Re: PLEASE HELP - C# Discussion Boards

Jesal Rana19-Jun-06 2:39

19-Jun-06 2:39

Hi,
U right the code below,

.......(Put the TextBox in the Web Form)

TextBox1.Text = DateTime.now; // For the current Date & Time //

I don't know how to omit sat. & sun days from the month.

Regards,

Jesal Rana

OK

PLEASE HELP

innocent7318-Jun-06 22:44

innocent73

18-Jun-06 22:44

Hello Folks,

I really need help to solve a real stupid situation
I have a SQL Server database table named MAINT_START.Columns of this table are:
PlateNumber char(11)--------> PK
MaintEntryDate smalldatetime---> PK
MaintReason char(20)

I want to update this table's MaintReason column via a SQL String. My code is like this:
/**********************************************************************
string strUpdate="UPDATE MAINT_START SET MaintReason='" + cMaintReason.Text.TrimEnd() + "'," +
" MaintCompany='" + cMaintCompany.Text.TrimEnd() + "'," +
" MaintCompanyTel='" + cMaintCompanyTel.Text.TrimEnd() + "'," +
" MaintCompanyAddress='" + cMaintCompanyAddress.Text.TrimEnd() + "'" +
" WHERE PlateNumber='" + cPlateNumber.Text + "' AND" +
" MaintEntryDate =Convert.ToDateTime(cMaintEntry.Text)";

SqlCommand aCommand=new SqlCommand(strUpdate,Myconnection);
/************************************************************************

Dear friends is it really impossible to insert or update a smalldatetime column?
Please Help..

Re: PLEASE HELP

Colin Angus Mackay19-Jun-06 0:05

Colin Angus Mackay

19-Jun-06 0:05

innocent73 wrote:
Dear friends is it really impossible to insert or update a smalldatetime column?

It is perfectly possible - But first you may want to address some deeper concerns. You should use parameterised queries for a number of reasons the main one is that it is more secure and less susceptable to a SQL Injection Attack (your code is highly suscetable to a SQL Injection Attack). Also it makes things easier to read.

See: SQL Injection Attacks and Tips on How to Prevent Them[^]

innocent73 wrote:
" MaintEntryDate =Convert.ToDateTime(cMaintEntry.Text)";

SQL server knows nothing of Convert.ToDateTime(cMaintEntry.Text) because that is C# code. If you continue in the way you have written your code so far, you just need to inject the text without conversion (but you have to assume that the text is in the correct format already). Alternatively you can pass a date in as a parameter (see the above linked article to see how) and secure your system at the same time.

Scottish Developers events:
* .NET debugging, tracing and instrumentation by Duncan Edwards Jones and Code Coverage in .NET by Craig Murphy
* Developer Day Scotland: are you interested in speaking or attending?
My: Website | Blog

Re: PLEASE HELP

innocent7319-Jun-06 0:19

innocent73

19-Jun-06 0:19

Firstly I would like to say thank you for you attention. I already tried to get success result via a stored procedure. And unfortunately the result was not ok.Here is my stored procedure:
/****************************************************************
CREATE PROCEDURE [MaintStartUpdate]
(@PlateNumber_1 [char],
@MaintEntryDate_2 [smalldatetime],
@MaintReason_5 [char](20),
@MaintCompany_6 [char](20),
@MaintCompanyTel_7 [char](11),
@MaintCompanyAddress_8 [nvarchar](50))

AS
UPDATE [CollLogistics].[dbo].[MAINT_START]
SET
[MaintReason] = @MaintReason_5,
[MaintCompany] = @MaintCompany_6,
[MaintCompanyTel] = @MaintCompanyTel_7,
[MaintCompanyAddress] = @MaintCompanyAddress_8

WHERE
PlateNumber = @PlateNumber_1 AND
[MaintEntryDate]= @MaintEntryDate_2
GO
/**************************************************************
I really want to crash my computer right now. Because this is a very stupid and easy SQL update...And I still could not do anything!

Re: PLEASE HELP

Colin Angus Mackay19-Jun-06 0:36

Colin Angus Mackay

19-Jun-06 0:36

innocent73 wrote:
And unfortunately the result was not ok.

What does that mean? How was the result "not ok"? What should it do and what does it do?

Some possible area to check:

innocent73 wrote:
(@PlateNumber_1 [char],

Be explicit - how many characters are in this parameter?

innocent73 wrote:
[char](20),

Are you sure a char(20) is what you want? If you supply a value like "hello" it will append 15 spaces to make up to the full size.

