Click here to Skip to main content
16,004,833 members
Home / Discussions / ASP.NET
   

ASP.NET

 
GeneralRe: Access Denied Pin
Rmesh6-Sep-07 23:27
Rmesh6-Sep-07 23:27 
GeneralRe: Access Denied Pin
Shujaat Ullah Khan7-Sep-07 0:10
Shujaat Ullah Khan7-Sep-07 0:10 
QuestionHyperlink in Grid view Pin
seemamltn6-Sep-07 12:42
seemamltn6-Sep-07 12:42 
AnswerRe: Hyperlink in Grid view Pin
Imran Khan Pathan6-Sep-07 18:12
Imran Khan Pathan6-Sep-07 18:12 
AnswerRe: Hyperlink in Grid view Pin
codelinks6-Sep-07 19:38
codelinks6-Sep-07 19:38 
Questionpower point open or save Pin
greekius6-Sep-07 7:13
greekius6-Sep-07 7:13 
AnswerRe: power point open or save Pin
ToddHileHoffer6-Sep-07 7:19
ToddHileHoffer6-Sep-07 7:19 
QuestionQ about "sqldatasource" and security Pin
Goalie356-Sep-07 5:40
Goalie356-Sep-07 5:40 
I'm creating a website that needs to be extremely secure (medical company which must adhere to HIPAA security guidelines). So I'm a little leary about simply placing the names of my stored procedures into the "sqldatasource" control when populating gridviews, listviews, etc. I prefer to do all of that in my codebehind c-sharp page instead. So I'm just wondering if anyone who used the "sqldatasource" control feels there may be security issues with displaying db info on the aspx page.

I remember back in the days of classic ASP 3.0, there were times in which an error occurred on the server in which instead of displaying a web page, all of the asp code was displayed instead. If this were to happen with a sqldatasource control on the page, the viewer would then know way too much info about my database.

In fact I remember a scary incident involving my bank in which their online bank account site was coded in classic asp. One day I logged on and I received an asp error page which pointed out to me the exact location of the error in the asp code. I received 2 errors. 1st, the problem was their connection string. The 2nd problem was 1 of their queries, which were hardcoded into the asp code. So as you can guess, this displayed to me their server name, database name, table names, and table fields (needless to say, I closed my account with them the next day).

So I guess I'm just asking is, is there any security advantage to placing your calls to the database in the codebehind page rather than simply placing it in a sqldatasource control on the actual aspx page?

Thanks.

-Goalie35
AnswerRe: Q about "sqldatasource" and security Pin
Colin Angus Mackay6-Sep-07 6:17
Colin Angus Mackay6-Sep-07 6:17 
AnswerRe: Q about "sqldatasource" and security Pin
ToddHileHoffer6-Sep-07 6:41
ToddHileHoffer6-Sep-07 6:41 
QuestionRed x's in the reportviewer toolbar Pin
Richard Jones6-Sep-07 4:40
Richard Jones6-Sep-07 4:40 
QuestionHow to specify Extension in File Upload Control ? Pin
Rizwan Bashir6-Sep-07 4:05
Rizwan Bashir6-Sep-07 4:05 
AnswerRe: How to specify Extension in File Upload Control ? Pin
Imran Khan Pathan6-Sep-07 4:09
Imran Khan Pathan6-Sep-07 4:09 
GeneralRe: How to specify Extension in File Upload Control ? Pin
Rizwan Bashir6-Sep-07 4:41
Rizwan Bashir6-Sep-07 4:41 
GeneralRe: How to specify Extension in File Upload Control ? Pin
ToddHileHoffer6-Sep-07 7:14
ToddHileHoffer6-Sep-07 7:14 
GeneralRe: How to specify Extension in File Upload Control ? Pin
Rizwan Bashir6-Sep-07 22:23
Rizwan Bashir6-Sep-07 22:23 
QuestionIs Possible DataGrid Items Links to Different pages??? Pin
bijeshputhalath6-Sep-07 3:43
bijeshputhalath6-Sep-07 3:43 
AnswerRe: Is Possible DataGrid Items Links to Different pages??? Pin
ToddHileHoffer6-Sep-07 6:45
ToddHileHoffer6-Sep-07 6:45 
GeneralRe: Is Possible DataGrid Items Links to Different pages??? Pin
bijeshputhalath6-Sep-07 23:53
bijeshputhalath6-Sep-07 23:53 
QuestionDatagrid Pin
nandhububbly6-Sep-07 3:41
nandhububbly6-Sep-07 3:41 
AnswerRe: Datagrid Pin
Imran Khan Pathan6-Sep-07 3:52
Imran Khan Pathan6-Sep-07 3:52 
QuestionEnd session event handler Pin
hadad6-Sep-07 3:31
hadad6-Sep-07 3:31 
AnswerRe: End session event handler Pin
Goalie356-Sep-07 5:51
Goalie356-Sep-07 5:51 
AnswerRe: End session event handler Pin
Guffa6-Sep-07 9:29
Guffa6-Sep-07 9:29 
AnswerRe: Datagrid Pin
Christian Graus6-Sep-07 3:20
protectorChristian Graus6-Sep-07 3:20 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.