REG_BINARY to readable values

20-Jul-11 7:29

Hi Mark,

You are right, it was not encrypted, thank you for that.

My problem is now this, I'm looking to be able to enable and disable this for certain users, for when they have to work at home and wake on lan doesn't seem to work. I set a value in the registry manually yesterday, and it worked, but was reverted back this morning in the control panel, even though the registry key is still set to 0x0000000 . Any thoughts as to why?

turbosupramk321-Jul-11 5:12

Regular Expression to check for Oracle reserved words and special characters & sql injection attacks

21-Jul-11 5:12

Ok, I figured this out

Get your actual applied policies with the command RSOP in a command window, then go to Computer Configuration --> Adminstrative Templates --> System --> Power Management --> Sleep Settings

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Power\User\PowerSchemes\381b4222-f694-41f0-9685-ff5bb260df2e\238C9FA8-0AAD-41ED-83F4-97BE242C8F20\29f6c1db-86da-48c5-9fdb-f2b67b1f44da

Set ACSettingIndex to 0 (this changed the control panel value)

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Power\PowerSettings\29F6C1DB-86DA-48C5-9FDB-F2B67B1F44DA

Set ACSettingIndex to 0 (this changed the control panel value)

If your admin is smart, you may not have rights to these keys and make have to take ownership of the keys. After you change them you can remove rights for everyone and just give admins read only rights while still having ownership.

This will allow you to keep the box on, nights where you have to be on call and remote in, I am building a c sharp app that will set and reset these permissions for when I am on call, so the majority of the time the computer will go to sleep. A laptop might have to address the DC power settings also. I'll post code after I get the app built.

Member 297299215-Jul-11 1:21

Re: Regular Expression to check for Oracle reserved words and special characters & sql injection attacks

15-Jul-11 1:21

Hi
I have searched the internet and I have been able to find a regular expression that stops users from inputting into a text box words that Oracle uses as reserved words, or characters that it considers special to it unless they are enclosed in quotes along with a regular expression that detects sql injection attacks. Can anyone help?

BobJanova15-Jul-11 2:26

BobJanova

15-Jul-11 2:26

Use parameterised queries, unless there is a good reason not to. If there is a good reason not to, escape input on the server side when making up the query. Validating input fields in this way is one of the worst ways to prevent attacks (because it stops users entering legitimate information).

Re: Regular Expression to check for Oracle reserved words and special characters & sql injection attacks

Member 297299215-Jul-11 2:45

Re: Regular Expression to check for Oracle reserved words and special characters & sql injection attacks

15-Jul-11 2:45

We are in a way undertaking a parameterised queries. I am actually building a query tool in wpf and restricting what sort of queries a user can run. All I am trying to do is where a user sets a constraint, such name like = 'Bob', that they cannot enter a reserved word or use it to launch an attack. This is why I am looking for a regular expression!

BobJanova15-Jul-11 3:56

BobJanova

15-Jul-11 3:56

But what if the user's name includes a banned character (e.g. O'Donnell)? I'm sure there are a few people with surnames that are database reserved words, too. This is why you should escape whatever is passed to you so it isn't an injection string, not 'validate' in such a way that legitimate user input is excluded.

Producing a safe SQL string is relatively easy if what you're escaping is always going to be a quoted parameter, you need to escape quotes, and a good idea to do semicolons for paranoia too.

Re: Regular Expression to check for Oracle reserved words and special characters & sql injection attacks

GuyThiebaut15-Jul-11 2:50

Re: Regular Expression to check for Oracle reserved words and special characters & sql injection attacks

15-Jul-11 2:50

If you are using PHP at the front end this is a very helpful tutorial:

Clickety[^]

The generally accepted advice is to escape non alphanumeric characters in text entry boxes and

mysql_real_escape_string()

should do the job for you if it is PHP at the front end...

Continuous effort - not strength or intelligence - is the key to unlocking our potential.(Winston Churchill)

Member 297299215-Jul-11 2:57

Re: Regular Expression to check for Oracle reserved words and special characters & sql injection attacks

15-Jul-11 2:57

It is WPF or windows presentation foundation in c# with an Oracle 10g database not php and mysql

GuyThiebaut15-Jul-11 3:33

Re: Regular Expression to check for Oracle reserved words and special characters & sql injection attacks

15-Jul-11 3:33

Check this out:

oracle_sql_injection_attacks[^]

It is also the responsibility of the DBA to ensure that, whatever you pass in to Oracle, you are not able to create an injection attack - so talk this over with the DBA too.

