Click here to Skip to main content
15,891,184 members
Home / Discussions / ASP.NET
   

ASP.NET

 
QuestionUnable to set focus to a text box contained in a gridview's row cell after post-back and binding. Pin
Steve Holdorf25-Jun-08 10:57
Steve Holdorf25-Jun-08 10:57 
AnswerRe: Unable to set focus to a text box contained in a gridview's row cell after post-back and binding. Pin
Masood Kochi,SSF25-Jun-08 19:49
Masood Kochi,SSF25-Jun-08 19:49 
GeneralRe: Unable to set focus to a text box contained in a gridview's row cell after post-back and binding. Pin
Steve Holdorf26-Jun-08 2:44
Steve Holdorf26-Jun-08 2:44 
AnswerRe: Unable to set focus to a text box contained in a gridview's row cell after post-back and binding. Pin
boy.pockets25-Jun-08 19:52
boy.pockets25-Jun-08 19:52 
Questionpage navigation Pin
jds120725-Jun-08 8:42
jds120725-Jun-08 8:42 
AnswerRe: page navigation Pin
Zoltan Balazs25-Jun-08 9:57
Zoltan Balazs25-Jun-08 9:57 
QuestionExam questions. Are they wrong or what? Pin
AlexeiXX325-Jun-08 7:45
AlexeiXX325-Jun-08 7:45 
NewsTools to Check Your ASP, ASP.NET Site For SQL Injection Attacks Pin
brucedkyle25-Jun-08 6:06
brucedkyle25-Jun-08 6:06 
There's been an increase in SQL Injection attacks against Web sites. And a lot of developer are aleady developing Web application in a way that prevents the attack from being effective. But what can you do about it for legacy systems, and what are the best practices really? And how can I show that I'm doing the right thing in my site?

Microsoft Security Advisory (954462): Rise in SQL Injectsion Attacks Exploting Unverified User Data came out yesterday that provides advise and tools to protect against a rise in SQL injection attacks. A recent escalation in attacks on Web sites exploit unverified user data input. The attacks target Web sites that do not follow secure coding practices for accessing and manipulating data stored in a relational database.

But the vulnerability is not exploited in Web applications that follow best practices to verify user data. The Security Advisory provides phone support for customers in the United States and Canada who may have been affected by the vulnerability. International customers are provided a link where you can get help locally.

The Security Advisory provides an overview of the issues, a section for frequently asked questions, and a series of suggestion actions that includes tools to help idenfify if your site is vulnerable.


  • Hewlett Packard provides a free scanner, HP Scrawlr, that can identify whether sites are susceptible to SQL injection. It provides a report pages that are vulnerable along with the associated fields.
  • A beta versoin of UrlScan restricts the types of HTTP requests that Internet Information Services (IIS) will process. UrlScan 3.0 installes on IIS 5.1 or later and can be found at URLScan Tool 3.0 Beta.
  • You can check your source code with SQL Source Code Analysis Tool to detect ASP code that is susceptible. The tool can be found in Microsoft Knowledge Base Article 954476.
  • The Security Advisory also contains additional links to best practices on how to avoid SQL injection attacks, including Coding Techniques for protecting against SQL Injection in ASP.NET and other articles.


To learn more about how you can protect your Web site from SQL Injection, see Microsoft Security Advisory (954462): Rise in SQL Injectsion Attacks Exploting Unverified User Data.



Learn more about Microsoft emerging techologies[^] on the Microsoft blog for independent software vendors (ISVs) in the United States.

GeneralRe: Tools to Check Your ASP, ASP.NET Site For SQL Injection Attacks Pin
Christian Graus25-Jun-08 12:22
protectorChristian Graus25-Jun-08 12:22 
Questionhow come script works in firefox but not ie Pin
zzsoulzz25-Jun-08 5:42
zzsoulzz25-Jun-08 5:42 
AnswerRe: how come script works in firefox but not ie Pin
Parwej Ahamad25-Jun-08 5:45
professionalParwej Ahamad25-Jun-08 5:45 
GeneralRe: how come script works in firefox but not ie Pin
zzsoulzz25-Jun-08 6:03
zzsoulzz25-Jun-08 6:03 
GeneralRe: how come script works in firefox but not ie Pin
Parwej Ahamad25-Jun-08 6:17
professionalParwej Ahamad25-Jun-08 6:17 
GeneralRe: how come script works in firefox but not ie Pin
zzsoulzz25-Jun-08 6:23
zzsoulzz25-Jun-08 6:23 
GeneralRe: how come script works in firefox but not ie Pin
Parwej Ahamad25-Jun-08 6:34
professionalParwej Ahamad25-Jun-08 6:34 
GeneralRe: how come script works in firefox but not ie Pin
zzsoulzz25-Jun-08 6:39
zzsoulzz25-Jun-08 6:39 
GeneralRe: how come script works in firefox but not ie Pin
Parwej Ahamad25-Jun-08 6:47
professionalParwej Ahamad25-Jun-08 6:47 
GeneralRe: how come script works in firefox but not ie Pin
zzsoulzz25-Jun-08 7:09
zzsoulzz25-Jun-08 7:09 
GeneralRe: how come script works in firefox but not ie Pin
Parwej Ahamad25-Jun-08 7:12
professionalParwej Ahamad25-Jun-08 7:12 
GeneralRe: how come script works in firefox but not ie Pin
zzsoulzz25-Jun-08 7:20
zzsoulzz25-Jun-08 7:20 
AnswerRe: how come script works in firefox but not ie Pin
Christian Graus25-Jun-08 12:26
protectorChristian Graus25-Jun-08 12:26 
Questionbutton requires 2 clicks to open a file browser Pin
gottimukkala25-Jun-08 5:28
gottimukkala25-Jun-08 5:28 
AnswerRe: button requires 2 clicks to open a file browser Pin
Parwej Ahamad25-Jun-08 5:37
professionalParwej Ahamad25-Jun-08 5:37 
QuestionCrystal reporting problems in ASP.Net project Pin
Richard Jones25-Jun-08 5:08
Richard Jones25-Jun-08 5:08 
AnswerRe: Crystal reporting problems in ASP.Net project Pin
Parwej Ahamad25-Jun-08 5:17
professionalParwej Ahamad25-Jun-08 5:17 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.