Regular expression validator validation expression

See more:

VB

MS-Access

The form page for submitting questions keeps giving me my error message and I can't figure out why. The only thing I don't want are the "H1 - H4" attributes, <input, <a and . With the questions and answers need to be able to allow all other. However, by typing the following into the textbox I get my error message telling me my question is not vaild.

Question being typed in: What is the best way to stop the ringing, buzzing sound I hear

Produces the postNewQuestion.aspx RegularExpressionValidator error message.

If I remove the RegularExpressionValidator from the page and try to submit the question to the access database; I get the following error instead:

Server Error in '/' Application.

Data type mismatch in criteria expression.

Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.Data.OleDb.OleDbException: Data type mismatch in criteria expression.

Source Error:


Line 26: com.CommandText = "insert into QuestionList values('" + qid + "','" + TextBox1.Text + "','" + DropDownList1.SelectedValue + "','" + DateTime.Now.ToLongDateString() + "','" + Session("member") + "')"
Line 27: con.Open()
Line 28: com.ExecuteNonQuery()
Line 29: Dim pointCnt As New DataTable
Line 30: pointDs = New OleDbDataAdapter("select [points] from Points where Member='" + Session("member") + "'", con)

Source File: E:\hosting\blueeyeweb\postNewQuestion.aspx.vb Line: 28

Stack Trace:


[OleDbException (0x80040e07): Data type mismatch in criteria expression.]
System.Data.OleDb.OleDbCommand.ExecuteCommandTextErrorHandling(OleDbHResult hr) +1007584
System.Data.OleDb.OleDbCommand.ExecuteCommandTextForSingleResult(tagDBPARAMS dbParams, Object& executeResult) +255
System.Data.OleDb.OleDbCommand.ExecuteCommandText(Object& executeResult) +188
System.Data.OleDb.OleDbCommand.ExecuteCommand(CommandBehavior behavior, Object& executeResult) +58
System.Data.OleDb.OleDbCommand.ExecuteReaderInternal(CommandBehavior behavior, String method) +161
System.Data.OleDb.OleDbCommand.ExecuteNonQuery() +113
postNewQuestion.Button1_Click(Object sender, EventArgs e) in E:\hosting\blueeyeweb\postNewQuestion.aspx.vb:28
System.Web.UI.WebControls.Button.OnClick(EventArgs e) +111
System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument) +110
System.Web.UI.WebControls.Button.System.Web.UI.IPostBackEventHandler.RaisePostBackEvent(String eventArgument) +10
System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument) +13
System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData) +36
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +1565

<b>What I have tried:</b>

postNewQuestion.aspx

<pre>
&lt;asp:TextBox ID="TextBox1" runat="server" style="text-align: left" TextMode="MultiLine" Width="313px" Height="140px" CssClass="polbx">&lt;/asp:TextBox>&lt;br />

&lt;asp:RegularExpressionValidator ID="RegularExpressionValidator1" runat="server" ErrorMessage="*" ValidationExpression="[^\&lt;\>\'\@]" ControlToValidate="TextBox1">&lt;/asp:RegularExpressionValidator>

&lt;center>&lt;asp:Button ID="Button1" runat="server" Text="Ask Question" />&lt;/center>

&lt;asp:Label ID="errMessage" runat="server" Font-Bold="True" Font-Size="Larger" ForeColor="#FF3300" Width="100%">&lt;/asp:Label>
</pre>

postNewQuestion.aspx.vb
<pre>
Dim dap, pointDs As OleDbDataAdapter
Dim con As OleDbConnection
Dim com As New OleDbCommand
Dim invalid() As String = {"&lt;h1>", "&lt;script>", "&lt;h2>", "&lt;input", "&lt;h3>", "&lt;a", "&lt;h4>"}

