ASP.NET

3-Mar-15 1:04

there are two textbox and i want to perform a search operation on a button click. but the problem is that i am not able to fetch data.
what will be the select query for this.(DB IS MS ACCESS)

my query is like
qry="select * from emp where date_logged between #"+textbox1.text+"# and #"+textbox2.text+"#";

F-ES Sitecore3-Mar-15 2:03

F-ES Sitecore

3-Mar-15 2:03

What is in textbox1.text and textbox2.text? Are you using unambiguous date text like "3 march 2015" or "3 march 2015 00:00:00"? Is "date_logged" a Date field?

As an aside your code is open to sql injection attacks.

Humayun Kabir Mamun3-Mar-15 2:05

Humayun Kabir Mamun

3-Mar-15 2:05

Use & instead of + and also use TextBox1.Value instead of Textbox1.Text

Richard Deeming3-Mar-15 5:26

Richard Deeming

3-Mar-15 5:26

Your code is vulnerable to SQL Injection[^].

NEVER use string concatenation to build a SQL query. ALWAYS use a parameterized query.

using (OleDbConnection connection = new OleDbConnection("-YOUR CONNECTION STRING HERE-"))
using (OleDbCommand command = new OleDbCommand("SELECT * FROM emp WHERE date_logged Between ? And ?"))
{
    // OleDbCommand doesn't use named parameters, so the names don't matter here:
    command.Parameters.AddWithValue("StartDate", textbox1.Text);
    command.Parameters.AddWithValue("EndDate" ,textbox2.Text);
    
    ...
}

"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

Praveen Kandari3-Mar-15 17:50

3-Mar-15 17:50

thank you guys i will keep that in mind next time.
but I am not able to access data using text box.text. I am using date like mm/dd/yyyy(6/17/2013) format and same is stored in ms access db?

Richard Deeming3-Mar-15 23:51

Richard Deeming

3-Mar-15 23:51

If you're storing the date as text, then you won't be able to compare it to any other date - for example, the string "6/2/1901" is greater than the string "6/19/2015".

Store your data using a proper data type - Access has a datetime type which you should be using:
Microsoft Access Data Types[^]

If you're already storing the dates as datetime, then you'll need to convert the parameter values to DateTime. For example:

command.Parameters.AddWithValue("StartDate", Convert.ToDateTime(textbox1.Text));

"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

jkirkerx4-Mar-15 8:52

4-Mar-15 8:52

Using between is not very accurate.
Lets Say you select
01/01/2000 and 01/31/2000
Between will give you
01/02/2000 to 01/30/2000

So you use
WHERE Date >= @StartDate AND Date <= @StopDate

Praveen Kandari4-Mar-15 17:40

4-Mar-15 17:40

thank you guys. Smile | :)

test

Praveen Kandari3-Mar-15 0:52

AsyncFileUpload disappears

3-Mar-15 0:52

test

Re: test

ZurdoDev3-Mar-15 2:39

ZurdoDev

3-Mar-15 2:39

Pass?

There are only 10 types of people in the world, those who understand binary and those who don't.

anbusenthil2-Mar-15 15:43

anbusenthil

2-Mar-15 15:43

AsyncFileUpload disappears when near by asp dropdownlist postbacks, both the controls
are inside update panel

Re: AsyncFileUpload disappears

F-ES Sitecore2-Mar-15 22:51

F-ES Sitecore

2-Mar-15 22:51

If you mean the file you selected is forgotten and the upload control blanked when the control is part of an updatepanel then that is normal behavior you can't do anything about. You can't default the file that an upload control points to, and when your updatepanel fires your upload is being deleted then recreated, and it can't be recreated to the same state the way a textbox or dropdown can.

Move the file upload outside of the update panel as they don't work inside asynch update panels anyway.

Report Parameter not refreshing

Kandepu Rajesh1-Mar-15 19:57

Kandepu Rajesh

1-Mar-15 19:57

I have a task to dsiplay a report using ASP.NET webforms ReportViewer Control. I am using a localreport mode to display the report.
Now when I change something in the search_str parameter which I want to pass teh value from a textbox prompted to the user and click the View Report button, how to refresh or reset the search_str parameter in the button1_click event.

