I recognized that based on a context in which I want to use some parameters, there are at least 4 kinds of encoding that are necessary to avoid corrupted code being executed :
Javascript encoding when constructing a javascript code, e.g.
var a = "what's up ?"
var b = "alert('" + a + "');"
eval(b); // or anything else that executes b as code
[Code]....
I have written a web mailer that can send and receive emails and display them on a webpage.I have a problem displaying special characters though. Like Russian, and Greek and chinese.I am using openpop.net and I can get the encoding of the incoming email as one of my variables.Thing is, how do I display it? Do I set the content encoding of the whole page to what that specific email encoding is?I've got it UTF-8 at the moment and I get garbage.
View 3 RepliesIn some javascript, I have:var url = "find.aspx?" + "location=" + encodeURIComponent( address );
alert( url );location.href = url;where the value of address is the string "Seattle, WA".
[code]...
So I'm getting three different representations whereas I would expect that in all three places I should see what I see in the alert. My expectation is that the url I assign to location.href should show up as-is in the browser url window, and should be passed as-is to the server in Request.Url (and I would need to decode the values on the server before using them).What's happening?
Im pulling out a text field from the database which has and 's in it for line breaks. Which I have left there for pupose of being able to edit the fields later on.
So when i try to display the text I need to replace them which I have done with:
[Code]....
Simple enough. Only when I run the page the source code I get for it is:
<br />
So it seems its not encoding the < as a encode but into the form <
Does anyone know how to stop this happen. Or a method around it?
MyGridView.DataSource = <<<what kind of objects here?>>>
DataTable works. What else?
I'm working against a database that wasn't designed by me and in all the tables there is a CreatedBy field that is an int. Now when I generate against this db i get all kinds of errors because subsonic is expecting that field to be a varchar.
I don't particularly want to go and rename the field in all of these tables so I was hoping there was a way to "alter" or change the internal convention (without getting into the source) in subsonic.
Has anyone been able/done this in subsonic 3.0.4??
EDIT: I'm using the active record model in subsonic 3
I want to develop my own REST service, so I've created an IHttpHandler that is configured with verb="*" and path="*", the the application in ~/MyRESTsrv/ will handle any derived URL.
This approach works good in IIS7 with "integrated mode" and apparently in IIS6 if you map all the extensions to "aspnet_isapi.dll".
Is this possible in Apache/XSP with Mono? Do I have to do something special or it will work out of the box?
this is my requirement
1 receive an xml string
2 data procress (retrieve data from db ãupdata from db ... )
3 return an result of xml string
this the way I did
1 receive an xml string
2 parse xml by this way
string NO = xml.GetElementByTat("NO")[0].InnerText;
string Name = xml.GetElementByTat("Name")[0].InnerText;
use data to active with Database
ex: select Manager from deparement where EMPNo = 'No' and EMPNAME = 'NAME'
3 return an result xml to the who call webservice
string rtnXml = "<ProjectTeam>"
+"<No>A121</NO>"
+"<Name>Jack</Name>"
+"<Manager>Allen</Manager>"
+"</ProjectTeam>";
like this... but sometimes this way is mass.. do you have other idea to deal with xml ?
If one file is used by other process and you are trying to manipulate with it...it gives an error:-
The process cannot access the file 'abc.txt' because it is being used by another process.
In C#, How can i come to know that 'abc.txt' file is used by the process Name "XYZ.exe" (or any other process)?
I have two tables that effectively have a many to many relationship between them. Effectively I want to perform a query that returns results just from Table2. For simplisity table2 has 4 fields: theId, ForeignId, Info, extra
In table2 there can be multiple records with the same value of ForeignId (but each will have a unique theId which is the tables primary key).
I want to perform a:
select top (1) * where ForeignId=x order by extra
which will select 1 record for a given ForeignId
However, I then want to wrap that within an outer query where I have a list of foreignId (ie where ForeignId in ListOfX) but I want to return 1 result record for each value of foreignId. Does that make sense? So the result will be a set of records with one record for each value of foreignId and that record would have 'info' from the top(1) record from the inner query.
ite on dataset model and I used to write sql quires into dataset and call them with in my c# code as usual. and used the datatablein c#code to access the values of each column which corresponds to a sql column in the sql table. after a while I found my website going on too slowso I decided to use linq to sql classes. i can write queries in c# code
[Code]....
I want my Data Access Layer to be built very modular.Therefore I have data retrieval methods that sometimes are called directly from the business layer and sometimes are called by other data retrieval methods to create object dependencies.What is the best way to deal with database connections in the DAL?
a) Create a new connection in every method and dispose it afterwards.Good: Easy to write and to work with.
Bad: Many connections are being opened and closed. (performance?)
b) Pass the connection as an (optional) argument.Good: I could reuse an open connection for multiple commands.Bad: I have to keep track of the ownership of the connection (who has to close it?) and cannot use the very neat "using" statements.c) Something else? (Connection as singleton maybe?)This is the first time I am writing a real DAL so I really could use some help from you experienced folks.EDIT: As it seems to matter, it's an ASP.Net Website Project.
