|
I have already been to the MSDN site, some of the methods shown on the site include avoiding the use of sa account for database, encryption of vital information, and the use of stored procedure instead of dynamic sql. How can I not use a "sa" account for database access if I would like anonymous users to have access to the database. I've used a function that basically deletes all input from the users that have the words drop, select, delete, and symbols such as --, ' to prevent sql injection attacks before. However, it probably won't work if I would like for users to be able to upload resumes which can have anything in them.
|
|
|
|
|
Well, I don't see how SQL injection could occur, when your data is treated as a blob. If you were accepting text from a textbox, that would be far more likely.
Christian Graus - Microsoft MVP - C++
"I am working on a project that will convert a FORTRAN code to corresponding C++ code.I am not aware of FORTRAN syntax" ( spotted in the C++/CLI forum )
|
|
|
|
|
So if a malicious user uploads a file that was designed to sniff out info about the database then use that info to do damage to the database, he/she won't be able to because the file would be stored in a blob? Is there anyway to test this assumption? I appreciate your input but I just want to be absolutely sure. Thanks again for responding.
|
|
|
|
|
It's plainly obvious. An injection attack occurs when you blindly accept text as part of your query, because that query is executed. The data you store as a blob, could be anything, it's stored and not executed.
Christian Graus - Microsoft MVP - C++
"I am working on a project that will convert a FORTRAN code to corresponding C++ code.I am not aware of FORTRAN syntax" ( spotted in the C++/CLI forum )
|
|
|
|
|
i want to encrypt and decrypt cookie object's values. Will MD5 alogirthm help me? Which are the methods of encrypt and decrypt methods in MD5?
|
|
|
|
|
|
Hello to EveryOne,
i now want to learn Javascript but how should i.
I read some coding on google but i even don;t know how to and where to write the create function..
Could anyBody help me in this regard...
Even some good books fir this purpose.
For Eg:
if(window.event.keyCode==13)
{
var but = document.getElementById('Your Button ID');
but.click();
}
in html Where i should write this code...
Thank You.
Hemant Garg
|
|
|
|
|
There are n number of books in market Which can help you as a begginer.
You can create Javascript function in .js file or in the head of Aspx page
I think google can give more focus on it 
Thanks and Regards
Sandeep
If If you look at what you do not have in life, you don't have anything,
If you look at what you have in life, you have everything... "
|
|
|
|
|
|
Hemant Garg wrote:
if(window.event.keyCode==13)
{
var but = document.getElementById('Your Button ID');
but.click();
}
Sorry but what you want to do ? Thats more important Can you tell What are you trying to do in that function ?
Thanks and Regards
Sandeep
If If you look at what you do not have in life, you don't have anything,
If you look at what you have in life, you have everything... "
|
|
|
|
|
there r rwo input groups in my form one for admin and other for user login...
When i click textbox1 then button 1 should be default button but when i click the textbox2 then button2 should be default button...
i hav used panel1 for textbox1 and button1 and panel2 for textbox2 and button2.
how can i do this...
suggst me...
Thank you
|
|
|
|
|
HI Hemant
Java script is a piece of code that we write to make the page contents dynamic and to make the page interactive(like changing the color of a control when mouse points on that etc)
we need to write the java script in in the header section of the html or u can write it inside the body. only mention the tag< lang used as java script...>
refer this site it will show u nice example
http://dynamicdrive.com/
In that page refer the section Script Categories
Regards
Prakash Mishra(Banglore,India)
|
|
|
|
|
Dear hemant,
just try your first simple progam in Javascript
create one button in HTML
and in after <title>
write the following code
function SayHello()
{
alert("How R U");
return false;
}
OK.
now try to run your code..
regards,
koolprasad2003
If the message is useful for U then please Rate This message...
Be a good listener...Because Opprtunity knoughts softly...N-Joy
|
|
|
|
|
i have to make front page of website having rounded corner panel with linear gradient and datbase driven menus
Navneet bal
|
|
|
|
|
You can check out http://www.dynamicdrive.com/[^]
Once you choose the appropriate menu, the items need to be generated runtime by your serverside logic.
|
|
|
|
|
thanks alot an u plz send me code in vb.netof xp-look like themes atleast two whose color can be chaged by the veiwer of page
|
|
|
|
|
|
hello frnds,
I have developed an application in C# n asp.net version 2. i have to publish it.
My previous website is in pure HTML. In this, there is button named "Tracking".
I have to link my web application from this button so the functinality of the application can be displayed on HTTP.
I want to know the complete procedure .
can any one help me?
Thnks in advance
Shriya
|
|
|
|
|
Shriya Kapoor wrote: I have to link my web application from this button so the functinality of the application can be displayed on HTTP
The normal a href should do the trick right.
|
|
|
|
|
Tht is pretty known..i want to know how to put my whole application on WEB SERVER
|
|
|
|
|
|
|
Its possible to tell datagrid columns visible false in java script...,
If yes plz tell me how to do that one...,
How to mention the following codes in javascript...,
dgrdmain.Columns(0).Visible = False
dgrdmain.Columns(1).Visible = False
Advance thanks,
Magi
|
|
|
|
|
Magh_M wrote: dgrdmain.Columns(0).Visible = False
dgrdmain.Columns(1).Visible = False
These may not be straight-forward in JavaScript. You may need to emit a DIV and then locate it in Javascript using document.getElementsByTagName.
You then toggle visibility using style.display = 'none'
|
|
|
|
|
When you set a column to Visible = False in your server-side code-behind it means no HTML is emitted for that column, so there is nothing for your javascript to detect (so short answer is no)
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
