ASP.NET

11-Sep-14 8:42

Hello

I am getting the following error message:

Server Error in '/' Application.
The resource cannot be found.
Requested URL: /Account/success.aspx

This is a Web form which inserts field data into a MS Access database and redirects the user to a 'You have successfully registered page'.

Everything was working fine locally until I decided to personalise it to show 'JohnSmith, you have successfully registered'.

I did that by adding the following to my register.aspx.vb file:

Response.Redirect("success.aspx?Data=" & Server.UrlEncode(username.Text))

and this to my success.aspx.vb file:

'Partial Class success
'Inherits System.Web.UI.Page

'End Class

Public Class success
    Inherits System.Web.UI.Page

    Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load

    End Sub

End Class

What could be the problem here, please?

Thanks!

ZurdoDev11-Sep-14 8:45

11-Sep-14 8:45

Member 8761667 wrote:
What could be the problem here, please?

Well, the error is pretty clear. The page /Account/success.aspx does not exist.

When you do Response.Redirect you likely will want to go to the root of the app and make your path from there so that if you deploy under a different structure, the code will still work. All you likely need to do is add ~ to your Response.Redirect.

Response.Redirect("~/success.aspx?Data=" & Server.UrlEncode(username.Text))

~/ will move to the root of the site.

There are only 10 types of people in the world, those who understand binary and those who don't.

Member 876166711-Sep-14 9:03

11-Sep-14 9:03

That's great 8761667

Thank you.

The error has gone but for some reason the 'You have successfully registered' is still not personalised.

The script that I added I basically got from a Microsoft tutorial.

ZurdoDev11-Sep-14 9:06

11-Sep-14 9:06

You're passing the username through the querystring but then never using it, at least not in the data you showed.

There are only 10 types of people in the world, those who understand binary and those who don't.

Member 876166711-Sep-14 9:15

11-Sep-14 9:15

How would I do that, Ryan? This is my first venture into asp.net.

ZurdoDev11-Sep-14 9:31

11-Sep-14 9:31

I suggest getting a book or going through online tutorials.

A simple method is to add a label and then in Page_Load take the value from Request.QueryString and put it into the label. But this is such basic stuff that I think you'll learn a lot more if you go through tutorials.

There are only 10 types of people in the world, those who understand binary and those who don't.

Member 876166711-Sep-14 9:33

11-Sep-14 9:33

Yes, OK, I will do.

Thanks

Richard Deeming11-Sep-14 9:49

Richard Deeming

11-Sep-14 9:49

A word of warning: Don't do what Ryan said. (Or at least, not exactly what he said!)

When you take a value from the request and want to re-display it, you need to make sure it's properly encoded. In this case, since you're display it as text within the HTML of the page, you need to use the HttpUtility.HtmlEncode method[^] to encode the string before showing it in a label.

The reason you need to encode it before displaying it is to prevent a cross-site scripting (XSS)[^] attack. Since the query-string could be modified by the user, they could pass in any HTML or javascript. If your code blindly copies that to the response, they can execute that script within your page. Since it's just a link, they could send that out to anyone they think might use your site, and anyone who clicked on the link would suddenly find that their authentication cookies have been stolen, or that your site has installed malware on their device.

You should never trust any input that comes from the user, whether it's in the query-string, part of a POST request, or even the HTTP headers. Always assume that all users are trying to hack into your site, and use the appropriate defences. Smile | :)

"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

Member 876166711-Sep-14 10:16

11-Sep-14 10:16

Hello Richard

Thanks for your post.

So in addition to this if I can get it to work:

Public Class success
    Inherits System.Web.UI.Page

    Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load

        If Request("Name") IsNot Nothing Then
             Name.Text = String.Format("{0}, ", Request("Name"))
        End If

    End Sub

End Class

I would also need the basis of something like this (which looks complicated!):

Imports System
Imports System.Web
Imports System.IO

Class MyNewClass
   Public Shared Sub Main()
      Dim myString As String
      Console.WriteLine("Enter a string having '&' or '""'  in it: ")
      myString = Console.ReadLine()
      Dim myEncodedString As String 
      ' Encode the string.
      myEncodedString = HttpUtility.HtmlEncode(myString)
      Console.WriteLine("HTML Encoded string is " + myEncodedString)
      Dim myWriter As New StringWriter()
      ' Decode the encoded string.
      HttpUtility.HtmlDecode(myEncodedString, myWriter)
      Console.Write("Decoded string of the above encoded string is " + myWriter.ToString())
   End Sub 'Main
End Class 'MyNewClass

As an aside, my 'you have successfully registered' page tells me after I complete the form myself:

'System.Web.UI.WebControls.TextBox, You have successfully registered'.

