Click here to Skip to main content
15,922,584 members
Home / Discussions / C#
   

C#

 
AnswerRe: problem with datagrid.unselect Pin
exhaulted12-Jan-06 3:17
exhaulted12-Jan-06 3:17 
QuestionGenerics Problem Pin
Kevin McFarlane12-Jan-06 1:41
Kevin McFarlane12-Jan-06 1:41 
AnswerRe: Generics Problem Pin
mav.northwind12-Jan-06 5:18
mav.northwind12-Jan-06 5:18 
GeneralRe: Generics Problem Pin
Kevin McFarlane12-Jan-06 7:44
Kevin McFarlane12-Jan-06 7:44 
Questionplease correct my query Pin
Sasuko12-Jan-06 1:18
Sasuko12-Jan-06 1:18 
AnswerRe: please correct my query Pin
Colin Angus Mackay12-Jan-06 1:48
Colin Angus Mackay12-Jan-06 1:48 
GeneralRe: please correct my query Pin
Sasuko12-Jan-06 2:40
Sasuko12-Jan-06 2:40 
GeneralRe: please correct my query Pin
Colin Angus Mackay12-Jan-06 2:50
Colin Angus Mackay12-Jan-06 2:50 
Sasuko wrote:
cmd.Parameters.Add("@Image", OleDbType.VarBinary, (int)image.Length).Value = image;
}


You did this for image column - Do it for all the other values as well. This will improve the security of your application and assist in reducing the ability of a mallicious attacker getting to your database via your web application. For more information read: SQL Injection Attacks and some tips on how to prevent them[^]

I can understand someone who does not know about parameters not using them, but it is obvious you know how to add a parameter to the commnand (as you demonstrated it in your code). It seems strange to use parameters for some values but not others.

ColinMackay.net
"Man who stand on hill with mouth open will wait long time for roast duck to drop in." -- Confucius
"If a man empties his purse into his head, no man can take it away from him, for an investment in knowledge pays the best interest." -- Joseph E. O'Donnell

AnswerRe: please correct my query Pin
Guffa12-Jan-06 2:23
Guffa12-Jan-06 2:23 
AnswerRe: please correct my query Pin
Sasuko12-Jan-06 4:49
Sasuko12-Jan-06 4:49 
QuestionUsing String.Replace method with variables Pin
sohne11-Jan-06 23:11
sohne11-Jan-06 23:11 
AnswerRe: Using String.Replace method with variables Pin
Colin Angus Mackay11-Jan-06 23:23
Colin Angus Mackay11-Jan-06 23:23 
QuestionImporting contacts to Microsoft Outlook with C# Pin
Starchild200511-Jan-06 21:59
Starchild200511-Jan-06 21:59 
QuestionHow can be a Transparent panel control can be created Pin
Shashidharreddy11-Jan-06 21:52
Shashidharreddy11-Jan-06 21:52 
AnswerRe: How can be a Transparent panel control can be created Pin
AB777111-Jan-06 23:53
AB777111-Jan-06 23:53 
AnswerRe: How can be a Transparent panel control can be created Pin
exhaulted12-Jan-06 3:24
exhaulted12-Jan-06 3:24 
Questionestablish GPRS connection Pin
Frank23111-Jan-06 20:58
Frank23111-Jan-06 20:58 
Questionwindows services Pin
PrakashBhaskar11-Jan-06 19:42
PrakashBhaskar11-Jan-06 19:42 
AnswerRe: windows services Pin
Mike Dimmick11-Jan-06 23:56
Mike Dimmick11-Jan-06 23:56 
Questiondetect sections Pin
picasso211-Jan-06 18:44
picasso211-Jan-06 18:44 
AnswerRe: detect sections Pin
Koushik Biswas12-Jan-06 6:15
Koushik Biswas12-Jan-06 6:15 
Questiondoubt in Infragistics.Win.UltraWinTree Pin
dhol11-Jan-06 17:56
dhol11-Jan-06 17:56 
AnswerRe: doubt in Infragistics.Win.UltraWinTree Pin
Christian Graus11-Jan-06 18:09
protectorChristian Graus11-Jan-06 18:09 
AnswerRe: doubt in Infragistics.Win.UltraWinTree Pin
CodyGen11-Jan-06 19:59
CodyGen11-Jan-06 19:59 
QuestionDelegate in C# Pin
hung_ngole11-Jan-06 16:44
hung_ngole11-Jan-06 16:44 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.