|
jkirkerx wrote: C# AES 256 bits Encryption Library with Salt[^]
That is very similar to what I use and as far as I know, still very secure.
There are only 10 types of people in the world, those who understand binary and those who don't.
|
|
|
|
|
Oh thanks!,
I didn't see that one. Looks good so far.
|
|
|
|
|
I'm using MSChart in my asp.net website. When I test my website on local host (my pc) it's work without any problem and shows the chart items completely, but when I publish and upload that on somee.com site for test, the chart isn't show as well .
Here is my web config code :
<configuration>
<configSections>
</configSections>
<appSettings>
<add key="ChartImageHandler" value="storage=file;timeout=20;Url=./TempImages/;deleteAfterServicing=false;privateImages=false" />
</appSettings>
<system.webServer>
<validation validateIntegratedModeConfiguration="false"/>
<defaultDocument>
<files>
<add value="login.aspx" />
</files>
</defaultDocument>
<handlers>
<remove name="ChartImageHandler"/>
<add name="ChartImageHandler" preCondition="integratedMode" verb="GET,HEAD,POST" path="ChartImg.axd" type="System.Web.UI.DataVisualization.Charting.ChartHttpHandler, System.Web.DataVisualization, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35"/>
<add name="ReportViewerWebControlHandler" preCondition="integratedMode" verb="*" path="Reserved.ReportViewerWebControl.axd" type="Microsoft.Reporting.WebForms.HttpHandler, Microsoft.ReportViewer.WebForms, Version=11.0.0.0, Culture=neutral, PublicKeyToken=89845dcd8080cc91"/>
</handlers>
</system.webServer>
<connectionStrings>
<add name="ConnectionString" connectionString="workstation id=database8.mssql.somee.com;packet size=4096;user id=AABSoftware_SQLLogin_1;pwd=vlnk44szmf;data source=database8.mssql.somee.com;persist security info=False;initial catalog=database8"/>
<add name="ConnectionString2" connectionString="workstation id=database8.mssql.somee.com;packet size=4096;user id=AABSoftware_SQLLogin_1;pwd=vlnk44szmf;data source=database8.mssql.somee.com;persist security info=False;initial catalog=database8"/>
<add name="ConnectionString3" connectionString="workstation id=database8.mssql.somee.com;packet size=4096;user id=AABSoftware_SQLLogin_1;pwd=vlnk44szmf;data source=database8.mssql.somee.com;persist security info=False;initial catalog=database8"/>
</connectionStrings>
<system.web>
<httpHandlers>
<add path="ChartImg.axd" verb="GET,HEAD,POST" type="System.Web.UI.DataVisualization.Charting.ChartHttpHandler, System.Web.DataVisualization, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" validate="false"/>
<add path="Reserved.ReportViewerWebControl.axd" verb="*" type="Microsoft.Reporting.WebForms.HttpHandler, Microsoft.ReportViewer.WebForms, Version=11.0.0.0, Culture=neutral, PublicKeyToken=89845dcd8080cc91" validate="false"/>
</httpHandlers>
<pages>
<controls>
<add tagPrefix="asp" namespace="System.Web.UI.DataVisualization.Charting" assembly="System.Web.DataVisualization, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35"/>
</controls>
</pages>
<compilation targetFramework="4.0">
<assemblies>
<add assembly="System.Web.DataVisualization.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"/>
<add assembly="System.Web.DataVisualization, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"/>
<add assembly="System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089"/>
<add assembly="System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A"/>
<add assembly="Microsoft.Build.Framework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A"/>
<add assembly="System.Data.Linq, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089"/></assemblies>
<buildProviders>
</buildProviders>
</compilation>
</system.web>
</configuration>
|
|
|
|
|
Something clearly is not getting deployed. You should see an error somewhere.
What does show?
There are only 10 types of people in the world, those who understand binary and those who don't.
|
|
|
|
|
Guys
Is this forum for MVC too? or is there any separate forum for MVC?
|
|
|
|
|
John C Rayan wrote: Is this forum for MVC too? or is there any separate forum for MVC?
No, since MVC is ASP.Net, this is the correct forum. CP has not created a specific MVC forum.
There are only 10 types of people in the world, those who understand binary and those who don't.
|
|
|
|
|
|
Hello
I am trying to use a DetailsView to insert a neew item into a db table.
