Re: Gridview with rows calcul - ASP.NET Discussion Boards

Re: NOOB Question: using LIKE in SelectParameter

Figmo25-Oct-10 7:12

5-Oct-10 7:12

Great suggestions all - thank you. What I ended up doing was a little different. I think elegant, but maybe not. Open to critiques...

I left the ControlParameter tied to my text box. (the parameter is called @SearchExpr)

My WHERE clause in the SelectCommand is simply "...WHERE Field LIKE @SearchExpr..." (no concatenation, thus no problems with single quotes needing to be escaped)

And added an event handler for SqlDataSource.Selecting that does this...

protected void SqlDataSource1_Selecting(object sender, SqlDataSourceSelectingEventArgs e)<br />
{<br />
    e.Command.Parameters["@SearchExpr"].Value = "%" + e.Command.Parameters["@SearchExpr"].Value + "%";<br />
}

So now the user just enters ANY search string into the text box (e.g. "O'Hara")
This is passed to the SelectCommand as a parameter, thus it is not executable code - so no worries about SQL injection (I think)
And then, in the event handler, right before the SelectCommand is applied to the SqlDataSource, I modify the value to add the % signs front and back.

It works like a charm but the only thing I am not certain of is how well protected I am against injection attacks. Am I right in assuming that this should be adequate protection?

Re: NOOB Question: using LIKE in SelectParameter

Electron Shepherd5-Oct-10 8:11

Electron Shepherd

5-Oct-10 8:11

Figmo2 wrote:
Am I right in assuming that this should be adequate protection?

You're using a parameterised query, so you should be OK on that front. However, take a look at http://msdn.microsoft.com/en-us/library/ms179859.aspx[^] for some more "magic characters" that might appear in your search string, and give unexpected results.

Server and Network Monitoring

How to present the link more elegant(ASP.Net,C#.Net) [modified]

Jayadheer Reddy5-Oct-10 3:40

Jayadheer Reddy

5-Oct-10 3:40

Hi All,
I had a task which is compare the customer age in the background and if he is 18+ then I have to show
him he is allowed for a new feature(this is typically a click link which in turn call another service) if he is under 18 then there is no display of new feature.

Client asked me to present that new feature to please the people who are eligible.

I have done all the background tasks except the presentation.
my code struck here

if(age>18)
{
///////////

}

Any suggestions????

Thanks

-- Modified Tuesday, October 5, 2010 10:06 AM

Re: How to present the link more elegant(ASP.Net,C#.Net)

Brij5-Oct-10 4:56

Brij

5-Oct-10 4:56

Jayadheer Reddy wrote:
my code struck here

if(age>18)
{
///////////

}

use some link or linkbutton or tab according to your page need and display it in only when your condition gets true.

Cheers!!
Brij
My Blog:http://brijbhushan.wordpress.com

Check my latest Article :ViewState - Various ways to reduce performance overhead

Gridview with rows calcul

amina895-Oct-10 3:11

amina89

5-Oct-10 3:11

Hello I have a gridview with this form

ID_student -------exam_mark1 ------exam_mark2-----average

to calculate the average score I used this code

double average = 0;<br />
        foreach (GridViewRow MRow in GridView1.Rows)<br />
        {<br />
            average = double.Parse(MRow.Cells[2].Text ) + double.Parse(MRow.Cells[3].Text);<br />
            average = average / 2;<br />
            MRow.Cells[4].Text = moyenne.ToString();<br />
        }

but it returns me the following error: The format of the input string is incorrect.

Help me ,thanks

Re: Gridview with rows calcul

NeverHeardOfMe5-Oct-10 3:37

NeverHeardOfMe

5-Oct-10 3:37

the Cells collection is zero-based, so you want to average Cells(1) and Cells(2) adn put the answer in Cells(3), not 2, 3 adn 4 as you have it.

But what a horrible way of doing things...on teh sassumption that these results are pulled from a database, why not pull the average directly out of that in your select statement?

Or at least calculate the average in teh RowDataBound event....

Re: Gridview with rows calcul

Brij5-Oct-10 4:06

Brij

5-Oct-10 4:06

amina89 wrote:
but it returns me the following error: The format of the input string is incorrect.

Did you try to debug your code? Debugging if for this purpose only.

As already suggested, better to do this calcaluation and assiging in rowdatabound event.

Cheers!!
Brij
My Blog:http://brijbhushan.wordpress.com

Check my latest Article :ViewState - Various ways to reduce performance overhead

Re: Gridview with rows calcul

amina895-Oct-10 23:41

amina89

5-Oct-10 23:41

Thanks all ;

I still have the same error.

I forgot to say that the gridview is in edit mode for columns -exam_mark1 ,-exam_mark2 and I do not know if this is the cause.