I use the following string format to navigate between webpages:
String.Format(Eval("Hyper") + "?BUSINESSSTREAM={0}&Dealer={1}&LeadID={2}&Companyid={3}&SalesPerson={4}", Eval("BusinessStream"), Eval("Dealer"),Eval("leadId"),Eval("CompanyID"),Eval("SalesPerson"))
However the companyid is a text string and the company may have an "&" in it which I know will truncate the string. I have seen that this can be overcome by using "UrlEncode" [URL] However I cant solve the syntax.
I'm trying to import a few hundreds of data to a SQL server database table from Excell Spreedsheet. In the taable, I created Id as key that is identity. How can I solve identity when I import excel data to the database table.
View 3 RepliesI am developing a web application which will deal with online examination. The requirement is:
There can be n-number of sections in an exam and admin users should be able to create questions/answers and add to an exam. The questions should be displayed for a certain amount of time in the browser with meclock and it should move to next question automatically. User should not be allowed to open any other instance of the browser or login from another IP if the exam is in progress.
I am seeking community vote of how would someone design the application to meet all these criterias? What patterns should be used? What components to reduce the development time etc..My technology stack is C#, ASP.NET MVC or ASP.NET with SQL Server.
I have a toolkit tabbed container with an update panel in the bottom of each of the tabbed container's content template. There is also a radio button list an, a text box and a button. The user chooses the search criteria with the radio button list. They then enter the search text in the text box and hit the search button.
The update panel is then going to display the appropriate grid view and results, depending on what radio button was chosen. The logic to check the radio buttons is in the click event of the search button. I currently have one of the grid views and set it's visible property to true in the logic that checks to see which of the radio buttons was selected. My plan so far is to continue adding the other gridviews and doing this the same way with them. This will toggle the correct Grid View on.
I'm wondering if there is a better way of dealing with the Grid Views. There will be one of three to be displayed with in this update panel. They will have different result sets from different tables. Is my approach for turning them off and on with the visible property a bad idea? Should I be doing all of the ODS and grid view stuff programmatically? Is there a better way of doing this?
I have a problem.when i create a new web site and browse it with IE8 ,there is error(Internet Explorer cannot display the webpage) and now i am working with VS2008 and IE8.but i also have an older version of VS(VS2005) on the same computer.when i created a new web page with 2005 ,there is no problem and everything is ok. what is the problem with VS2008??i uninstalled it and reinstalled.but there is same error.i tried VS2008 on the another computer and i had no problem.
View 2 RepliesI'm working on a pretty basic little site that has content that is populated from a sql database. It's important to know that the data in sql includes some html (bolds, italics, ordered lists,etc). The problem I'm running into, involves the search results. On the search results page, I display the results from a sql query in a gridview. The sql query only returns the first 200 characters of the "Description" field, and then there is a link to click if the user wants to read the full description. The problem I'm running into is when the gridview tries to format the data that has an opening html tag, but no closing html tag (becasue the closing tag is over the 200 character limit.
[Code]....
I have a dictionary in my user's view model used to store user's roles:
[Code]....
In my edit view:
[Code]....
the code above generates:
[Code]....
It seems that when I edited the checkboxes' value and post to server, the UserEditViewModel.Roles is empty.
I have some fields in my db that have a value of "NULL". These are displayed in the Data controls as "NULL". When I try to commit an update the Regex validator is catching this and not allowing the update because it doesn't match the pattern of the regex.
I've thought of one way of solving this, which is to add the value "NULL" to the pattern for the regex. I'm curious though if there is a better way to solve this issue.
I have 3 tables. Blog and Tag have a many to many relationship. BlogTag is a junction table with a quantity column.
**Blog**
BlogID
Title
**Tag**
TagID
Name
**BlogTag**
BlogID
TagID
Quantity
I'm not sure how I handle the quantity column. I'd like it to store how many Blogs have a certain Tag NameHow do I deal with the quantity column when adding a new blog that has tags?
I need to write a sql script which will scan for records in a table (Table1) and thencopy the records found into a second table (Table2). Table2 has the same table structureas Table1Table 1 has a primary Key for the first column named CustIdI thought this would involve A simple sql statement like:
INSERT INTO Table2
FROM Table1
SELECT *
However I just realized that if A record already exists in Table2 and I try to inserta duplicate record into Table2, how should this be handled?Should I instead use an Update statement without a where clause?
I don't like asp.net profile provider store all profile info in one or two row in the database, but I want to use membership/profile API for authentication purpose.Customize membership/role/profile provider requires big big upfront efforts, which may cause more mess later.So how do people deal with that normally?
View 2 RepliesI am very new on the C# and ASP scene and am after some advice on how to handle a senario. I have a asp website with 10 text boxes. These boxes form the basis of a user completed parameter selection. There is a button that will fire the query. The compliction is that some of the textboxes may be left blank and any combination may be filled in.
The only way i could think to do this is with countless IF statements. The user clicks the button and the process checks out the senarios and runs the corresponding SQL statement. The problem with this is that there are a vast amount of possible senarios depending on whether the user completes one box, all boxes, or a mix of any of them. The SQL query is the same for each senario bar the WHERE statement which changes depending on which text boxes are filled in. Is there another way of doing this or do i really need to write every possible senario out in full?
I am currently working on an ASP.NET 3.5 and C# web application which deals with users private information like SSN numbers. What are some of the security measures which I need to take from an application development stand point to feel safe?
View 4 Replies