.net 3.5 - Server.UrlEncode Is Not Working For " * " 3.5?
Aug 11, 2010Server.UrlEncode("2*")return 2*while it should return 2%2Aas tested on this demo site
View 2 RepliesServer.UrlEncode("2*")return 2*while it should return 2%2Aas tested on this demo site
View 2 RepliesI would like to use Server.UrlEncode in .ashx.
I try with the following code.
HttpServerUtility ser = new HttpServerUtility();
ser.UrlEncode(pfile.FileName);
That's wrong but however I would like to use Server.UrlEncode so let know the way.
In ASP:
Server.URLEncode("+&(). -*<>/|")
' returns %2B%26%28%29%2E+%2D%2A%3C%3E%2F%5C%7C
In ASP.NET
Uri.EscapeDataString("+&(). -*<>/|")
// returns %2B%26().%20-*%3C%3E%2F%5C%7C
HttpUtility.UrlEncode("+&(). -*<>/|")
// returns %2b%26().+-*%3c%3e%2f%5c%7c
Is there any elegant way how to mimic old ASP behavior in ASP.NET?
So I have a Hyperlink called lnkTwitter:And I'm trying to set the url in the code behind:lnkTwitter.NavigateUrl = string.Format("http://www.twitter.com/home?status={0}", Server.UrlEncode("I'm Steven"));When I do that and hover over the link, the url displays correctly in the status bar as "http://www.twitter.com/home?status=I'm+Steven", but the actual url, if I click on the link or look at the link's properties, is "http://www.twitter.com/home?status=I%27m+Steven".For some reason, this only happens in Firefox; in IE, I am taken to the correct url.
View 3 RepliesFor protect against XSS we should make all input from textboxes thoht Server.Htmlencode function.
1) If i let a input go thorgh Server.Htmlencode and save it in database. But what happen if i letter show this input data from database on browerser ...if database input data have <script> it will then make Xss!!!!.
2) I use Server.Htmlencode.. and the user write <b>ss<b>... (label.text = userinput.text;) and i WANT to show ss in browser. What shuld i do for make this happen ??
I have two page
1-index.aspx
protected void ImageButton3_Click(object sender, ImageClickEventArgs e) {
string data = Server.UrlEncode(txtNumeric.Text);
SqlCommand _cmd = new SqlCommand("traidname", _cn);
_cmd.CommandType = CommandType.StoredProcedure;
_cmd.Parameters.Add("@BehCode", data);
[Code] ....
Here I use textbox .text for server.urlEncode according to this code it go to tName + "?BehCode=" that
SP
ALTER procedure [dbo].[traidname]
@Behcode nvarchar(30)
as
begin
select T_name
from House_Info
where Behcode=@Behcode
end
And this is code in my destination(depending to tname column in house_info tabel) page
I use below code to bind data from database in destination pages
string data = Server.UrlDecode(Request.QueryString["BehCode"]); _cmd.Parameters.AddWithValue("@behcode", data);
Now in index.aspx page i have linkbutton that i want when users click on it, it do something like
ImageButton3_Click event
This is my datalist code that linkbutton is in this datalist
<asp:DataList ID="DDLstore" runat="server" RepeatColumns="3" RepeatDirection="Horizontal" "> <ItemTemplate> <table class="DDL2h"> <tr> <td style="height: 35px"> <asp:Label ID="Label3" runat="server" Text='<%# Eval("Name") %>' CssClass="TDnameH"></asp:Label> </td> <tr> <td> <asp:LinkButton ID="LinkButton2" runat="server" CssClass="LBP2" onclick="LinkButton2_Click">see all product</asp:LinkButton> </td> </tr> </table> </ItemTemplate> </asp:DataList>
Now how I can write code for linkbutton event that do same thing like ImageButton3_Click event?
and notice that both linkbutton and imagebutton are in index.aspx page ...
i have a requirement to encode the url in javascript and in redirected page i can't use javascript so i must decode the url back in code. so i needs a javascript encode method which encodes url like URLEncode method of asp.net so that i can decode it in code with UrlDecode method
View 3 RepliesI have spent quite a bit of time researching this here on Asp.Net's Forums, but also on the web in general, and I am still drawing a blank.
The problem: I am trying pass a values such as ... "Jacob's Carpentry" as a query string to another page. However, the other pages keeps seeing "Jacob\s Carpentry".
What I have tried: I have tried using both the Server.UrlEncode and HttpUtility.UrlEncode, and neither have worked. I have also tried using them twice as was suggested in this article, but still with no luck. Finally, I went so far as to try and encode the string, but then do a String.Replace on the " ' " apostrophe and substitute with a "%27". This also did not work, as it appeared that the String.Replace wiped out the encoding.