I can see 'System.Web.UI.WebControls.TextBox' if I hover my mouse over the word 'username' in my Register.aspx.vb file, but I don't know what the source of the error is.

Thanks again, Richard.

Richard Deeming12-Sep-14 1:37

Richard Deeming

12-Sep-14 1:37

You don't really need the console application, unless you want to play with the methods. All you really need is:

Public Class success
    Inherits System.Web.UI.Page

    Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load
        
        ' Store this in a local variable, so you're not repeatedly looking up the same item.
        ' Also, use Request.QueryString("Name") instead of Request("Name"), as you already know it's in the query string.
        Dim theName As String = Request.QueryString("Name")
        
        ' The value might be Nothing, or it might be an empty string:
        If Not String.IsNullOrEmpty(theName) Then
             
             ' Encode the value to display as text within an HTML context:
             Name.Text = HttpUtility.HtmlEncode(theName)
        End If

    End Sub

End Class

As for the page displaying your name as System.Web.UI.WebControls.TextBox, it sounds like you're doing something like:

Response.Redirect(String.Format("success.aspx?name={0}", UserNameTextBox))

You need to pass the value of the TextBox, which is in the .Text property. You should also make sure that you properly encode the value - this time, for a URL:

Dim theName As String = UserNameTextBox.Text
Dim encodedName = HttpUtility.UrlEncode(theName)
Response.Redirect(String.Format("success.aspx?name={0}", encodedName))

"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

Member 876166713-Sep-14 8:34

13-Sep-14 8:34

Thanks for that, Richard.

This finally worked:

register.aspx.vb

Dim target = String.Format("~/Success.aspx?Name={0}", username.Text)
        ' Perform your Redirect '
        Response.Redirect(target, True)

success.aspx.vb

Public Class success
    Inherits System.Web.UI.Page

    Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load

        If Request("Name") IsNot Nothing Then
            ' It exists, so set your label (and a trailing comma) to display your name '
            Name.Text = String.Format("{0}, ", Request("Name"))
        End If

    End Sub

End Class

Thanks for your help and for giving me an idea of what to look for.

Richard Deeming15-Sep-14 1:56

Richard Deeming

15-Sep-14 1:56

That looks very much like the original code you posted. You're missing all of the required encoding.

For example, try entering a username of <script>alert("Test")</script> - you'll either get a message box pop up when the success page loads, or your browser will prevent access to the page with a warning about cross-site scripting.

You need to encode the value according to the context:

register.aspx.vb:

Dim name As String = HttpUtility.UrlEncode(username.Text)
Dim target As String = String.Format("~/Success.aspx?Name={0}", name)
Response.Redirect(target, True)

success.aspx.vb:

Public Class success
    Inherits System.Web.UI.Page

    Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load

        Dim theName As String = Request.QueryString("Name")
        If Not String.IsNullOrEmpty(theName) Then
            Dim encodedName As String = HttpUtility.HtmlEncode(theName)
            Name.Text = String.Format("{0}, ", encodedName)
        End If

    End Sub

End Class

"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

Member 876166715-Sep-14 2:30

15-Sep-14 2:30

Hello Richard

Thanks for that.

I actually have in aspx.vb:

Dim target = String.Format("~/Success.aspx?Name={0}", username.Text)
        ' Perform your Redirect '
        Response.Redirect(target, True)

and in success.aspx.vb:

Public Class success
    Inherits System.Web.UI.Page

    Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load

        If Request("Name") IsNot Nothing Then
            ' It exists, so set your label (and a trailing comma) to display your name '
            Name.Text = String.Format("{0}, ", Request("Name"))
        End If

    End Sub

End Class

That seems to work, but I don't have HttpUtility.UrlEncode or HttpUtility.HtmlEncode.

Thanks again for your time.

ZurdoDev11-Sep-14 10:53

MVC jQuery dropdown context menu

11-Sep-14 10:53

Richard Deeming wrote:
it is to prevent a cross-site scripting (XSS)[^] attack.

Yes, I intentionally left that out as to not overwhelm, but valid point.

