Re: Getting Rows That Was Changed - C# Discussion Boards

First Prev Next

Re: Regular Expression to check for Oracle reserved words and special characters & sql injection attacks

Member 297299215-Jul-11 2:57

Member 2972992

15-Jul-11 2:57

It is WPF or windows presentation foundation in c# with an Oracle 10g database not php and mysql

Re: Regular Expression to check for Oracle reserved words and special characters & sql injection attacks

GuyThiebaut15-Jul-11 3:33

GuyThiebaut

15-Jul-11 3:33

Check this out:

oracle_sql_injection_attacks[^]

It is also the responsibility of the DBA to ensure that, whatever you pass in to Oracle, you are not able to create an injection attack - so talk this over with the DBA too.

Continuous effort - not strength or intelligence - is the key to unlocking our potential.(Winston Churchill)

Re: Regular Expression to check for Oracle reserved words and special characters & sql injection attacks

Member 297299215-Jul-11 4:16

Member 2972992

15-Jul-11 4:16

We have already done this, but what we are doing is creating a query tool that runs against a query database that is copy of the main database. The users queries run against some views, because the users can create any number of combination of queries against these views it is not possible to binding or any of the usual stuff. Therefore, we have to be as flexible as possible. We control what they can select on and join on with the views but we cannot control their constraints such "name Like "Bob".

Therefore, it is imperative for me to have away of stopping "Bob; 'DROP TABLE'" type situations.

Re: Regular Expression to check for Oracle reserved words and special characters & sql injection attacks

GuyThiebaut18-Jul-11 2:45

GuyThiebaut

18-Jul-11 2:45

Hi,

Just wanted to let you know that it is not me down-voting you comments.

I hope you find a solution, when you do let us know Smile | :)

Continuous effort - not strength or intelligence - is the key to unlocking our potential.(Winston Churchill)

Re: Regular Expression to check for Oracle reserved words and special characters & sql injection attacks

PIEBALDconsult15-Jul-11 3:21

PIEBALDconsult

15-Jul-11 3:21

One of the problems will be having to keep it up to date.

Something that's easy to do is to see if the string contains multiple statements separated by semi-colons;
see my LibSql.SplitSqlStatements method in here[^].

Problem with messagequeue

prasadbuddhika15-Jul-11 1:19

prasadbuddhika

15-Jul-11 1:19

in my application i create a msmq , before creating the queue i check for existence and if exist delete it and then create, this works fine, but sometimes i get an exception saying "access denied" a security exception.
when creating the msmq i assign the permission too for the local user through "environment.user"

but still i get this exception ,

appreciate your ideas about this .

thanks in advance.

Getting Rows That Was Changed

AmbiguousName15-Jul-11 1:00

AmbiguousName

15-Jul-11 1:00

hello guys... I want to get a row from the table that was changed but got no clue what to do? Here is what I tried butcertainly it not working

SqlCommand cmd = new SqlCommand();
cmd.CommandType = CommandType.StoredProcedure;
cmd.CommandText = "StoredProcedure";

DataTable dt = this.GetDataTable(cmd); //a local function which returns DataTable
string row = st.RowChanged

Re: Getting Rows That Was Changed

DaveAuld15-Jul-11 1:16

DaveAuld

15-Jul-11 1:16

Well this depends on what you mean by Changed.

Did you make the change to the current dataset and haven't yet posted (committed) the changed?

You last looked at a table last week, and you want to now whats changed since then?

You have a dataset open, and you want to know some else had changed something with the dataset?

Please explain what you are trying to do and then the answers will hopefully come.......