Re: Report Parameter not refreshing

Afzaal Ahmad Zeeshan2-Mar-15 3:12

Afzaal Ahmad Zeeshan

2-Mar-15 3:12

It comes from the TextBox's value, whenever the button is clicked, you can remove the value from the TextBox; clear it.

The sh*t I complain about
It's like there ain't a cloud in the sky and it's raining out - Eminem
~! Firewall !~

MVC5 Website will write to the database on my development machine, but not on the web server

jkirkerx1-Mar-15 13:33

Re: MVC5 Website will write to the database on my development machine, but not on the web server

1-Mar-15 13:33

I'm baffled by this.

I wrote a contact us page with a form, that writes the info to the table.
I can read the table, but I can't write to it on the production web server.
I can write to the table on my desktop running VS2013 Debug.

So I have 3 other databases on this production SQL server that works fine.
All the other web sites can read and write to the SQL same server.

It's just my first MVC App, that I wrote.
The function runs from the home controller and returns true, and sends the emails.
In web forms, it throws and exception if there's a mistake, but in my MVC app here, it just runs even if there is an error in the SQL.
Like I said I'm just baffled here on this.

[HttpPost]
        [AllowAnonymous]
        [ValidateAntiForgeryToken]
        public ActionResult Contact(ContactModel model, string returnUrl)
         {
             if (ModelState.IsValid && true == ContactExtender.SubmitContactMessage(model))
             {
                 // Package the data needed to send the message.
                 model.smtp_websiteName = "xxxxxx";
                 model.smtp_subject = "Contact Us";
                 model.smtp_sentFrom = "xxxxxx";
                 model.smtp_sendto = "xxxxxx";
                 model.smtp_replyto = "xxxxx";
                 model.smtp_templatePath_website = System.Web.Hosting.HostingEnvironment.MapPath("~/App_Data/SMTP_Templates/contact_website_template.html");
                 model.smtp_templatePath_customer = System.Web.Hosting.HostingEnvironment.MapPath("~/App_Data/SMTP_Templates/contact_customer_template.html");

                 // Send a email message to me and the customer.
                 bool website = Contact_Website_Email_Proc.Send_XHTML_Website_Message(model);
                 bool visitor = Contact_Customer_Email_Proc.Send_XHTML_Customer_Message(model);

                 ViewData["contactMessage"] = "Success";
                 //return RedirectToLocal(returnUrl);
             }
             else
             {
                 ViewData["contactMessage"] = "Failed";
                
             }
             return View(model);
        }

public static bool SubmitContactMessage(ContactModel  cm)
        {
            bool success = false;
            string connStr = ConfigurationManager.ConnectionStrings["DefaultConnection"].ConnectionString;
            SqlConnection conn = new SqlConnection(connStr);

            string query =
            "INSERT INTO CRM_MESSAGES " +
            "( " +
            "   Name " +
            "   , Subject " +
            "   , CompanyName " +
            "   , EmailAddress " +
            "   , Query " +
            "   , Date " +
            "   , MailingList " +
            ") " +
            "VALUES " +
            "( " +
            "   @Name " +
            "   , @Subject " +
            "   , @CompanyName " +
            "   , @EmailAddress " +
            "   , @Query " +
            "   , @Date " +
            "   , @MailingList " +
            ") ";            

            SqlCommand cmd = new SqlCommand(query, conn);

            cmd.Parameters.Add(new SqlParameter("@Name", cm.Name));
            cmd.Parameters.Add(new SqlParameter("@Subject", "ContactUs"));
            cmd.Parameters.Add(new SqlParameter("@CompanyName", cm.CompanyName));
            cmd.Parameters.Add(new SqlParameter("@EmailAddress", cm.EmailAddress));
            cmd.Parameters.Add(new SqlParameter("@Query", cm.Query));
            cmd.Parameters.Add(new SqlParameter("@Date", DateTime.Now));
            cmd.Parameters.Add(new SqlParameter("@MailingList", cm.MailingList));

            try
            {
                conn.Open();
                cmd.ExecuteNonQuery();                
                success = true;



            }
            catch (Exception)
            {
                success = false;
            }
            finally
            {
                conn.Close();

            }

            return success;
        }

F-ES Sitecore1-Mar-15 23:48

F-ES Sitecore

1-Mar-15 23:48

Your execute statement is inside a try\catch block and if an exception is thrown you just return false so you have no idea what the exception is. Either throw the exception again, or at least log the exception details using something like log4net. If you just want a quick diagnosis then remove the try\catch block and re-compile and deploy and you should see the actual error.