Note, most browsers do a good job preventing that anyway.

There are only 10 types of people in the world, those who understand binary and those who don't.

Stephen Holdorf11-Sep-14 3:35

Stephen Holdorf

11-Sep-14 3:35

I have an unordered list of Html.ActionLinks that work just fine except now we want the Admin link to become a hover dropdown with the actual Html.ActionLinks to be contained in the sub-menu items. What I have done is wrap<div> around the main Admin menu item on the Main menu bar and child <div> below. First below is the code I am using to do this:
VIEW
<ul>
            <li>@Html.ActionLink("Home", "Index", "Home")|</li>
            <li>@Html.ActionLink("My Account", "", "")|</li>
            <li>@Html.ActionLink("Admin", "Index", "Admin")|</li>
        </ul>
        <div align="center">
        <div class="content_head">
            Admin Main Menu
        </div>
        <div class="content_body">
            @Html.ActionLink("Admin Page", "Index", "Admin")
        </div>
        <div class="content_body">
                @Html.ActionLink("Admin Info", "Index", "Admin")
        </div>
        </div>
        <ul>
           <li>@Html.ActionLink("Log Out", "LogOffAbacus", "Home")</li>
        </ul>
}

SITE.css
       .content_head {
        width: 150px;
        height: 30px;
        background-color: #CCCCCC;
        cursor: pointer;
    }

    .content_body {
        display: none;
        width: 150px;
        height: 50px;
        background-color: #9999FF;
    }
SITE.js
    $(".content_head").hover(function () {
        $(".content_body").hide(100);
        $(this).next(".content_body").slideToggle("slow");
    })n;
Now, this does not work because of jQuery error "Microsoft JScript runtime error: Object expected" and I am unsure why. Now the big question, this method looks likes a bad way of doing this. Is there a better way to do this?
.

Viewstate spider web

Ali Al Omairi(Abu AlHassan)10-Sep-14 22:20

Ali Al Omairi(Abu AlHassan)

10-Sep-14 22:20

guys;
I gave a problem with __VIEWSTATE hidden input it lays on the page like a huge spider web. I want to reduce its size efficiently without adding enableViewState="false" to every control.

is it possible to do so?

Help people,so poeple can help you.

Re: Viewstate spider web

thatraja11-Sep-14 2:09

thatraja

11-Sep-14 2:09

Various Ways to Disable ViewState in ASP.Net 4.0[^]

Sidenote: ViewState: Various ways to reduce performance overhead[^]

thatraja

Code converters | Education Needed | Improve Everything^New

Re: Viewstate spider web

Sibeesh KV29-Sep-14 1:21

Sibeesh KV

29-Sep-14 1:21

Please read here : Efficient Server-Side View State Persistence[^]

Please up vote if it helped you Smile | :)

Thanks And Regards
Sibeesh

Current date

Otekpo Emmanuel10-Sep-14 12:39

Otekpo Emmanuel

10-Sep-14 12:39

Hello friends, I need your help in this issue. Am working on exam system using asp.net. There is a feature I would like to apply. On the onload event of the welcome page, the application should check the devices' date and compare it with the current date. If the devices' date is not same as current date, the person should be redirected to a warning page with a warning message the device date is not accurate. Please set time and date. Example, if the current date is 10-09-2014 and the devices' date is 09-09-2014, that means the devices' date is not accurate. I really need this because the date and time student logged in will be auto-captured and saved to database for officials' use. I have googled alot but couldn't found any match and am not even sure if am using the right keywords. Please, any idea on how to play around this will be highly appreciated.

Ali Al Omairi(Abu AlHassan)

Ali Al Omairi(Abu AlHassan)10-Sep-14 22:08

10-Sep-14 22:08

I think that you should not use the client date instead use your server date on student login so you would face no problem as the server date appears on the screen.

Help people,so poeple can help you.

Otekpo Emmanuel10-Sep-14 23:23

Otekpo Emmanuel

10-Sep-14 23:23

Thanks. But, how can I capture the server date?

Ali Al Omairi(Abu AlHassan)

Ali Al Omairi(Abu AlHassan)11-Sep-14 1:29

11-Sep-14 1:29

easily.

When a student logged in you save getdate() which would return the database time. or you pass the value of DateTime.Now for the web server time. and you can do the same for the time you want to send it with the response.

Help people,so poeple can help you.