Dave
Find Me On: Web|Facebook|Twitter|LinkedIn

Folding Stats: Team CodeProject

Re: Getting Rows That Was Changed [modified]

AmbiguousName15-Jul-11 1:29

AmbiguousName

15-Jul-11 1:29

Lets suppose that I changed the City from London to Paris of a particular record OR a number of records using some C# app. Now I want to get this/these rows.

modified on Friday, July 15, 2011 7:37 AM

Re: Getting Rows That Was Changed [modified]

DaveAuld15-Jul-11 1:41

DaveAuld

15-Jul-11 1:41

Ok, Lets assume that it is a current recordset that you hold;

First determine if there are changes: http://msdn.microsoft.com/en-us/library/czb9z269(v=VS.100).aspx[^]

Then, determine which rows have changed;
http://msdn.microsoft.com/en-us/library/thc1eetk.aspx[^]

The problem lies if you have committed the changes into the database for the current dataset, in which case these methods wont help, and you will probably need to rely on some custom change tracker based on timestamps.

Edit: How To: Custom Change Tracker[^]

Dave
Find Me On: Web|Facebook|Twitter|LinkedIn

Folding Stats: Team CodeProject

modified on Friday, July 15, 2011 7:56 AM

Re: Getting Rows That Was Changed

GuyThiebaut15-Jul-11 2:07

GuyThiebaut

15-Jul-11 2:07

Is your table stored in a datawarehouse i.e. is it a type2 warehouse etc?

If it is a datawarehouse you are accessing the data from then it should be a simple(read simple to complicated here) matter of looking at the expired date and effective date columns of rows...

Continuous effort - not strength or intelligence - is the key to unlocking our potential.(Winston Churchill)

Only show decimals if there are any

Etienne_12314-Jul-11 22:09

Etienne_123

14-Jul-11 22:09

Hi
Is it possible to have a variable ONLY show decimals if it does have decimal values? E.g. if the value comes back grom the database as 500 then instead of showing 500.00, it should just show 500. If it comes back as 500.55, then it should show 500.55. Please note that I do not want to use string formatting here as I want to retain the decimal type for sorting purposes.

Re: Only show decimals if there are any

Etienne_12314-Jul-11 22:24

Etienne_123

14-Jul-11 22:24

So I found a way of doing this. If you use Decimal.ToDouble it seems to do the job Smile | :)

Re: Only show decimals if there are any

Shameel15-Jul-11 2:00

Shameel

15-Jul-11 2:00

Converting your Decimal value to Double may result in loss of precision. Instead, keep it Deciamal and use ToString() to display it in a certain format.

Re: Only show decimals if there are any

Wayne Gaylard14-Jul-11 22:32

Wayne Gaylard

14-Jul-11 22:32

I am not sure which version of .Net you are using but in VS 2010(.Net 4.0) in a winforms app, this seems to be the default behaviour. I know if I want to always show the decimal part (500.00), that is when I need to go the ToString route. I just tested with a listbox and with textboxes, and I get no decimal points if the decimal is a whole number.

...and I have extensive experience writing computer code, including OIC, BTW, BRB, IMHO, LMAO, ROFL, TTYL.....

Re: Only show decimals if there are any

GuyThiebaut14-Jul-11 22:55

GuyThiebaut

14-Jul-11 22:55

From a general programming point of view you should never change your data type to satisfy display requirements, if by changing that datatype you remove precision.

Converting to a double will lose some precision.
Although very little precision is generally lost - if you are performing financial calculations this can cause a problem further on down the line when figures do not match.

So it really is better to stick with decimal and then to format it for display - otherwise you may be asking for trouble later when the FD asks "Why don't the totals match?"...

Continuous effort - not strength or intelligence - is the key to unlocking our potential.(Winston Churchill)

Re: Only show decimals if there are any

Wayne Gaylard14-Jul-11 23:23

Wayne Gaylard

14-Jul-11 23:23

Hear, Hear.

...and I have extensive experience writing computer code, including OIC, BTW, BRB, IMHO, LMAO, ROFL, TTYL.....

Re: Only show decimals if there are any

Blue_Boy14-Jul-11 23:50

Blue_Boy

14-Jul-11 23:50

I agree with you.

