|
did u give the url or pagename
for example,
response.write("{window.showdialog(url,"window")}")
|
|
|
|
|
I tried you code and got error. Then I replaced showdialog with open. and it worked for me. But if you have pop up blocker installed, you need to click holding Ctrl key.
|
|
|
|
|
i didn't understand your code.
pls explain it.
because i am beginner in asp.net
Gayatri
|
|
|
|
|
What I mean is when clicking hold control key and click.
|
|
|
|
|
Hi guys
I have a usercontrol on my page and I want to refresh that Usercontrol. When any postback event is fired from the PAGE....
Any idea...
|
|
|
|
|
wEb GuRu... wrote: I want to refresh that Usercontrol. When any postback event is fired from the PAGE....
I think it will reload automatically
|
|
|
|
|
Thanks for ur time Navaneeth.
Actualy I want to refresh usercontrol for certain postback events(NOT FOR EVRY POSTBACK)...
Any idea abt tht???
|
|
|
|
|
Could you tell me the scenario where you will use this ?
|
|
|
|
|
Well I have a UserControl containing "Unsold Ads of a customer" in a label. I have used this control through out the customer account area.
Now when customer mark an Ad as "Sold"(from Datagrid in page) then label displaying Unsold Ads should be refreshed to show only unsold ads.
|
|
|
|
|
If Customer keeps browser idle also do you want to change it ? If so you can make use of some AJAX concepts. If customer refreshes the page , I think your left menu also will update.
|
|
|
|
|
Hello to everyone,
i'm trying to compare the value entered in the text box (Current Password field ) by the user to the valuse given in databse.
initially i did by makin another textbox which is not visible in the page and then used compare validator to compare the given value against original value...
Can any body suggest me any simple method..
|
|
|
|
|
hemant_garg wrote: initially i did by makin another textbox which is not visible in the page and then used compare validator to compare the given value against original value...
This is not a good method. A person who is viewing the source can easily get the value stored in hidden field. I suggest you to do this in server side rather than going for validators. Connect to db and check the password is correct. If not display a message. Don't allow user to complete the process untill both passwords are same
|
|
|
|
|
|
hello hemant,
just try to use the data reader and try to fetch the values from the database then compare the
values like
if (textbox1.text = dr("BLAHBLAH") then
msgbox("Equal")
end if
regards,
koolprasad2003
Be a good listener...Because Opprtunity knoughts softly...N-Joy
|
|
|
|
|
Hi guys, I need a help please
In my asp.net 2 pages, when I disable some controls on page, user can run some javascript code in address bar that enables my disabled controls, that will cause un-needed results
for example
A gridview that lists exams with a checkbox for each exam, when at least one student has launched an exam, I disable its checkbox so that instructor cannot delete it
Now how can I prevent user from running javascript code from address bar to enable that checkbox, then delete exam
|
|
|
|
|
You should NEVER rely on javascript for anything. You CANNOT disable it. Anything that is selected via javascript, MUST be validated on the server side before performing any actions.
Christian Graus - Microsoft MVP - C++
Metal Musings - Rex and my new metal blog
"I am working on a project that will convert a FORTRAN code to corresponding C++ code.I am not aware of FORTRAN syntax" ( spotted in the C++/CLI forum )
|
|
|
|
|
Christian Graus wrote: You CANNOT disable it. Anything that is selected via javascript, MUST be validated on the server side before performing any actions.
Then what will be the use of javascript if we are rechecking everything in server before processing ? Or is it possible to identify javascript is supported by the browser or not ? If not supported then validate it on server. What do you say ? Please make me clear
|
|
|
|
|
Navaneeth. wrote: Or is it possible to identify javascript is supported by the browser or not ? If not supported then validate it on server
Thats not the point that was made. The point is that the client (and any javascript methods) cannot be trusted. As was the original question, a user with some javascript know-how can manipulate the form.
The point of javascript is to make things easier for the user, like disabling the check boxes so its obvious they can't use them, rather than waiting for a postback only to be told they did something wrong. Javascript should be used to enhance the users experience of an site/application, but should never be relied upon for security.
|
|
|
|
|
I tend to check data at every boundary of the application.
I check that what the user put into my page is good.
I then check that what the page submitted to ASP.Net is good.
my ASP code then uses my Business Logic Layer which checks that the data it receives is good.
I don't specifically check that the data entering the database is good but i do have rigorous constraints set up on all databases and I make sure that only objects written by my team have direct writeable access to the DB. I also know that those objects have been repeatedly unit tested before they are released.
You can never check data enough in my opinion especially if those data may have been submitted by an external actor beyond your control. eg web user, public webservice, contract developer. This approach may be bordering on the paranoid but it makes applications far more stable especially as the type of checking that occurs at each level is likely to be different and therefore catches a different set of errors that may occur.
Russ
|
|
|
|
|
Hey people, I think you didn't understand me
I have a button - for example - on my web form
In some cases I disable this button by server side code, no problem
Now my question is:
Can any user openning this page execute javascript code from browser's address bar to enable that button??
And if yes, how can I prevent user from doing that??
|
|
|
|
|
We understood you perfectly.
Ahmad Safwat wrote: Can any user openning this page execute javascript code from browser's address bar to enable that button??
Yes.
Ahmad Safwat wrote: And if yes, how can I prevent user from doing that??
You can't, which is the point we were trying to make.
Go ahead and disable the button, but don't make that the only means to stop users doing whatever function is attached to it in the code-behind. You could always set its Visible property instead so it won't even be rendered to the client.
|
|
|
|
|
hi badgrs,
thanx my dear, I already hide controls instead of disabling them, but I thought there may be a better solution that I don't know
I don't want to check user's javascript code, I need to block scripting
I need to prevent users from run any javascript code on my page
Is this possible
because hiding controls sometimes make the page looks bad 
thanx again
|
|
|
|
|
Ahmad Safwat wrote: I need to prevent users from run any javascript code on my page
Is this possible
No.
|
|
|
|
|
|
Ahmad Safwat wrote: thanx my dear
Hmm, thats usually a phrase my ganny says to me...
Let me elaborate a bit, no isn't a very explanatory answer:
Ultimately you have no control what-so-ever over the browser. You can (and should) do everything possible to make things easier for the user, but you should never try to stop them doing anything. If they want to screw things up thats their problem, let them do it, just make sure you have sufficient validation in place server-side.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
