What is the common practice of input validation? In other words do you check for input validation on client-side, on server-side or on both sides?
Also, if performance is crucial to me, would just the client-side input validation be sufficient for my website without presenting any security risks?
I'm working on an application that has a large number of inputs for certain types (50 money inputs, 30 date inputs etc). I have been creating an CompareValidator for each one to make sure users are putting in the correct information but I am curious if there is an easier way to create the validation once and apply it to all desired inputs? Writing out 80 validators that do basically the same thing seems like a waste. Am I missing something that already does this in .NET or are there anything out there that can make validation easier?
Note: All validation needs to be done on both the client AND server side. I've read a little about ASP.NET MVC validation but unfortunately that won't be an option here.
I am making some change to my MVC app to allow user to modify their existing email address contained in the profile. I have 'email' and 'confirm email' fields both which load the existing email address when the user enters the edit page (both textboxes are loaded from the same database field). The issue I am having is that when the user edits the 'email' text field and forgets or enters a different address into the 'confirm' field, validation occurs and instead of retaining what the user entered it loads what's contained in the Model when it tried to save into both fields once again (to the user it would appear that validation should not have occurred). I would like validation to fire and retain what the user initially entered in the text boxes.
For example, if the original email address is [URL] and the user enters [URL] for the 'email' address and forgers or enters a different address into the 'confirm' field, validation fires and loads [URL] into both because that's what was captured during the attempted Save. I would like for [URL] to remain in the 'confirm' textbox, or if the user entered something that never matched that would remain.
How can I get around this but still have the existing email address load into both fields when the user initially enters the 'Edit' area?
Search thru the wauy to do view input validation, have seen quite often refers this [Required], eg:
public class ProductViewModel {
[Price(MinPrice = 1.99)]
public double Price { get; set; }
[Required]
public string Title { get; set; }
}
What this [Required] actually is? In which assembly?
Is there any other good control for date field input apart from CalanderExtender of AJAX Control Toolkit?
View 2 RepliesIf I have a 3 layer web forms application that takes user input, I know I can validate that input using validation controls in the presentation layer. Should I also validate in the business and data layers as well to protect against SQL injection and also issues? What validations should go in each layer?
Another example would be passing a ID to return a record. Should the data layer ensure that the id is valid or should that happen in BLL / UI?
I need to show some html code in TextBox.this is my TextBox description:
<asp:TextBox ID="responseTextBox" runat="server"
Width="910px" ReadOnly="True" TextMode="MultiLine" CausesValidation="false" />
i am passing the html to it programatically, and it works, but on postback from page i'am getting the following error:
A potentially dangerous Request.Form value was detected from the client (ctl00$MainContent$responseTextBox=" ...
How can i disable input validation ?
I've got an ASP.NET 4 site on which I want to allow people to put '<' in their password. However, .NET gets in the way by blocking (what it sees as) an attempt to put HTML in a form field. I know I can turn off input validation entirely, but I only want to turn it off for this one field. Does anyone know an easy way to do that?
View 2 RepliesI am using Update Panel in my asp page and I am doing JQuery Validation on Asynchronous Postback...I just want to validate my form on only button clicks or submits..My problem is..all my buttons are in different formviews and won't load at a time...that's why I am unable to take the button id's and use the click events..here is my code..
Sys.WebForms.PageRequestManager.getInstance().add_initializeRequest(ValidateMyForm);
function ValidateMyForm(sender, args) {
var objPost = args.get_postBackElement(); [code]..
All I want to do is: 2nd time validation on only button submit not for everything...I do get other postbacks on this page and those post backs also gets validated each time (I want to Avoid this)...
This might be a silly question, how do you usually response to errors? Response with one error at a time or Response with multiple errors at a time, in a list record
Example
Invalid Email Address format
Invalid Phone number format
Invalid Password .etc...
Invalid API credentials
I am using below code to validate interger and float in asp.net but if i not enter decimal than it give me error
<asp:TextBox ID="txtAjaxFloat" runat="server" />
<cc1:FilteredTextBoxExtender ID="FilteredTextBoxExtender1" TargetControlID="txtAjaxFloat" FilterType="Custom, numbers" ValidChars="." runat="server" />
i have this regex also but its giving validation error if i enters only one value after decimal. [URL]
I have the following object:
[Code]....
In my edit View, I have the following:
[Code]....
Lastly, my validation in my controller looks like this:
[Code]....
The validation works for both First and Last in that the Validation Message is properly displayed for the appropriate error. However, the input-validation-error class is not being set on the textbox.
How do I ensure that the input-validation-error class gets set on the textbox when the textbox is tied to a field in a nested class of the Model?
I'm a total newbie with MVC -- learning it with MVC3 using Razor.
I just watched the video on PluralSight and was just following along with the example. I created my own Movie and MovieRepository objects. I then created a strongly typed view for adding a new movie. This is what's in the view:
[Code]....
My Movie object looks like this:
[Code]....
If I click submit without entering anything in the input field, I get validation messages i.e. The Rating field is required or if I enter non-numeric data, I get The field Rating must be a number.
I didn't wire this and wanted to understand where this is coming from.
How do I implement client side validation for input fields that have been added to the form dynamically with javascript in an MVC 2 application?
View 2 RepliesHow can i make a control required to put input depending on the radiobuttonlist selection? Let me try to clarify a bit more. I got 2 radiobuttons, if one gets selected, nothing else has to be done. But if the otherone gets selected, a textfield must have some input too.