I Love T-SQL
"VB.NET is developed with C#.NET"
If my post helps you kindly save my time by voting my post.

www.cacttus.com

Re: Only show decimals if there are any

Etienne_12315-Jul-11 2:56

Etienne_123

15-Jul-11 2:56

I`m not too concerned with precision. At the moment it works perfectly - If I do have decimals it keeps the decimals and if I don't then it shows the whole number. I just tested this by creating a random decimal of 4.4567, converted it to a double and the value stayed the same

Re: Only show decimals if there are any

PIEBALDconsult15-Jul-11 2:55

PIEBALDconsult

15-Jul-11 2:55

Etienne_123 wrote:
ONLY show decimals

Show it where? Confused | :confused:

Re: Only show decimals if there are any

DaveyM6917-Jul-11 5:52

DaveyM69

17-Jul-11 5:52

Etienne_123 wrote:
I do not want to use string formattin

What is displayed on screen is a string that is currently using the default formatting, so doing a custom string format is the correct way. The sort should be done on the real values regardless of how it's displayed IMO, this way therer is no issue.

Dave

Binging is like googling, it just feels dirtier.
Please take your VB.NET out of our nice case sensitive forum.
Astonish us. Be exceptional. (Pete O'Hanlon)

BTW, in software, hope and pray is not a viable strategy. (Luc Pattyn)

chemsketch

albertodiprima14-Jul-11 1:55

albertodiprima

14-Jul-11 1:55

i'm developing a chemistry program i find this code in the program chemsketch
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
' ACD CHEMBASIC DEMO PROGRAM '
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
' '
' Molecular 3D Editor//MIRROR.BAS '
' '
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
' '
' The utility flips the molecule at a plane '
' '
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

CONST TITLE="ChemBasic Molecular Editor // Mirror"

'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
Function Main As String
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
' MIRROR.BAS '
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
Dim page,diag,asm,struc As Object, s As String, OK As Boolean

MAIN="Failed or nothing to do!"

' Get 1st structure from the curent page
page=ActiveDocument.ActivePage
If page.Diagrams.Count<1 Then Exit Function
diag=page.Diagrams.Item(1)
asm=Assemblies.AddFromCS(diag)
If asm=NULL Then Exit Function
struc=Asm.Structures.Item(1)
If struc=NULL Then Exit Function

' Do the job
s=UserIOBox("Flip X, Y, or Z coordinate ?" ,TITLE , "Y")
s=UCase(Left(s,1))
If s="X" OR s="Y" OR s="Z" Then
' Flip !
Call Flip(struc,s)
' Show the results
RefreshDiagram(diag,struc)
Main="Completed."
End If

End Function

'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
Sub Flip(struc As Object,s As String)
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
Dim x,y,z As Double, asm,at As Object
With struc
asm=.Assembly
For Each at In asm
.GetAtomXYZ(at,x,y,z)
Select Case s
Case "X"
x=-x
Case "Y"
y=-y
Case "Z"
z=-z
End Select
.SetAtomXYZ(at,x,y,z)
Next at
End With
End Sub

'***LIBRARY PROCEDURES BEGIN

'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
Sub RefreshDiagram(diag As Object,strmol As Object)
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
' LIB0.BAS PROCEDURE '
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
' Redraws the diagram with a molecule or structure object '
' '
' ENTER '
' diag object of type CS_DIAGRAM '
' strmol object of type CB_MOLECULE or CB_STRUCTURE '
'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
Dim l,t,w,h,w1,h1 As Integer
diag.GetBound(l,t,w,h)
diag.Depict(strmol)
diag.GetBound(w,h,w1,h1)
diag.SetBound(l,t,w1,h1)
End Sub

'***LIBRARY PROCEDURES END

'@@@@@@

Re: chemsketch

Richard MacCutchan14-Jul-11 1:56

Richard MacCutchan

14-Jul-11 1:56