Re: PLEASE HELP

innocent7319-Jun-06 0:55

innocent73

19-Jun-06 0:55

I am really sorry for my bad english..

The question is I think very simple? How can I send a smalldate parameter from c# to SQL server. That's all!

Re: PLEASE HELP

Colin Angus Mackay19-Jun-06 1:54

Colin Angus Mackay

19-Jun-06 1:54

innocent73 wrote:
How can I send a smalldate parameter from c# to SQL server

DateTime theDate = new DateTime(2006,06,19);
SqlCommand cmd = new SqlCommand();
cmd.CommandText = "SELECT * FROM MyTable Where [date] = @someDate";
cmd.Parameters.Add("@someDate", theDate);
...

Re: PLEASE HELP

Nader Elshehabi19-Jun-06 1:14

Nader Elshehabi

19-Jun-06 1:14

I'm not really that experienced in SQL, but...

We all know that queries are only text, so if you want to pass a date to SQL server, you should pass it as a text. And why not? I believe it would be something like:

string strUpdate="UPDATE MAINT_START SET MaintReason='" + cMaintReason.Text.TrimEnd() + "'," +
" MaintCompany='" + cMaintCompany.Text.TrimEnd() + "'," +
" MaintCompanyTel='" + cMaintCompanyTel.Text.TrimEnd() + "'," +
" MaintCompanyAddress='" + cMaintCompanyAddress.Text.TrimEnd() + "'" +
" WHERE PlateNumber='" + cPlateNumber.Text + "' AND" +
" MaintEntryDate =" DateTime.Parse(cMaintEntry.Text).ToString();

Did you notice the Parse-ToString way?

Another way if you really want to pass it as a datetime -I really can't see why the persistence Smile | :)

- perhaps you should consider using Typed datasets rather than SQLCommands?? Just a suggestion.

I hope that was close enough;)

Re: PLEASE HELP

Colin Angus Mackay19-Jun-06 1:57

Colin Angus Mackay

19-Jun-06 1:57

Nader Elshehabi wrote:
We all know that queries are only text, so if you want to pass a date to SQL server, you should pass it as a text. And why not?

I'll tell you why not:

Because you open up the application to explotation by attackers. When you start injecting bits of text into SQL Strings you give the attacker an opening that they can use to create a bigger hole so that they can gain access to your system.

See the article I refered to in my initial reply: SQL Injection Attacks and Tips on How To Prevent Them[^]

Applying themes in application using VC#

vikas84singh18-Jun-06 22:33

vikas84singh

18-Jun-06 22:33

I am unable apply visual themes and effects in my application. which file i should use to inherit the class and its members to my application to use its effects.

Crack the core

Re: Applying themes in application using VC#

BoneSoft19-Jun-06 4:28

BoneSoft

19-Jun-06 4:28

I'm assuming you're talking about Windows XP themes...

There are a couple of things you have to do (with 2003 projects anyway, with 2005 I don't know that it's necessary) to show XP themes.

You have to set the FlatStyle property of all UI components that have the property to System:

this.checkBox1.FlatStyle = System.Windows.Forms.FlatStyle.System;

And you need to include a manifest file named "YOUR_EXE.exe.manifest" in the project like the following:

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
   version="1.0.0.0"
   processorArchitecture="X86"
   name="YOUR_EXE"
   type="win32"
/>
<description>.NET control deployment tool</description>
<dependency>
   <dependentAssembly>
     <assemblyIdentity
       type="win32"
       name="Microsoft.Windows.Common-Controls"
       version="6.0.0.0"
       processorArchitecture="X86"
       publicKeyToken="6595b64144ccf1df"
       language="*"
     />
   </dependentAssembly>
</dependency>
</assembly>

Where YOUR_EXE is the name of your exe. It's been a while, but I think that's all you have to do. Good luck.

Visit BoneSoft.com

howto use dll in windows applications ?

cmpeng3418-Jun-06 21:35

cmpeng34

18-Jun-06 21:35

hi all,
> how can i transfer a textbox.text with a dll from winapp1 to winapp2 ?

> the two applications do different jobs. but they have some textboxes in common.
so i just want the user to fill the winapp2.
when he/she clicks on save button, i want to transfer same values with a dll to the winapp1 and that dll should call save button event on winapp1 in it as well.

is this possible ?
if yes, how can i achieve this ?

help please,
thanks in advance,
bye.

Re: howto use dll in windows applications ?