  <asp:GridView ID="GridView1" runat="server" AllowSorting="True" AutoGenerateColumns="False"<br />
            BackColor="White" BorderColor="#CCCCCC" BorderWidth="1px" CellPadding="4" CssClass="th"<br />
            DataKeyNames="NUM_INSCRIPTION" Width ="60%"  Height="9%" PagerStyle-CssClass="note" Style="position: absolute; left: 126px; top: 159px;"<br />
           ><br />
            <FooterStyle BackColor="White" ForeColor="#000066" /><br />
            <RowStyle ForeColor="#000066" /><br />
            <SelectedRowStyle BackColor="#669999" Font-Bold="True" ForeColor="White" /><br />
            <PagerStyle BackColor="White" CssClass="note" ForeColor="#000066" HorizontalAlign="Left" /><br />
            <HeaderStyle BackColor="#006699" Font-Bold="True" ForeColor="White" /><br />
           <br />
<br />
<br />
 <Columns><br />
                <asp:TemplateField HeaderText="IDStudent"><br />
                    <ItemStyle CssClass="td00" /><br />
                    <ItemTemplate><br />
                        <asp:Label ID="lblUserID1" runat="server" Text='<%# Eval("NUM_INSCRIPTION") %>'></asp:Label><br />
                        <itemstyle cssclass="td00" /><br />
                    </ItemTemplate><br />
                </asp:TemplateField><br />
<br />
<br />
    <asp:TemplateField HeaderText="StudentName"><br />
                    <ItemStyle CssClass="td01" /><br />
                    <ItemTemplate><br />
                        <asp:Label ID="lblUserID2" runat="server" Text='<%# Eval("NOM_PRENOM_ETUDIANT_ARABE") %>'></asp:Label><br />
                    </ItemTemplate><br />
                </asp:TemplateField><br />
               <br />
<br />
<br />
 <asp:TemplateField HeaderText="mark1"><br />
                    <ItemTemplate><br />
                            <asp:Label ID="lblLastName1" runat="server" Text='<%# Eval("111") %>' Visible='<%# !(bool) IsInEditMode %>'></asp:Label><br />
                            <asp:TextBox ID="moyt1" runat="server" Text='<%# Eval("111") %>' Visible='<%# IsInEditMode %>'></asp:TextBox><br />
                    </ItemTemplate><br />
                </asp:TemplateField><br />
<br />
<br />
<br />
  <asp:TemplateField HeaderText="mark2"><br />
                     <ItemStyle CssClass="td02" /><br />
                    <ItemTemplate><br />
                        <asp:Label ID="lblLastName" runat="server" Text='<%# Eval("112") %>' Visible='<%# !(bool) IsInEditMode %>'></asp:Label><br />
                        <asp:TextBox ID="validt1" runat="server" Text='<%# Eval("112") %>' Visible='<%# IsInEditMode %>'></asp:TextBox><br />
                    </ItemTemplate><br />
                </asp:TemplateField> <br />
<br />
<br />
<br />
 <asp:TemplateField HeaderText="average"><br />
                    <ItemStyle CssClass="td01" /><br />
                    <ItemTemplate><br />
                        <asp:Label ID="lblUserID4" runat="server" Text='<%# Eval("NOTE_MODULE") %>'></asp:Label><br />
                    </ItemTemplate><br />
                </asp:TemplateField><br />
                <br />
                <br />
                </Columns><br />

when the teacher populated the gridview he clicks insert button to insert the marks in the database and then clicks on the button average whose code is the top one.
if I use sql to calculate the average. the sql query becomes long because the pivot.if I use RowDataBound I calculate the average row by row?
thanks

XML Problem

InderK5-Oct-10 1:37

InderK

5-Oct-10 1:37

Hi All,

Please help me regarding a doubt. i have a .xml file which is having around 3000 nodes, now I want to retrieve the name attribute of those nodes for which store attribute>30. Please suggest the esaiest way to do it.

Thanks,
Inder....

Re: XML Problem

torken25-Oct-10 2:16

torken2

5-Oct-10 2:16

Load the xml with the XmlDocument and use xpath to get the nodes. Iterate those nodes the read the attribute.

Example:

<code>

            XmlDocument xmlDoc = new XmlDocument();
            xmlDoc.Load("XMLFile.xml");
            XmlNodeList selectedNodes =  xmlDoc.SelectNodes("//Store[@Stores>30]");

            foreach (XmlNode item in selectedNodes)
            {
                Console.WriteLine(item.Attributes["name"].Value);
            }

            Console.ReadLine();
</code>

My xml file:

<?xml version="1.0" encoding="utf-8" ?>
<Stores>
  <Store name="Name1" store="10"/>
  <Store name="Name2" store="20"/>
  <Store name="Name3" store="30"/>
  <Store name="Name4" store="40"/>  
</Stores>

Cross post

Not Active5-Oct-10 2:24

Not Active

5-Oct-10 2:24

Don't cross post! Mad | :mad:

You have already asked this question in the C# forum, which is more appropriate than the ASP.NET forum but should have been placed in the XML forum

I know the language. I've read a book. - _Madmatt

Prevent upload of renamed and Password protected file in asp.net C#

Arokiamary5-Oct-10 1:27

Arokiamary

5-Oct-10 1:27

Hi ,
We are developing a portal in asp.net (C#), where user can upload documents , We need to prevent the upload of Renamed files(the extensions changed Ex.xxxx.exe changed to xxxx.docx) , and Encrypted files(Password protected). Please advice .