The problem is, I organized all not knowing the table's schema a priori. I use a Gridview to visualize and update the table , and it all works correctly by binding dynamically the gridview to the table in the PageLoad event handler. I don't use any template.
When I try to do something similar to insert a new row using a dynamically bound detailsview , I correctly visualize the fields' names in the detailsview, but as I modify the values, and try to manage the insert event , I find into the DetailsViewInsertEventArgs parameter that the Values collection property only has the Keys subcollection correctly populated, but the Values are all empty . I would expect, but maybe I didn't understand well, the Values.Values subcollection to be populated with the values I inserted, just as find the Values.Keys subcollection populated with the fiedls' names. Is it due to the fact that I am bindingg dynamically ? is there a way to work around this limitation ?
|
|
|
|
|
To make things clearer here is my marlup :
<%@ Page Title="" Language="C#" MasterPageFile="~/Site.Master" AutoEventWireup="true" CodeBehind="Insert.aspx.cs" Inherits="DBManagerWebForm.Insert" %>
<asp:Content ID="Content1" ContentPlaceHolderID="MainContent" runat="server">
<asp:DetailsView ID="DetailsView1" runat="server" DefaultMode="Insert" Height="50px" Width="125px" AutoGenerateInsertButton="True" OnItemInserting="DetailsView1_ItemInserting" OnItemUpdating="DetailsView1_ItemUpdating">
</asp:DetailsView>
<%----%>
<asp:Button ID="btnCancel" runat="server" OnClick="btnCancel_Click" Text="Go Back" />
<br />
<asp:TextBox ID="txtError" runat="server" ReadOnly="True" TextMode="MultiLine" Width="411px"></asp:TextBox>
</asp:Content>
and this is the codebehind :
protected void DetailsView1_ItemInserting(object sender, DetailsViewInsertEventArgs e)
{
int i;
SqlDbType T;
try
{
string Cmd = "INSERT INTO " + TABLE + " (";
IEnumerator En = e.Values.Keys.GetEnumerator();
En.Reset();
for (i = 0; i < e.Values.Count - 1; i++)
{
En.MoveNext();
Cmd += En.Current.ToString() + ",";
}
En.MoveNext();
Cmd += En.Current.ToString() + ") VALUES (";
string val;
En.Reset();
for (i = 0; i < e.Values.Count - 1; i++)
{
En.MoveNext();
T = Util.GetSqlType(DT.Columns[i].DataType);
val = e.Values[En.Current] == null ? "" : e.Values[En.Current].ToString();
if (T == SqlDbType.NVarChar)
Cmd += "'" + val + "',";
else
Cmd += val + ",";
}
En.MoveNext();
T = Util.GetSqlType(DT.Columns[i].DataType);
val = e.Values[En.Current] == null ? "" : e.Values[En.Current].ToString();
if (T == SqlDbType.NVarChar)
Cmd += "'" + val + "')";
else
Cmd += val + ")";
string ConnStr = WebConfigurationManager.ConnectionStrings[CONNECTION].ConnectionString;
SqlConnection Conn = new SqlConnection(ConnStr);
Conn.Open();
SqlCommand Comm = new SqlCommand(Cmd, Conn);
int r = Comm.ExecuteNonQuery();
Conn.Close();
Server.Transfer("~/modifica.aspx");
}
catch (Exception ex)
{
txtError.Text = "Errore :" + ex.Message;
}
}
|
|
|
|
|
Your code is vulnerable to SQL Injection[^].
NEVER use string concatenation to build a SQL query. ALWAYS use a parameterized query.
Everything you wanted to know about SQL injection (but were afraid to ask) | Troy Hunt[^]
How can I explain SQL injection without technical jargon? | Information Security Stack Exchange[^]
Query Parameterization Cheat Sheet | OWASP[^]
SQL injection attack mechanics | Pluralsight [^]
protected void DetailsView1_ItemInserting(object sender, DetailsViewInsertEventArgs e)
{
string ConnStr = WebConfigurationManager.ConnectionStrings[CONNECTION].ConnectionString;
using (SqlConnection connection = new SqlConnection(ConnStr))
using (SqlCommand command = new SqlCommand("", connection))
{
string[] columns = new string[e.Values.Count];
int index = 0;
foreach (string key in e.Values.Keys)
{
command.Parameters.AddWithValue("@" + key, e.Values[key]);
columns[index] = key;
index++;
}
command.CommandText = string.Format("INSERT INTO [{0}] ({1}) VALUES (@{2})",
TABLE, string.Join(", ", columns), string.Join(", @", columns));
connection.Open();
command.ExecuteNonQuery();
}
Server.Transfer("~/modifica.aspx");
}
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
please any one can give me source code for create,update,read and delete in asp.net with c# coding
|
|
|
|
|
|
No, we cannot. We do not know the name of your database or if you are even referring to a database. You might be wanting to know how to create, update, read, and delete facebook posts. You did not even take the time to be specific enough for anyone to help you.