Paul Brower19-Jun-06 4:05

Paul Brower

19-Jun-06 4:05

Use an interface dll. Both projects will reference the interface and implement it as well.

sql query

Mahmood Ilyas18-Jun-06 21:00

Mahmood Ilyas

18-Jun-06 21:00

i am using sql server along with C#

i want to use both string and integer values in one query and i am writing this query below

return "Insert INTO "+tableName+" (id,name,client,expstartdate,expenddate,cost,description)Values('+createpro.propertyPId+','"+createpro.propertyPname+"','"+createpro.propertyClient+"','"+createpro.propertyExpStDate+"','"+createpro.propertyExpEndDate+"','+createpro.propertycost+','"+createpro.propertydescription"')";

but this query giving an error,

is this query is right for the solution of my problem; if not then give me the solution

muhammad mahmood ilyas

Re: sql query

testy_proconsul18-Jun-06 23:08

testy_proconsul

18-Jun-06 23:08

put your query string in a local variable and display it. you will see that there are missing quotes. it looks like you mixed quote and apostrophe up.
try this (untested; im not sure about the date format):

"Insert INTO " + tableName + " (

id,
name,
client,
expstartdate,
expenddate,
cost,
description) Values( " +

createpro.propertyPId + ", " +
"'" + createpro.propertyPname + "', " +
createpro.propertyClient + ", " +
"'" + createpro.propertyExpStDate + "', " +
"'" + createpro.propertyExpEndDate+ "', " +
"'" + createpro.propertycost + "', " +
"'" + createpro.propertydescription + "'" +
")"

Re: sql query

Colin Angus Mackay19-Jun-06 0:07

Colin Angus Mackay

19-Jun-06 0:07

Your code is highly susceptable to SQL Injection Attacks - resolving the security problems will also resolve your other problems. See SQL Injection Attacks and Tips on How To Prevent Them[^]

Re: sql query

bannapradeep19-Jun-06 2:39

bannapradeep

19-Jun-06 2:39

hi try this one:-
"Insert INTO "+tableName+" (id,name,client,expstartdate,expenddate,cost,description)Values('+createpro.propertyPId+',' "+createpro.propertyPname+" ',' "+createpro.propertyClient+" ',' "+createpro.propertyExpStDate+" ',' "+createpro.propertyExpEndDate+" ','+createpro.propertycost+',' "+createpro.propertydescription" ')";
Blush | :O

Re: sql query

Colin Angus Mackay19-Jun-06 3:52

Colin Angus Mackay

19-Jun-06 3:52

What is it with people today - Just about every SQL question has been answered with something that simply invites an attacker into the system. In some cases warmly shaking the hand of the attacker as well while saying "Just take everythng you want"

Securing a database against SQL Injection attacks is so unbelievably easy, yet no one today seems to care:
SQL Injection Attacks and Tips on How to Prevent Them[^]

Re: sql query

Mahmood Ilyas21-Jun-06 19:06

Mahmood Ilyas

21-Jun-06 19:06

thank you every one for taking interest in my query

muhammad mahmood ilyas

Coding for search

ChennaiBabu18-Jun-06 20:44

ChennaiBabu

18-Jun-06 20:44

Hi all,
greetings.can any one give me the coding for searcha customer details in a web page by giving any of the details of a customer like customer id,or city,or country, like that.since i'm new new to C# kindly any one tell me the coding for the mentioned above in C#.

Babu

Re: Coding for search

Christian Graus19-Jun-06 0:15

Christian Graus

19-Jun-06 0:15

This problem has little to do with web programming. Once you have the result of your search, you can assign it to a datagrid and you'll be able to see it. What matters is, where is the data coming from, and how do you hope to gain access to it ?

Christian Graus - Microsoft MVP - C++
Metal Musings - Rex and my new metal blog

PictureBox problem

kissmac18-Jun-06 20:35

kissmac

18-Jun-06 20:35

I have a picture box designated as the one of the designs of my form, the problem is, when i assign an mdichild to my form, that mdichild is always at the back(behind) of my picturebox and i can't find any solution to put it in front of my picturebox... i need your help.. thanks a lot!

Re: PictureBox problem

WillemM18-Jun-06 21:26

WillemM

18-Jun-06 21:26

It should be possible to change the Z-Order, by calling MoveToBack() or something like that. I don't know the exact name of the method, since I dont have C# here right now.

WM.

What about weapons of mass-construction?

Re: PictureBox problem

Nader Elshehabi19-Jun-06 0:16

Nader Elshehabi

19-Jun-06 0:16

Hello
After instantiating the mdichild call the BringToFront() method.

Re: PictureBox problem

bannapradeep19-Jun-06 2:43

bannapradeep

19-Jun-06 2:43

Hi first put the picture box in a frame or in the group box then create mdichild Blush | :O

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.