Regards,
Nancy

Re: Prevent upload of renamed and Password protected file in asp.net C#

Not Active5-Oct-10 2:22

Not Active

5-Oct-10 2:22

You won't be able to detect whether a file name has been changed prior to upload. As for encryption, there are copious amounts of documentation covering that subject.

I know the language. I've read a book. - _Madmatt

Re: Prevent upload of renamed and Password protected file in asp.net C#

NeverHeardOfMe5-Oct-10 3:23

NeverHeardOfMe

5-Oct-10 3:23

One assumes you want to restrict the uploaded file types to a certian set - eg doc, docx, pdf.. whatever. So I would think it possible to examine the uploaded file/s (byte by byte) in the code-behind to at least check that its format is that of the supposed file type, according to its extension. Some research would be required to determine a reasonable test for each type, but I wouldn't have thought that that would be beyond the wit of man... or woman.

query string question

swjam4-Oct-10 23:28

swjam

4-Oct-10 23:28

how do i debug when i am not getting back the querystring parameters from the browser to the server? thank you.

----------------------------------------------------------
Lorem ipsum dolor sit amet.

Re: query string question

Gamzun5-Oct-10 0:24

Gamzun

5-Oct-10 0:24

what do you mean? you can't see your parameters in the querystring or it's not even there?

Please don't forget to mark 'Good Answer', if you find it really a good one!

Kashif

Re: query string question

swjam5-Oct-10 0:59

swjam

5-Oct-10 0:59

i am not receiving it on the server side. i am actually more asking of a debugging technique/tool.

----------------------------------------------------------
Lorem ipsum dolor sit amet.

Re: query string question

Not Active5-Oct-10 1:18

Not Active

5-Oct-10 1:18

You can always manually type in the url with parameters to a browser. However, where is the request coming from? Is it from your own page? Then you need to determine why the query string is not being supplied.

I know the language. I've read a book. - _Madmatt

Re: query string question

swjam5-Oct-10 1:46

swjam

5-Oct-10 1:46

yes you're right that's what i'm doing is typing the url on the address bar with the query string. and it is my page. is fiddler something that would be useful in this situation? i'm talking about trapping the request/response.

----------------------------------------------------------
Lorem ipsum dolor sit amet.

Re: query string question

Not Active5-Oct-10 2:20

Not Active

5-Oct-10 2:20

You are going to have to elaborate. Are you using Visual Studio? You can't set a breakpoint and inspect the query string?

I know the language. I've read a book. - _Madmatt

Calling multiple Page Methods in parallel

Raheem MA4-Oct-10 22:54

Raheem MA

4-Oct-10 22:54

Hello All,

We have the following scenario.

1. In code behind page I have defined two Page Methods.
suppose Page Method 1 executes Add funtionality of two numbers. Page Method 2 executes Substraction functionality.

2. I want those two methods to execute at the same time in parallel. When the methods are called from JavaScript, they are called in sequential order. However, those two methods Add() and Subtract() should be called in parallel to improve the performance by getting the response quickly.

Can you please shed some light on this and help us to solve this issue.

Yours Raheem MA

Consume the Siebel On Demand web service in .Net console application.

Anurag_sriv4-Oct-10 21:33

Anurag_sriv

4-Oct-10 21:33

Hi,

I have Siebel On demand web service wsdl, I want to consume Siebel OD web service in my .Net console application.
I want to update Siebel OD picklist from .Net client
I can implement this from below 2 ways.

1. Add web reference and VS will automatically create proxy class.
2. Dynamically create input soap message and pass soap message across with help web service extension’s
webrequest and webresponse methods.

Please advice which one of above process will be good in performance, scalable, lightness of invocation of web service.

Thanks,
Anurag

Re: Consume the Siebel On Demand web service in .Net console application.

Anurag_sriv7-Oct-10 23:37

Anurag_sriv

7-Oct-10 23:37

No Reply ... Confused | :confused:

Request.Cookies.Add Vs Response.Cookies.Add

Gamzun4-Oct-10 21:16

Gamzun

4-Oct-10 21:16

I was just reading some article and there was an example regarding Cookies in ASP.Net. The example was using Request.Cookies.Add and I was like, Request is used to get something from client side, so this code is written incorrectly. But when I tried the code, it was a surprise for me to know that both exist and both does the same job. So I'm just wondering if someone out there knows the secret about this having Response and Request Add method for Cookies! Adios

Please don't forget to mark 'Good Answer', if you find it really a good one!

Kashif

html table in mobile web

behzadcp4-Oct-10 20:23

behzadcp

4-Oct-10 20:23

hi guys
i create a mobile web site and i want to create a html table to show some things
first i used response.write("<...>

" )
but not work
do you have any idea for this?
thanks a lot

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.