We don't know the name of your tables, or your fields, or anything that you have.
The code is very simple, if you are stuck on something please ask a specific question.
There are only 10 types of people in the world, those who understand binary and those who don't.
|
|
|
|
|
PLEASE GIVE YOUR ANSWER
Mention use of following
1. DELETE,DROP, TRUNCATE,ALTER REPLACE,WITH
2. Union,Union All
Mark whether query correct or not,if not correct provide reason
1. SELECT orderdate,product,SUM(quantity)as "Total"
FROM orders GROUP BY orderdate,product
HAVING quantity>2 ORDER BY orderdate; (No aggregate in having)
2. Insert into tabel1(col1) values("value 1")
modified 15-Nov-15 10:02am.
|
|
|
|
|
Is this homework or a test provided by your teacher? Homeworks are intended to be done yourself. That is so that you can give yourself a try and know where you lag behind.
The sh*t I complain about
It's like there ain't a cloud in the sky and it's raining out - Eminem
~! Firewall !~
|
|
|
|
|
This is very rude of you. You are asking us, twice, to do your work for you without even having the decency to ask an actual question.
There are only 10 types of people in the world, those who understand binary and those who don't.
|
|
|
|
|
I have a gridview control on my web page named gvItems. I have items and serial numbers defined on the gridview. I allow our customers to add serial numbers for their products. I use full-screen editing and I do not use the Edit / Update / Cancel link buttons.
As you can see in my HTML below, I have a textbox named txtSerialNum. As I load the gridview rows from my SQL stored procedure, I have a column which tells me whether this item requires a serial number. If it does require a serial number, then I want to allow them to enter it like it is now. But if the item does not require a serial number, then I want to make the textbox enabled=false or readonly.
How can I accomplish this? I assume I can use one of the gridview events but not sure which one. Here is my gridview code. I can post my C# code but the gridview is populated correctly already.
<asp:GridView ID="gvItems"
runat="server"
AutoGenerateColumns="False">
<Columns>
<asp:TemplateField HeaderText="Sku">
<ItemTemplate>
<asp:Label ID="lblSku" runat="server" Text='<%# Eval("RmaSku") %>'>
</asp:Label>
</ItemTemplate>
</asp:TemplateField>
<asp:TemplateField HeaderText="Description">
<ItemTemplate>
<asp:Label ID="lblName" runat="server" Text='<%# Eval("Name") %>'>
</asp:Label>
</ItemTemplate>
</asp:TemplateField>
<asp:TemplateField HeaderText="Serial Number">
<ItemTemplate>
<asp:TextBox ID="txtSerialNum" runat="server" Text='<%# Eval("SerialNum") %>'>
</asp:TextBox>
</ItemTemplate>
</asp:TemplateField>
<asp:TemplateField HeaderText="Problem">
<ItemTemplate>
<asp:DropDownList ID="ddlProblem"
runat="server"
DataValueField="RmaProblemId"
DataTextField="RmaProblemDescription"
DataSource='<%#GetProblems()%>'
SelectedValue='<%# Eval("RmaProblemId") %>'>
</asp:DropDownList>
</ItemTemplate>
</asp:TemplateField>
<asp:TemplateField Visible="false">
<ItemTemplate>
<asp:Label ID="lblRmaDetailId" runat="server" Text='<%# Eval("RmaDetailId") %>'>
</asp:Label>
</ItemTemplate>
</asp:TemplateField>
<asp:TemplateField Visible="false">
<ItemTemplate>
<asp:Label ID="lblRmaSerialNumRequired" runat="server" Text='<%# Eval("RmaSerialNumRequired") %>'>
</asp:Label>
</ItemTemplate>
</asp:TemplateField>
</Columns>
</asp:GridView>
|
|
|
|
|
The event you are looking for is RowDataBound. Add it to your gridview like this:
<asp:GridView ID="gvItems"
runat="server"
AutoGenerateColumns="False" onrowdatabound="gvItems_RowDataBound">
And write your code in that event handler (gvItems_RowDataBound).
|
|
|
|
|
Thanks! That worked perfectly.
|
|
|
|
|
I am helping someone that has a web server: Windows 2003 IIS 6 and connects to a database server: Windows 2003 running SQL Server 2000 SP3.
