|
Is there a function in .NET web stuff that will test a string for script attacks. For example, it tests for javascript code and html in the string the user entered in a first name blank
Thanks,
Tom
|
|
|
|
|
No there isn't. Also, if a user types that kind of code into a textbox and you directly use that value in your code, there's no way that the contents of that TextBox can be executed. So it's a moot point to begin with.
RageInTheMachine9532
"...a pungent, ghastly, stinky piece of cheese!" -- The Roaming Gnome
|
|
|
|
|
Thanks you for the information - I thought there was but I must have been wrong
|
|
|
|
|
There are Validation controls, but they don't check for any attacks.
What you may be thinking of is the SqlParameter and OledbParameter objects that do SQL Injection attack checking before they pass any data to an SQL Stored Procedure.
RageInTheMachine9532
"...a pungent, ghastly, stinky piece of cheese!" -- The Roaming Gnome
|
|
|
|
|
Well, maybe is not as hard as I think, but I was wondering if it was possible to call mozilla mail from VB.NET to create a new message with an attachment...
Thanks a lot for reading  
|
|
|
|
|
Hi Guys,
I Really Really need help, i got this big project at work that is creating an application for video analisys in sports, so the thing is that i need draw over video while this is running, i got to be able to free draw or draw shapes into it, i been able to do the draw part with no problem, but i'm having a really hard time doing the overlay over the video, i had it working, but it flicks too much , and also flicks when drawing another object, anyways the question is , does anyone have links to something that can help me?? i been looking trough forums, websites, etc. and find msgs but not solutions.
Thanks.
Alex.
|
|
|
|
|
How are you playing the video ? I believe if you use DirectShow, you can impliment filters, which could concievably use the DX framework to draw over the video.
Here[^] is a C++ article - you're calling COM objects, so the end result is the same ( that is, it's not hard to port ). However, Direct Show is VERY limited in the managed DX version, and very buggy. You should use COM interop to call the full DirectShow and avoid the crap they put into Managed DX.
Christian Graus - Microsoft MVP - C++
|
|
|
|
|
What are the minimum properties to set and code required to get a repeater or datalist ('lookless' controls) to show up? I follow the examples in the book as best I can, considering I'm using a different database, but they still show up invisible.
________________________________________________________________________
Dave
Y10K bug! Let's not get caught with our pants down **AGAIN**! (DC 02002)
|
|
|
|
|
I think I am going nuts over this .NET thing.
As far as I can tell, the MSDN documentation is just wrong. There is no such thing as a listbox.refresh method, nor is there such a thing as a listbox.multicolumns property, as just two examples. The docs say there is, but VS.NET gives me a compile error.
I have this wretched,sinking feeling that my confusion lies in the difference between ASP.NET programming and Visual Basic.NET programming.
Is it possible that listobx behaves two completely different ways in each? Is it possible that MSDN doesn't bother to clarify the language context of its instructions? Is it possible that not being able to filter results for one vs. the other (VB.NET vs. ASP.NET) in searches is an awful idea?
I am very frustrated.
________________________________________________________________________
Dave
Y10K bug! Let's not get caught with our pants down **AGAIN**! (DC 02002)
|
|
|
|
|
DaveC426913 wrote:
Is it possible that listobx behaves two completely different ways in each
Yes, they do behave differently. The Windows.Forms version supports a .Refresh() method, where the WebForms version doesn't. The .Refresh method just redrwas the control and it's contents in Windows Form. This can't be done on a browser version. The browser version is just a wrapper for an INPUT tag in HTML.
ListBox[^] control in ASP.NET, or WebForms.
ListBox[^] control in Windows Forms.
If you scroll up the navigation pane on the left, you'll see which namespace these controls are under. System.Windows.Forms contains all the standard Windows Forms controls, while all the standard ASP.NET, or WebForms, controls are under System.Web.UI.WebControls.
RageInTheMachine9532
"...a pungent, ghastly, stinky piece of cheese!" -- The Roaming Gnome
|
|
|
|
|
Arg. OK, I'm giving up on all the OledbConnect and SQLConnect examples, and sticking with ADO.
________________________________________________________________________
Dave
Y10K bug! Let's not get caught with our pants down **AGAIN**! (DC 02002)
|
|
|
|
|
OleDbConnect and SqlConnect aren't part of the .NET Base Class Library or ADO.NET. Where did these come from?
And, they don't have anything to do with your original post, so I'm afraid I'm lost.
RageInTheMachine9532
"...a pungent, ghastly, stinky piece of cheese!" -- The Roaming Gnome
|
|
|
|
|
"OleDbConnect and SqlConnect aren't part of the .NET Base Class Library or ADO.NET. Where did these come from?"
They are controls available to me it VS.NET when I am designing ASP.NET or VB.NET apps, and used in the tutorials and samples I'm reading in these ASP.NET and VB.NET books and at MSDN.
I'm sure if I read the books and MSDN website page by page, it will explain the difference. I guess I can't just presume that prior VB and ASP knowledge would have saved me from this confusion.
________________________________________________________________________
Dave
Y10K bug! Let's not get caught with our pants down **AGAIN**! (DC 02002)
|
|
|
|
|
OleDbConnection and SqlConnection are objects, but not OleDbConnect or SqlConnect.