Re: MVC5 Website will write to the database on my development machine, but not on the web server

jkirkerx2-Mar-15 6:05

2-Mar-15 6:05

I thought it was pretty straight forward.

I can throw garbage into the SQL statement, and it just runs, with no exception thrown.

So I thought it was a MVC thing. Guess I'll search for exceptions not being thrown in SQL.
I used SqlException as well.

[solved]

jkirkerx2-Mar-15 9:14

ajaxtoolkit ModalPopupExtender problem

2-Mar-15 9:14

Well that was weird

I basically did a Easter egg hunt on it.
And tore apart the SQL function.
So I changed the parameters to this format instead. Guess it was my newbie experience in c# that lead to the error.
Now the records write on the production system.
Plus I installed Elmah, to track errors faster.

cmd.Parameters.Add(new SqlParameter("@Name", SqlDbType.VarChar, 80)).Value = cm.Name;

casa_sniper1-Mar-15 5:13

Re: ajaxtoolkit ModalPopupExtender problem

1-Mar-15 5:13

Hello ,

I try to add a ModalPopupExtender to my page
i migrate a webpage with a ModalPopupExtender from a web project to another webproject ,

it working in the first project but not working in the new project,
i was add a ajaxtoolkit but still not working , i dont undrestand ,
i create another page with ModalPopupExtender in the new project , its not working ,
but when i copy this same page in the old project it working , i can have a popup ,

please can u tell me what can be it the cause

<body>
    
    <form id="form1" runat="server">
        <asp:scriptmanager ID="Scriptmanager1" runat="server" ScriptMode="Release"></asp:scriptmanager>
    <div>
        <asp:ModalPopupExtender ID="ModalPopupExtender1" runat="server" TargetControlID="LinkButton1" 
            PopupControlID="Panel1" X="200" Y="200">
        </asp:ModalPopupExtender>
        <asp:Button ID="Button1" runat="server" Text="Button" OnClick="Button1_Click" />
        <asp:LinkButton ID="LinkButton1" runat="server" OnClick="LinkButton1_Click">LinkButton</asp:LinkButton>
        <asp:Panel ID="Panel1" runat="server"  style="display:none;" >
           
                    <asp:Label ID="Label1" runat="server" Text="pooooooooooooooop up"></asp:Label>

        </asp:Panel>
    </div>
    </form>
</body>

protected void Button1_Click(object sender, EventArgs e)
   {
       Panel1.Visible = true;
       this.ModalPopupExtender1.Show();
   }

Thanks

casa_sniper1-Mar-15 10:43

ModalPopupExtender problem

1-Mar-15 10:43

i was tried all day .. not resolved yet ,
but i was try to install ajax toolkit with nuget , and has an error abaout dependance with html agility ,

casa_sniper1-Mar-15 5:13

Re: ModalPopupExtender problem

1-Mar-15 5:13

<body>
    
    <form id="form1" runat="server">
        <asp:scriptmanager ID="Scriptmanager1" runat="server" ScriptMode="Release"></asp:scriptmanager>
    <div>
        <asp:ModalPopupExtender ID="ModalPopupExtender1" runat="server" TargetControlID="LinkButton1" 
            PopupControlID="Panel1" X="200" Y="200">
        </asp:ModalPopupExtender>
        <asp:Button ID="Button1" runat="server" Text="Button" OnClick="Button1_Click" />
        <asp:LinkButton ID="LinkButton1" runat="server" OnClick="LinkButton1_Click">LinkButton</asp:LinkButton>
        <asp:Panel ID="Panel1" runat="server"  style="display:none;" >
           
                    <asp:Label ID="Label1" runat="server" Text="pooooooooooooooop up"></asp:Label>

        </asp:Panel>
    </div>
    </form>
</body>

protected void Button1_Click(object sender, EventArgs e)
   {
       Panel1.Visible = true;
       this.ModalPopupExtender1.Show();
   }

Thanks

casa_sniper5-May-15 14:37