Continuous effort - not strength or intelligence - is the key to unlocking our potential.(Winston Churchill)

Member 297299215-Jul-11 4:16

Re: Regular Expression to check for Oracle reserved words and special characters & sql injection attacks

15-Jul-11 4:16

We have already done this, but what we are doing is creating a query tool that runs against a query database that is copy of the main database. The users queries run against some views, because the users can create any number of combination of queries against these views it is not possible to binding or any of the usual stuff. Therefore, we have to be as flexible as possible. We control what they can select on and join on with the views but we cannot control their constraints such "name Like "Bob".

Therefore, it is imperative for me to have away of stopping "Bob; 'DROP TABLE'" type situations.

GuyThiebaut18-Jul-11 2:45

Re: Regular Expression to check for Oracle reserved words and special characters & sql injection attacks

18-Jul-11 2:45

Hi,

Just wanted to let you know that it is not me down-voting you comments.

I hope you find a solution, when you do let us know Smile | :)

Continuous effort - not strength or intelligence - is the key to unlocking our potential.(Winston Churchill)

PIEBALDconsult15-Jul-11 3:21

PIEBALDconsult

15-Jul-11 3:21

One of the problems will be having to keep it up to date.

Something that's easy to do is to see if the string contains multiple statements separated by semi-colons;
see my LibSql.SplitSqlStatements method in here[^].

Problem with messagequeue

prasadbuddhika15-Jul-11 1:19

prasadbuddhika

15-Jul-11 1:19

in my application i create a msmq , before creating the queue i check for existence and if exist delete it and then create, this works fine, but sometimes i get an exception saying "access denied" a security exception.
when creating the msmq i assign the permission too for the local user through "environment.user"

but still i get this exception ,

appreciate your ideas about this .

thanks in advance.

Getting Rows That Was Changed

AmbiguousName15-Jul-11 1:00

AmbiguousName

15-Jul-11 1:00

hello guys... I want to get a row from the table that was changed but got no clue what to do? Here is what I tried butcertainly it not working

SqlCommand cmd = new SqlCommand();
cmd.CommandType = CommandType.StoredProcedure;
cmd.CommandText = "StoredProcedure";

DataTable dt = this.GetDataTable(cmd); //a local function which returns DataTable
string row = st.RowChanged

Re: Getting Rows That Was Changed

DaveAuld15-Jul-11 1:16

DaveAuld

15-Jul-11 1:16

Well this depends on what you mean by Changed.

Did you make the change to the current dataset and haven't yet posted (committed) the changed?

You last looked at a table last week, and you want to now whats changed since then?

You have a dataset open, and you want to know some else had changed something with the dataset?

Please explain what you are trying to do and then the answers will hopefully come.......

Dave
Find Me On: Web|Facebook|Twitter|LinkedIn

Folding Stats: Team CodeProject

Re: Getting Rows That Was Changed [modified]

AmbiguousName15-Jul-11 1:29

AmbiguousName

15-Jul-11 1:29

Lets suppose that I changed the City from London to Paris of a particular record OR a number of records using some C# app. Now I want to get this/these rows.

modified on Friday, July 15, 2011 7:37 AM

Re: Getting Rows That Was Changed [modified]

DaveAuld15-Jul-11 1:41

DaveAuld

15-Jul-11 1:41

Ok, Lets assume that it is a current recordset that you hold;

First determine if there are changes: http://msdn.microsoft.com/en-us/library/czb9z269(v=VS.100).aspx[^]

Then, determine which rows have changed;
http://msdn.microsoft.com/en-us/library/thc1eetk.aspx[^]

The problem lies if you have committed the changes into the database for the current dataset, in which case these methods wont help, and you will probably need to rely on some custom change tracker based on timestamps.

Edit: How To: Custom Change Tracker[^]

Dave
Find Me On: Web|Facebook|Twitter|LinkedIn

Folding Stats: Team CodeProject

modified on Friday, July 15, 2011 7:56 AM

Re: Getting Rows That Was Changed

GuyThiebaut15-Jul-11 2:07