Protected Sub Button1_Click(ByVal sender As Object, ByVal e As System.EventArgs) Handles Button1.Click
If Button1.Text = "Ask Question" Then
If TextBox1.Text &lt;> "" Then
For Each s As String In invalid
If TextBox1.Text.ToLower.Contains(s) = True Then
errMessage.Text = Server.HtmlEncode("Cannot Contain &lt;h1>,&lt;Script>,&lt;input>,&lt;a> etc tags")
Exit Sub
End If
Next
con = New OleDbConnection("Provider=Microsoft.Jet.Oledb.4.0 ;data source=" & Server.MapPath("app_data/SimpleQSet.mdb") & ";")

com.Connection = con
Session("member") = "Charles Smith"
Dim ran As New Random
Dim qid As String = ran.Next(0, TextBox1.Text.Length)
com.CommandText = "insert into QuestionList values('" + qid + "','" + TextBox1.Text + "','" + DropDownList1.SelectedValue + "','" + DateTime.Now.ToLongDateString() + "','" + Session("member") + "')"
con.Open()
com.ExecuteNonQuery()
Dim pointCnt As New DataTable
pointDs = New OleDbDataAdapter("select [points] from Points where Member='" + Session("member") + "'", con)
pointDs.Fill(pointCnt)
Dim pnt As Integer = pointCnt.Rows(0)(0) + 1
com.CommandText = "update points set [points]='" & pnt & "' where member='" & Session("member") & "'"
com.ExecuteNonQuery()
con.Close()
Else
errMessage.Text = "Question Cannot Be Blank"
End If
Else
Response.Redirect("~/postNewQuestion-Confirmed.aspx")
End If

con.Close()

End Sub
</pre>

postNewQuestion.aspx.vb - <b>Full Code</b>

<pre>Imports System.Data.OleDb
Imports System.Data

Partial Class postNewQuestion
Inherits System.Web.UI.Page

Dim dap, pointDs As OleDbDataAdapter
Dim con As OleDbConnection
Dim com As New OleDbCommand
Dim invalid() As String = {"&lt;h1>", "&lt;script>", "&lt;h2>", "&lt;input", "&lt;h3>", "&lt;a", "&lt;h4>"}
Protected Sub Button1_Click(ByVal sender As Object, ByVal e As System.EventArgs) Handles Button1.Click
If Button1.Text = "Ask Question" Then
If TextBox1.Text &lt;> "" Then
For Each s As String In invalid
If TextBox1.Text.ToLower.Contains(s) = True Then
errMessage.Text = Server.HtmlEncode("Cannot Contain &lt;h1>,&lt;Script>,&lt;input>,&lt;a> etc tags")
Exit Sub
End If
Next
con = New OleDbConnection("Provider=Microsoft.Jet.Oledb.4.0 ;data source=" & Server.MapPath("app_data/SimpleQSet.mdb") & ";")

com.Connection = con
Session("member") = "Charles Smith"
Dim ran As New Random
Dim qid As String = ran.Next(0, TextBox1.Text.Length)
com.CommandText = "insert into QuestionList values('" + qid + "','" + TextBox1.Text + "','" + DropDownList1.SelectedValue + "','" + DateTime.Now.ToLongDateString() + "','" + Session("member") + "')"
con.Open()
com.ExecuteNonQuery()
Dim pointCnt As New DataTable
pointDs = New OleDbDataAdapter("select [points] from Points where Member='" + Session("member") + "'", con)
pointDs.Fill(pointCnt)
Dim pnt As Integer = pointCnt.Rows(0)(0) + 1
com.CommandText = "update points set [points]='" & pnt & "' where member='" & Session("member") & "'"
com.ExecuteNonQuery()
con.Close()
Else
errMessage.Text = "Question Cannot Be Blank"
End If
Else
Response.Redirect("~/postNewQuestion-Confirmed.aspx")
End If

con.Close()

End Sub

Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load
If Session("member") = Nothing Then
Button1.Text = "Sign In To Post a Question"
End If
End Sub

Protected Sub Page_int(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load
If Session("member") = Nothing Then

Response.Redirect("error42059loginrequired.aspx")

End If
End Sub
End Class
</pre>