View 2 RepliesI have a custom user control with some input fields and a submit button. I need to validate the fields using the jquery validation plugin when the submit button is clicked. (The function of the submit button is to create another custom control which displays the data entered in the above mentioned control)
Bt as far as I knw, validation plugin works only with form validation ryt? And my custom control does not contain a form tag as I am using master pages. The custom control is present in one of the content pages and the master page already contains a form tag with a runat=server attribute. And I guess one page can contain only a single form tag with runat=server attrib ryt?
So how do I get it to work?
I was using RangeValidator to validate user input on client side for double values.One of my user said that when he enters 5E-10, my range validator does not understand that number as a valid double.
View 1 Replies to directly get all elements in a form who contains a non html attribute ?
<input .... customAttribute="validateMe">
So I could find all input elements that will require validation.And use this in a loop to add validation to the input's found :
$('input').attr("customAttribute").val() == "validateMe"
I could also write every validation for each object separately, I have only a few elements who uses a required validation but it would be nice that I could do this in one shot instead of repeating the $("input").rules("add .....
I have some code where I need two separate required field validators for one control, both in separate validation groups which are then validated by two separate buttons.This approach works well when the buttons are clicked but both validators show if I enter a value in the textbox and then remove it.
Is there a way to turn this"lost focus" validation off? I only need it to validate when the buttons are clicked.
EDIT,Unfortunately, if I set EnableClientScript=false then I dont have any client notifications. What I want is for the dynamic error message to show (effectivly in the OnClientClick event of the button) but not the "lost focus" of the textbox.Is there some way I can disable or "unhook" the lostfocus client event?
EDIT,A combination dDejan's answer and womp's answeer here sorted the problem perfectly.
My final code looks like this (for anyone else with a similar situation)...
Javascript...
<script type="text/javascript">
$(document).ready(function() { [code]....
So, now there is no validation until a user clicks either the "Get Email Confirmation Code" button or the "Register" button. If they click the "Get Email Confirmation Code" button all of the controls validate apart from the textbox where the user is to input the email validation code and we only see one validator message.
If they click the "Register" Button then all of the controls validate and we only see one validation message.If either button is pressed, the user goes back, adds and then removes some text then we only see one validator. Before this change you used to see both messages saying the same thing.
I am using one datalist control for uploading multiple images.I hv used one Asp:FileUplaod Control and one button in one itemtemplate.I am using reqired field validator and regular expression validator for file upload cntrl I am assigning validation group for both of them on ItemDataBound event of my datalist so that each upload cntrl hv same validaton group as required field and regular expression validator.Now what i want to do is - i want to show my error message in validation summary which is right at the top of the page.I want one know how to write javascript that will assign validation group of my control in datalist on which i click ?
View 1 RepliesI have a web application where users can upload the photo. I do have a windows service running which takes the uploaded photo and crops it to different sizes. This runs in a specified interval. Photo will be visible to the user once after it's cropped. So once user uploads the photo and photo cropper has not yet run, they wont be able to see the photo. Due to this behaviour user thinks that there was some error uploading the photo and they will upload it again and again.
where the photocropper runs immediately when the user uploads the photos which is queued.
I am using asp.net & C#.
I'm about to begin an ASP.NET MVC project and I'm not sure how to approach an aspect of the design. Basically, there is a user site and an admin site. In the admin sites, administartors design a form and send an e-mail link out to a handful of people. When the users click on the link, they are sent to the form.
Essentially what I'm wondering is what are the best practices when the model resembles looks more like a dictionary than a table?
In other words, instead of:
CREATE TABLE FormResponse (ResponseId, FormId, UserId, FirstName, LastName, BirthDay, Comments)
...containing 1 row per complete response
It's more like:
CREATE TABLE FormResponse (ResponseId, FormId, UserId, QuestionId, Value)
...containing 4 rows. 1 for the FirstName, 1 for the LastName, 1 for the BirthDay, and 1 for Comments.
I'm very new to MVC (just started 2 days ago), and I would like to know what the best practice is for outputing HTML.
I have a model named Tools.cs which contains the code below. It uses a stored procedure to return a recordset of menu items, and another to return a second level of menus for each first level menu. In another function, I then loop through the recordset and generate the HTML code to display the menu in a string, which is then returned.
I then have a controller MenuController.cs which calls the GetMenu method and puts the returned HTML string in the ViewData["RightMenu"].
I then have a view which displays the result.
My question is: would it be better practice to return my datareader to the controller into ViewData["RightMenu"], and then loop through it and construct my HTML in the View instead?How would I get that to work with that second level of menus?[Code]....
For WPF, there's the Microsoft Patterns & Practices's Prism project.
Prism provides guidance designed to you more easily design and build rich, flexible, and easy-to-maintain
Windows Presentation Foundation (WPF) desktop applications, Silverlight Rich Internet Applications (RIAs), and Windows Phone 7 applications I was wondering whether a similar project (reference implementation) intended for software developers building WCF applications exists.
In our main internal project (a .Net WinForms rich client app), we don't talk directly with the database but instead fetch and update data with ASP.Net web-services that we also control. Our current setup is giving us some bottlenecks. For a new smallish project, we want to try WCF. Objective question: Where do I find a not-too-basic WCF reference project?
In my experience building web applications, I've always used a n-tier approach. A DAL that gets data from the db and populates the objects, and BLL that gets objects from the DAL and performs any business logic required on them, and the website that gets it's display data from the BLL.I've recently started learning LINQ, and most of the examples show the queries occurring right from the Web Application code-behinds(it's possible that I've only seen overly simplified examples). In the n-tier architectures, this was always seen as a big no-no.I'm a bit unsure of how to architect a new Web Application.
View 2 Replies