The original database server died. I set up a new server (both were windows 2003, both sql server 2000 sp3) and I moved the database from the old server to the new one.
During the sql server installation it asked me for a named instance name. I made one up, not knowing what the instance name of the old one was.
The database itself appears to be fine. However, when launching the application on a desktop on the network that the web server runs we get an error stating that the "connection string has not been initialized."
While trying different things I got a similar but different message saying something about the named instance of the database, I don't have that full error message though. It also mentioned the web.config file.
I looked in the web.config file on the web server and tried to change what I thought was appropriate to make the data source what it should be. (the web.config file would be looking for the old database until I change it I guess).
Doing this did not work however. I know Nothing about this stuff at all. It isn't in my area. I was hoping someone could offer a suggestion. The connection string from the web.config file as it is (and as it was under the old set up) is:
<connectionStrings>
<add name="SecurityConnectionString" connectionString="Password=xxxxxx;Persist Security Info=True;User ID=impact_app;Initial Catalog=cc_3100_CC_20_20_sec;Data Source=CCDBER"/>
<add name="CustomerInstallationLookupConnectionString" connectionString="Password=xxxxx;Persist Security Info=True;User ID=impact_app;Initial Catalog=cc_customer_installation;Data Source=S1-DB04"/>
<add name="FirstDataBankConnectionString" connectionString="Password=xxxxx;Persist Security Info=True;User ID=impact_app;Initial Catalog=first_data_bank;Data Source=S1-DB04"/>
</connectionStrings>
The instance name of the new database shows up in SQL Enterprise Manager as : CCDBER\CCDB_ERPS
Looking at the old connection string, it is point to CCDBER as the datasource, so I am guessing that was the name of the database on the old database server? But I don't know that. Looking at my new set up in Enterprise Manager it appears as CCDBER\CCDB_ERPS, which I am guessing means the server name is CCBER and I used the instance name of CCD_ERPS.
I thought putting CCD_ERPS in the connection string where CCBER was would do the trick but it didn't.
Man... I hope someone can help with this. I'd really appreciate it because I'm out my element here and was not expecting to run into these types of issues.
Thanks!
modified 10-Nov-15 18:23pm.
|
|
|
|
|
Don't know, but if those are your real passwords I suggest you edit your post to remove them!
|
|
|
|
|
The Data Source is the server and instance name. If your new SQL instance is called CCDBER\CCDB_ERPS, then that's what you need to specify in the Data Source part of the connection string:
<add name="SecurityConnectionString" connectionString="Password=...;Persist Security Info=True;User ID=impact_app;Initial Catalog=cc_3100_CC_20_20_sec;Data Source=CCDBER\CCDB_ERPS"/>
(I've removed the password, just in case that's your real password. If it is, edit your post to remove it, and/or change the password.)
The various components of the connection string are explained in the remarks on MSDN:
SqlConnection.ConnectionString Property | MSDN[^]
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
Thanks both. That actually was not the password, but I edited it anyways, thank you.
On the server name\instance name issue, I don't fully understand that. The physical server name (the Windows Computer Name) is the CCBER. When I was installing SQL Server and it asked me for a named instance, I created "CCDB_ERPS".
In SQL Enterprise Manager it shows up as CCDBER\CCDB_ERPS. So I don't know if that is SQL Server's way of saying my server name is CCBER and my instance name is CCDB_ERPS, or if it is saying the instance name is the entire CCDBECCDB_ERPS. But I distinctly remember creating the instance name during installation as CCDB_ERPS.
Thanks again.
|
|
|
|
|
The server name is CCDBER; the instance name is CCDB_ERPS; the Data Source needs both parts to know how to talk to the instance.
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
