I have many TextBox in a page.I would like to know if there is a ways to check pro grammatically all input for this TextBox and
apply Server.HtmlEncode to each one.
So I do not need apply Server.HtmlEncode for every single String.
What is the difference between HttpUtility.HtmlEncode and Server.HTMLEncode in c#
View 1 RepliesI put this code Server.HTMLEncode on a class module, and I cant fint the IMPORTS class for it??
Where is it for Server. ???
I have used Server.HtmlEncode(MY TEXT) to display data,
I have setted the page property validateRequest="false" in .config file,
all this is working fine.since I have large application using hundreds of labels and text boxes to show data,
so, now it is almost impossible ( time consuming ) for me to place Server.HtmlEncode(MY TEXT) every where while setting data to them e.g. in label.text, textbox.text, etc
is there is any way to set the property some where and all the labels and text boxes automatically use Server.HtmlEncode() when i set there text
how can I use this in class project c#
Server.HtmlEncode ?
I would like to ask when im trying to store some data into sql using Server.HtmlEncode Could i use code behind for example like this ?
[code]....
For protect against XSS we should make all input from textboxes thoht Server.Htmlencode function.
1) If i let a input go thorgh Server.Htmlencode and save it in database. But what happen if i letter show this input data from database on browerser ...if database input data have <script> it will then make Xss!!!!.
2) I use Server.Htmlencode.. and the user write <b>ss<b>... (label.text = userinput.text;) and i WANT to show ss in browser. What shuld i do for make this happen ??
I'm trying to mock Server.HtmlEncode(), but I keep having a null reference exception.I'm pretty new to the Moq framework, here is my code:
var context = new Mock<HttpContextBase>();
var request = new Mock<HttpRequestBase>();
var response = new Mock<HttpResponseBase>();
var session = new Mock<HttpSessionStateBase>();
var server = new Mock<HttpServerUtilityBase>();
server.Setup(svr => svr.HtmlEncode(It.IsAny<string>())).Returns((string s) => s);
context.Setup(ctx => ctx.Request).Returns(request.Object);
context.Setup(ctx => ctx.Response).Returns(response.Object);
context.Setup(ctx => ctx.Session).Returns(session.Object);
context.Setup(ctx => ctx.Server).Returns(server.Object);
I've also tried the following:
context.Setup(ctx => ctx.Server.HtmlEncode(It.IsAny<string>())).Returns((string s) => s);
I've found a solution but it seems an outdated solution as expect is replaced with setup.
I am trying to set up a POST from one aspx file to another progromatically. Inside the POST is a String of XML data which i have properly added to Server.HtmlEncode(). For some reason, when I grab it in my logs on the other page, it is showing with 3 question marks. I at first thought it was logging text i left somewhere, but have narrowed it down to a Encoding error of some sort because when i change the encoding it changes the character, and when I just put some text in there, i see it on the other side fine. i have tried UTF 8,UTF32,Unicode,ASCII... Can't seem to find the right combination. Can't find the UTF-16
when I use the Encoding object
Below is my Code:
[Code]....My Sending Debug log has the Extension xml coming out in HTML format correctly before POST. Below is just a piece of it[Code]....
And then on the other side log I get the below
Extensions =??
I have this code, and it renders this HTML. How can I apply CSS to my control if they are named ctrctrctr-00000 or something else like that that is only useful to the VIEWSTATE?
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head><title>
</title><link href="../global.css" rel="stylesheet" type="text/css" />
Informacion General: Paises
</head>
<body>
<form name="aspnetForm" method="post" action="Pais.aspx" id="aspnetForm">
<div>
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="/wEPDwUKMTUyMDk1NTY2MGRkwAKu2OIV85kXfcUcAefBBNmSuRY=" />
</div>
<div>
<input type="hidden" name="__EVENTVALIDATION" id="__EVENTVALIDATION" value="/wEWAwLSha7NBAKqw7ARAvjQlaIKhJ2HMftmmOoxe/+aE4sG3D32QtA=" />
</div>
<div>
<input name="ctl00$ContentPlaceHolder1$txtPais" type="text" id="ctl00_ContentPlaceHolder1_txtPais" />
<input type="submit" name="ctl00$ContentPlaceHolder1$btnSubmit" value="Button" id="ctl00_ContentPlaceHolder1_btnSubmit" />
</div>
</form>
</body>
</html>
<%@ Page Language="C#" AutoEventWireup="true" CodeBehind="Default.aspx.cs" Inherits="Frontend._Default" %>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head runat="server">
<title></title>
</head>
<body>
<form id="form1" runat="server">
<div>
<h1>Prueba de Escritorio</h1>
<asp:TextBox ID="txtPais" runat="server"></asp:TextBox>
<asp:Button ID="btnSubmit" runat="server" Text="Guardar" onclick="btnSubmit_Click" />
</div>
</form>
</body>
</html>
How can I use a CSS selector to target ALL textboxes on the page regardless of name?
When I click textbox then BalloonPopup will be shown,how to use ajax control
View 1 RepliesMy textbox is
<asp:TextBox runat="server" ID="txtDate1" Width="120px" onclick="tryPlaceholder(this,'dd MMM yyyy')" onblur="tryPlaceholder(this,'dd MMM yyyy')" />
function tryPlaceholder(txtbox, placehold) {
if (txtbox.value.length == 0) {
txtbox.value = placehold.toString();
[Code] ....