So I am stuck/lost. It appears the standard PHP functions easily encode the apostrophe, but for some reason the .Net function isn't working.
Here is the code I am using ...
[Code]....
I notice, however, then if I put a breakpoint where the PostBackUrl is set, the encoded string is still only showing "Jacob's+Carpentry", no %27.
Cat.net is nabbing the following code, but I tried to use UrlEncode, but I am getting a http 400 bad requestencodedLink = Default2.aspx%3freturnURL%3d~%2fDefault.aspx
[Code]....
What is the best way to encode the url in Hyperlink without writing code behind. I have many uses and I would like to do it in the Hyperlink statemeent if possible. Some thing such as the following would be great:
(This does not work)
<asp:HyperLink
ID="HyperLink1"
NavigateUrl=
"<%=UrlEncode(~/All_Videos.aspx?tag=full length movie&title=The Movie)%>"runat="server">Movies</asp:HyperLink>
Url rewriting not working on live server in asp.net but locally working fine. but locally it's not case sensitive.
View 1 RepliesI have a login control that is working beautifully on my localhost, but not working on the server. It validates my username & password - and gives me an error if I enter an invalid username/password. However, if I enter the correct username/password, the page refreshes, but does not redirect me to the "ReturnUrl" that I see in the URL. I've seen posts on this, but nothing that I tried worked. I've tried setting the 'MembershipProvider'attribute of the login control. I don't want to set the DestinationUrl...I want it to take what is in the ReturnUrl in the querystring. I don't think it's a web.config issue cuz it works on localhost??
View 3 Repliesi made a after delete trigger on a table1 and in this trigger i insert the deleted data in another table name tab2.
when i execute the delete stored procedure of table1 from sql server 2005 then trigger working fine but when i execute delete stored procedure of table1 from c# then it is not working properly.
According to old AntiXss article on MSDN AntiXss.UrlEncode is used to encode link href (Untrusted-input in the following example):[URL]My understanding was, that UrlEncode should be used only when setting something to URL, like when setting document.location with JS. So why don't I use HtmlAttributeEncode in the previous example to encode [Untrusted-input]? On the other hand is there a security flaw if I use UrlEncode to encode HTML attributes like in the above sample?
View 1 RepliesI have created a dynamic Robots.txt file for my application and I have created an redirect entry in my web config in the <system.web> section and it works perfectly in my development environment but once I uploaded the file to my server it does not work and gives me an error 404.Requested URLhttp://www.canadawelcome.ca:80/robots.txt
Physical Path
E:webcanadawelc1htdocs
obots.txt
This is what I have added to my system.web section
I'm using the full-text feature on SQL Server 2008 RC2. Everything had been working well until today. I wanted to change the language for word breakers from Neutral to Slovakia. After I did that, I can't perform full-text search anymore. It simply give me no rows. I even deleted the old full-text catalog and created a new one and populated it, but it still gave no solutions. I tried to query dm_fts_index_keywords_by_document on my table and get only 1 row with a display term END OF FILE.
View 3 RepliesI tried myrepot.printtoprinter(1,fales,1,1) but thats working only for development machine. Not working on Hosted server!!!
View 1 RepliesI have such sql query, in which there are 8 to 9 temp table generated and from each temp table, I am fetching data with use of read table.
I want to store temp table output into gridview, but after using sqlcommand,I am able to display first temp table output into gridview, but after executing query first temp table destroyed and second sql query which is using first temp table, is not getting reference. as first temp table is not available.
e.g. #temp1 -> I am able to display out put in grid view & destroyed
#temp2 -> which is using #temp1, but not getting reference of #temp1.
so what should i do in this case?
I run a web site with VB.Net and Sql Server, at a web host (so I use one instance of their Sql Server db). I now get this nasty message when trying to access the web site: Column 'kryptotext' does not belong to table tabellen. I have seen this before (but with other columns mentioned), and when I spoke to the tech guys they said that the server gives up after five (or so) invalid requests. The old problems I had were due to the fact that I had used Application variables - at least the problems appeared when I added the variable and diappeared when I deleted them.
This time, I have done very little. I ran a new check when some items of a gridview were databound, and if a condition was ok, then a mail should be sent and an update take place in the db. For now, this will not be true, so the new code doesn't fire, and I have now reverted to the old code anyway. I got htis message this morning, and then it has worked the entire day without me changing the code at all, and now it stopped working again, so to me it seems as if it's either not my code's fault, or I somehow flood the db server with requests (but the web site is new so there are really no users yet). One more thing I have added: I imported the Net.Mail namespace to the baseclass I'm using for the aspx pages, but I can't believe that has anything to do with this.
