I have a GridView. I am trying to make an Array or ArrayList of type structure. The vales that I want to make the ArrayList or Array (I don't know which one is more appropriate) from are points with latitude and longitude and are of type float. I have:
Point[] Array = new Point[counter]; foreach (GridViewRow row in GridView1.Rows) {......
i'm new to programming and i'm doing a project of ana e-store, i have a data gridview that brings data from a data base and it have to more templeate files one a textbox and the other one is a label. and i have a button outside the grivdview. what i need that when i press on this button it will take the values from the grid view and insert them into a new sql table.
[Code]....
and here is the VB code that i'm trying to use with no luck : [Code]....
I want to change one of my table columns data type. Now the column data type is varchar and i want to change it to float. Updated all the column data to numeric and tried to convert the datatype with the following syntax
alter table vibration_values alter column dis_v float
but getting the error as
Error converting data type varchar to float.
The statement has been terminated.
Suprisingly every thing worked well in sqlserver 2005 and not working in sqlserver 2000.
I have this error "The given value of type String from the data source cannot be converted to type datetime of the specified target column." when I used sqlbulkcopy to do the transaction
I've this checkboxlist with different sports items inside (Example Swimming, Floorball, Basketball and etc). Users are able to check/tick more than one item as they may be interested in lots of different sports. However, I realised that I'm not able to save all the items that the user has checked into the database; only an item will be saved. How can I save all the items that the user has checked into the database?The codes I'm implementing now:cblSportsInterest.SelectedValue (to save the value into the database)
I have been looking for a way to convert C# datatype into database specific type of MS SQL. For example when I do [Code]....
I would get System.GUID or something like that but what I want is UniqueIdentifier instead of System.GUID. In most cases, I would also want the length of the type like varchar(1000) and stuff like that. Is there anyway I could convert or get similiar result ?
I had a 14 digit create datetime and resolved datetime in float time format and I could parse the date using following conversion:
CONVERT(datetime, LEFT(CAST(CAST(is_resolved_datetime as BigInt) as varchar(14)),8)+' '+ SUBSTRING(CAST(CAST(is_resolved_datetime as BigInt) as varchar(14)),9,2)+':'+ SUBSTRING(CAST(CAST(is_resolved_datetime as BigInt) as varchar(14)),11,2)+':'+ SUBSTRING(CAST(CAST(is_resolved_datetime as BigInt) as varchar(14)),13,2))
If I were to extract only the time difference of two datetimes in hr:min:sec.
I'm creating a website and currently making tests for registration. I've manage to create a registration form in the web site and save what the user inputs in the textboxes into a sql server 2008 database.
One of the fields is Password. What I want know is how do you save the password into the database but the database stores it encrypted. That way I'm just able to see the password encrypted. Then when I make a log-in form how to validate the password input by the user with the encrypted one and give a succesful login.
how can we save the uploaded file path in to database and then retrieve it in gridview as a link so when user click on that it will open that file in browser.
I am doing update query to edit my records and save to my database...I am getting the query expression exception...syntax error (missing operator) in query expression 'WebLogin=krish'.
string strUserName = Request.QueryString["UserName"].ToString(); DateTime dateTimeNow = DateTime.Now; string ConnString = ConfigurationManager.ConnectionStrings["Data"].ConnectionString;[code].... I am getting the exception syntax error (missing operator) in query expression 'WebLogin=krish'.
I have been in the process of updating my code with security methods, and I've been learning this from [URL] (or "Security Guidelines: ASP.NET 2.0"). In the middle of the page under "When Constructing SQL Queries, Use Type Safe SQL Parameters" it says "Use type safe parameters when constructing SQL queries to avoid possible SQL injection attacks that can occur with unfiltered input". Now, what they suggested was to use code like:
"DataSet userDataset = new DataSet(); SqlDataAdapter myCommand = new SqlDataAdapter(LoginStoredProcedure", connection); myCommand.SelectCommand.CommandType = CommandType.StoredProcedure; myCommand.SelectCommand.Parameters.Add("@au_id", SqlDbType.VarChar, 11);........"
So, that would be how I would modify my current code base to use type safe parameters in sql updating/inserting.
Getting to my actual question, as it was said "Use type safe parameters when constructing SQL queries to avoid possible SQL injection attacks that can occur with unfiltered input". First off, this suggests that this should apply to unfiltered input. Also, in their example they only did this for an ID.
So, what I'd like to know, when it comes to "unfiltered input", does this mean as long as the input is unfiltered I must use type safe parameters, or even filtered input shall have this (just to be sure), like, input that has been ran through a regularexpression check? Shall I do this for all values I insert/update into the database, or just IDs and important things?
The way I see it right now is that it would be a good precaution to just do type safe checks on everything (literally) that updates/inserts into the database just to be extra safe. But, I really am unsure if this is really the best idea, because if I did, would this possibly cause overprocessing of information? Can this cause too much strain on server resources? If my fears serve true, what would be a good suggestion of how I could implement this properly without having to worry about what I said?
I get the error - Conversion from type 'DBNull' to type 'Integer' is not valid. - on the line.....
Dim newid As Integer = e.Command.Parameters("@latestRowId").Value.........in vb code behind.
I have the identical code for another page with the exception of the field names and it works fine. The only thing I did differently, as far as I know, is I copied the asp and code behind from the page that works into this page and manually changed the field and table names. I don't know what the problem is. Does anyone see any problems?