Its run okay with javascript. but i want solution through server side for textbox withing placeholder control inside asp.net .....
In my application, I want all dates to display in the MM/DD/YYYY format and I also want the text box to be limited to 10 characters and have a certain class applied to it.
To that end, I made a custom editor template for Date that looks like this:
@ModelType System.Nullable(Of DateTime)
@Html.TextBoxFor(Function(d) d, New With {.class="polkDate", .maxlength="10"})
Then in my view I just can just call @Html.EditorFor(Function(m) m.someDate) and this works pretty well. However, because I'm using TextBoxFor, it doesn't respect the DisplayFormat attribute that's applied to my model class (i.e. it's spitting out the time as well instead of formatting the date).
I would love to use EditorFor so that it would respect the formatting that I want, but you can't add attributes like class and maxlength. I also tried just using the plain old TextBox helper, but I don't know how to make it generate the correct ID so that model binding still works.
how to apply the validation,filtered for phone number textbox.
View 4 RepliesI've encountered a problem when I put a treeview in a page which is using master page. The treeview style doesn't apply.For example, I set the nodes with different colors in different levels. But the treeview nodes are still displayed in the default color(bule).
The treeview code is :
[Code]....
If I use these code in a page which doesn't use a master page. The nodes are shown in colors.
I used tinymce in my page I want use character limite for this control I want if users enter morethan 600character it show error..
View 1 RepliesI have created one user control for changing the theme of the page where i have several buttons and on click of each button i am applying the theme of clicked buttons color and for that i have created several css files like red.css, blue.css , green.css etc.
now i want to apply this theme to the page but i am not able to do that from the user control as because i am not getting the stylesheet property in the page and thus i am not able to work further.
can anyone tell me how can i apply the theming from user control to the page its being called.?
I have a UDF called Split which accepts a comma separated list and returns a table variable splitting the values in a row. So for ex if I call the function
Select * From dbo.Split('100,287,312', ',')
The output of this query will be
ID-----Value
1------100
2------287
3------312
Now I am trying to use cross apply to return each row for each csv but I am getting an error Line 3: Incorrect syntax near 'apply'.
Here is my query
select c.course_id, c.course_title, b.*
from course c cross apply dbo.[Split](c.foreign_lang_equiv_course_id, ',') As b
I have a master page to apply to all my pages, the master page is doing its work however, it seems that is unable to resolve the CSS file address for pages I have in child folders.
I have a set of folders like this:
[code]...
In the code above I tried <% ResolveUrl("~/StyleSheet.css") %> but didn't work, it works while in the same folder but not on the childs.
EDIT: Just to clarify my CSS file is on my Root Folder not on the childs
I need to select some rows from a table and apply a distinct on two of the columns (keeping the most recent one) and get all the attributes of the selected rows.for example ,if I have a table with the following rows and coloumns
ID
A
B
DATE
1
1
1
1/1/2010
I need to do a select distinct on columns A and B keeping the most recent row and return all the coloumns of the selected rows so i need the result to be rows 2 and 3 and discard row 1 because there is another row (2) having the same data in columns A and B and the other row (2) is more recent.I tryed creating a veiw, use a common table expression and create a stored procedure...but my knowledge with sql is limited and cannot get the result i want...
Is there a way of getting that result without having to change the database structure?
I got a Master page and nested master pages in the subfolders. Top Level Master page Second Level Master page inherited Top Level Master page Third Level Master page inherited Second Level Master page However, changes (i.e. new images & alt. name) that I made in the Top level master page did not apply to the second or third levels. My webpage has a correct front page but not in the sections.
View 4 RepliesI want to open a webpage without menubar, scroll bar
menubar=0,resizable=0,scrollbars=0,width=410,height=250,left=0,top=0'
something like this on page load
Page.ClientScript.RegisterClientScriptBlock(Me.GetType, "", "window.open('CallerID.aspx','','menubar=0,resizable=0,scrollbars=0,width=410,height=250,left=0,top=0'); window.open('','_self',''); window.close();", True)
its seems it is not working properly
Remember i want this on page load it self not from other pages.
I have an sql scalar function (FN_GET_ENQ_NO()) which returns a unique enquiry no.Now i want to display this enquiry no. to my asp:textbox on web page.I have made all the connection strings to my sql server database. Even i had pulled the data from stored procedures. But clueless in above issue.
View 3 RepliesI have a text area and I want to store the text entered by user in database with html formatting like paragraph break, numbered list. I am using HTMLencode and HTMLdecode for this.Sample of my code is like this:
string str1 = Server.HtmlEncode(TextBox1.Text);
Response.Write(Server.HtmlDecode(str1));
If user entered text with 2 paragraphs, str1 shows characters between paragraphs. but when it writes it to screen, just append 2nd paragraph with 1st. While I'm decoding it, why doesn't it print 2 paragraphs?
I've more than 12 pages without any master pages applied to them. these pages have heavy javascripting and loads of controls on them. now i require to add these pages under a master page. how can i achieve this with minimal of effort?
View 3 Replies