I never use the database controls in the ToolBox. I always code my database stuff by hand. It gives greater control and you don't have to worry about code being generated that you can't see without going into the "Windows Form Designed generated code" region. Do it by hand and everything is in one place.
ADO.NET is strickley for database access. ASP.NET is a server-side HTML generation technology.
RageInTheMachine9532
"...a pungent, ghastly, stinky piece of cheese!" -- The Roaming Gnome
|
|
|
|
|
Forgive me if this is turning into a .NET tutorial, but it is very helpful to me...
So, does that mean all your code is on the .ASP page, not in the codebehind page? Is there *anything* on the codebehind page?
I confess I am confused about the relationship between the ASP page and the codebehind page in terms of what exists on each. I tried mapping one to the other, but some parts are there and some aren't. Is it possible to code ASP.NET pages without any need for a codebehind page?
________________________________________________________________________
Dave
Y10K bug! Let's not get caught with our pants down **AGAIN**! (DC 02002)
|
|
|
|
|
Everything VB.NET is in the codebehind file. Everything HTML is in the .apsx file.
The VB.NET code controls what happens when you use the controls on the HTML page. It's very similar to what's going on in Windows Forms. You see the Designer that lets you place the controls on a form and the "codebehind" that lets you attach code to the control's events, like "click".
RageInTheMachine9532
"...a pungent, ghastly, stinky piece of cheese!" -- The Roaming Gnome
|
|
|
|
|
I see Visual Basic code in aspx pages in the examples. Is this not generated from the code window?
Also, when I write Visual Basic in the code window, it creates HTML/ASP/VB in the HTML page.
Are you saying that if I write everything in the HTML page, there will be nothing (or at least, nothing of consequence) in the codebehind file?
I guess I should try this so I understand it better, it just seems like I'm throwing away many of the features of Visual Studio.
Is it possible that the relationship between Visual Studio and html pages is equivalent to something like FrontPage and html pages? i.e. Frontpage is easier for designers, but it blows as far as writing clean code. I never use WYSYWIG HTML editors - I always use Homesite (which doesn't mangle code).
________________________________________________________________________
Dave
Y10K bug! Let's not get caught with our pants down **AGAIN**! (DC 02002)
|
|
|
|
|
DaveC426913 wrote:
Is it possible that MSDN doesn't bother to clarify the language context of its instructions?
No, it tells you at the top, when it tells you the namespace of the control you're reading about.
Christian Graus - Microsoft MVP - C++
|
|
|
|
|
I am trying to search through a dataset using a
while League.Tables(0).Columns(0).Table.Rows(count2).Item(0) <> Winner
end while
Winner is a string, as is whatever may be contained in the datatable. So how do I get it to execute the while loop until the text in the table "Does not equal" the text in the Winner string?
|
|
|
|
|
daviiie wrote:
while League.Tables(0).Columns(0).Table.Rows(count2).Item(0) <> Winner
end while
Are you incrementing count2 in that While loop?
Do While League.Tables(0).Columns(0).Table.Rows(count2).Item(0) <> Winner
.
.
count2 = count2 + 1
Loop
RageInTheMachine9532
"...a pungent, ghastly, stinky piece of cheese!" -- The Roaming Gnome
|
|
|
|
|
daviiie wrote:
while League.Tables(0).Columns(0).Table.Rows(count2).Item(0) <> Winner
end while
Winner is a string, as is whatever may be contained in the datatable. So how do I get it to execute the while loop until the text in the table "Does not equal" the text in the Winner string?
If you want to execute UNTIL Winned DOES NOT equal the text, you want to execute WHILE it DOES equal the text. So...
while League.Tables(0).Columns(0).Table.Rows(count2).Item(0) = Winner
Roy.
|
|
|
|
|
I keep getting the following error message in my vb.net code:
"Format of the initialization string does not conform to specification starting at index 0."
I get the message when I refer to a class from a web form, when this code runs:
oPolicy = New Policy
oDR = oPolicy.GetPolicy()
I am calling the function GetPolicy in the Class Policy.
Anyone nay ideas.
macca
|
|
|
|
|
Policy is a namespace in the .NET Framework, not a class. .GetPolicy is also, not a method of any class in the .NET Framework.
You'll have to copy and paste the code snippet here. You haven't provided enough information to help with your problem. What is the Policy class?
RageInTheMachine9532
"...a pungent, ghastly, stinky piece of cheese!" -- The Roaming Gnome
|
|
|
|
|
I have 4 text boxes
Textbox1, Textbox2, Textbox3, textbox4
Textbox4 is readonly and you can enter values in textbox1,2 and 3
What do I have to do so that when a value is entered into textbox1,2 or 3 it is automatically updated in textbox4
|
|
|
|
|
Handle the TextChanged event of all three textboxes. Convert the text in each TextBox to a number and add them together, putting the result in TextBox4. Something like this:
Private Sub ValueEntered(...) Handles TextBox1.TextChanged, TextBox2.TextChanged, TextBox1.TextChanged
Dim Value1, Value2, Value3 As Double
Value1 = Double.Parse(TextBox1.Text)
Value2 = Double.Parse(TextBox2.Text)
Value3 = Double.Parse(TextBox3.Text)
TextBox4.Text = (Value1 + Value2 + Value3).ToString()
End Sub
RageInTheMachine9532
"...a pungent, ghastly, stinky piece of cheese!" -- The Roaming Gnome
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