I asked the tech guys again, and the server has been working the whole day. Here's the web site: [URL] I am able to connect to the admin part of the web site, so it's just the public web site itself that doesn't run. What should I do? Edit: Now, 30 minutes later, it works again. I haven't done anything, in fact I had dinner now.
Its regarding send mail via c#.net. The following code is working well in my local machine, upload it in server but its not working in server. I m using same smtp server name , email username , password in local and server. But i don't know what is problem? problem is in my coding?
System.Net.Mail.MailMessage objEmail = new System.Net.Mail.MailMessage();
objEmail.From = new MailAddress(dsAdmin.Tables[0].Rows[0]["Emailusername"].ToString());
objEmail.To.Add(To_Tmail.ToString());
objEmail.IsBodyHtml = true;
objEmail.Subject = Subject.ToString();
objEmail.Body = message.ToString() + dsAdmin.Tables[0].Rows[0]["Emailsignature"].ToString();
SmtpClient client = new SmtpClient();
System.Net.NetworkCredential SMTPUserInfo = new System.Net.NetworkCredential(dsAdmin.Tables[0].Rows[0]["Emailusername"].ToString(), dsAdmin.Tables[0].Rows[0]["Password"].ToString());
client.UseDefaultCredentials = false;
client.Credentials = SMTPUserInfo;
client.Host = dsAdmin.Tables[0].Rows[0]["SMTPservername"].ToString();
client.DeliveryMethod = SmtpDeliveryMethod.Network;
client.Port = 587;
try
{
client.Send(objEmail);
res = true;
catch (Exception exc)
{
res = false;
}
I am working on developing a .net application with c#. I have a remote DB server with sql server 2008. I have a process (exe) that writes to several tables including MSH table. I have anr sproc that updates message id in the MSH table. The update sproc is fired after the write process. When I put some break points in my code and run it through the debugger, the update srpoc always updates the record in the MSH table amd looks like everything is working fine. But when I remove the breakpoints and just run the application, I find that the records are not updated.. I run through the debugger again with breakpoints and copy the update command and parameters to test it running directly on sql server management studio query window, it works. No exceptions thrown, but update sproc does not work without the debugger with breakpoints on. Any clues what I should be looking for to troubleshoot?
View 4 RepliesI have used Ajax control Toolkit(1.0.11119.20010) with ASP.Net 2.0.My website working fine at local network and ajax control functioning well but at server end ajax control not functioning, my website running and not throwing any error but whatever ajax control i have used is not functioning at server end..Following dlls are included in project: AjaxControlToolkit, AjaxExtensionbox, System.Design, System.Drawing.Design, System.Web.Extensions, System.Web.Extensions.Design
View 5 Repliesi have in asp.net a few textboxes and i wish to update my database with the values that they encapsulate. The problem is that it doesn't work and although it doesn't work, the syntax seems correct and there are no errors present . Here is my linkbutton:
<asp:linkbutton id="clickOnSave" runat="server"
onclick="Save_Click" Text="Save Profile" />
and my update function
protected void Save_Click(object sender, EventArgs e)
{
SqlConnection con = new System.Data.SqlClient.SqlConnection();
con.ConnectionString = "DataSource=.\SQLEXPRESS;AttachDbFilename=C:\Users\alex\Documents\seeubook_db.mdf;Integrated Security=True;Connect Timeout=30;User Instance=True";
con.Open();
String commandString = "UPDATE users SET last_name='" + Text4.Text.Trim() + "' , first_name='" + Textbox1.Text.Trim() + "' , about_me='" + Textbox5.Text.Trim() + "' , where_i_live='" + Textbox2.Text.Trim() + "' , where_i_was_born='" + Textbox3.Text.Trim() + "' , work_place='" + Textbox4.Text.Trim() + "' WHERE email='" + Session["user"] + "'";
SqlCommand sqlCmd = new SqlCommand(commandString, con);
sqlCmd.ExecuteNonQuery();
con.Close();
}
i have been having trouble trying to find out what is wrong with my sql select query... i wanted to select a sessionID by comparing the tourID and dates. the dates datatype at the database is datetime and the value of itemSessionDate is in string. i tried to convert itemSessionDate to date and dateAndTime but it gave me mm/dd/yyyy while the date in my database is dd/mm/yyyy hh:mm:ss. so i thought i can try using the itemSessionDate string as it has the same value as the one return from the database. but it keeps on goin to the if not reader.hasRows and quit the statement
[Code]....
i am added one button on user control it is working fine locally but not working on server my error is CS1061: 'ASP.templates_categories_productsingrid_ascx' does not contain a definition for 'dl_viewall' and no extension method 'dl_viewall' accepting a first argument of type 'ASP.templates_categories_productsingrid_ascx' could be found (are you missing a using directive or an assembly reference?)
View 2 Replies