C / C++ / MFC

shuchigo_jane wrote:

But dis dint work either

shuchigo_jane wrote:

m_pCommand->CommandText = (_bstr_t)string;

Cedric Moonen wrote:

What is the type of CommandText ?

string.Format("INSERT INTO(URL,Object_size,No_of_accesses,Transfer_cost,Group_no,Hvalue,Location) VALUES(\"%s\",7,6,8,\"hi\")", url);
// check the value of <code>string</code> at this point
m_pCommand->CommandText = string; 

"The largest fire starts but with the smallest spark." - David Crow

"Judge not by the eye but by the heart." - Native American Proverb

_ParameterPtr param = m_pCommand->CreateParameter("url", adVarChar, adParamInput, url.length(), url.c_str());
m_pCommand-> Parameters->Append(param);

<br />
CString url="asdf";<br />
_Commandptr m_pCommand;<br />
m_pCommand.CreateInstance(__uuidof(Command));<br />
<br />
CString strSql = _T("INSERT INTO wcs(URL,Object_size,No_of_accesses,Transfer_cost,Group_no,Hvalue,Location) VALUES('") + url + _T("',7,6,8,'hi')");<br />
<br />
m_pCommand->CommandText = _bastr_t(strSql);<br />
<br />
m_pCommand->CommandType=adCmdText;<br />
m_pCommand->ActiveConnection = m_pConnection;<br />
_variant_t vRecords;<br />
m_pCommand->Execute(&vRecords,NULL,adCmdText); 

• http://en.wikipedia.org/wiki/SQL_injection[^]
• http://www.unixwiz.net/techtips/sql-injection.html[^]
• http://www.spidynamics.com/whitepapers/WhitepaperSQLInjection.pdf[^]
• http://www.ngssoftware.com/papers/advanced_sql_injection.pdf[^]

<br />
void CAnswerDlg::OnPaint()<br />
{<br />
	CPaintDC dc(this); // device context for painting<br />
dc.FillSolidRect(0,0,GetSystemMetrics (SM_CXSCREEN),GetSystemMetrics (SM_CYSCREEN),<br />
		RGB(53,97,200));<br />
}<br />
--------------<br />
HBRUSH CAnswerDlg::OnCtlColor(CDC* pDC, CWnd* pWnd, UINT nCtlColor)<br />
{<br />
HBRUSH hbr = CDialog::OnCtlColor(pDC, pWnd, nCtlColor);<br />
return (HBRUSH)GetStockObject(WHITE_BRUSH);<br />
}<br />
<br />

<br />
COLORREF Color;<br />
Color=GetDC()->GetBkColor();<br />
....<br />
....<br />
void CAnswerDlg::OnPaint()<br />
{<br />
CPaintDC dc(this); // device context for painting<br />
dc.FillSolidRect(0,0,GetSystemMetrics (SM_CXSCREEN),GetSystemMetrics (SM_CYSCREEN),<br />
Color);<br />
}<br />
<br />
void CAnswerDlg::OnBnClickedButton1()<br />
{<br />
	Color=RGB(53,97,200);<br />
	Invalidate();<br />
}<br />