ASP.NET

Re: How to prevent running javascript code from address bar

18-Jun-07 0:11

Navaneeth. wrote:
Or is it possible to identify javascript is supported by the browser or not ? If not supported then validate it on server

Thats not the point that was made. The point is that the client (and any javascript methods) cannot be trusted. As was the original question, a user with some javascript know-how can manipulate the form.

The point of javascript is to make things easier for the user, like disabling the check boxes so its obvious they can't use them, rather than waiting for a postback only to be told they did something wrong. Javascript should be used to enhance the users experience of an site/application, but should never be relied upon for security.

Russell Jones18-Jun-07 0:31

Russell Jones

18-Jun-07 0:31

I tend to check data at every boundary of the application.

I check that what the user put into my page is good.
I then check that what the page submitted to ASP.Net is good.
my ASP code then uses my Business Logic Layer which checks that the data it receives is good.

I don't specifically check that the data entering the database is good but i do have rigorous constraints set up on all databases and I make sure that only objects written by my team have direct writeable access to the DB. I also know that those objects have been repeatedly unit tested before they are released.

You can never check data enough in my opinion especially if those data may have been submitted by an external actor beyond your control. eg web user, public webservice, contract developer. This approach may be bordering on the paranoid but it makes applications far more stable especially as the type of checking that occurs at each level is likely to be different and therefore catches a different set of errors that may occur.

Russ

Re: How to prevent running javascript code from address bar

Ahmad Safwat18-Jun-07 1:36

Re: How to prevent running javascript code from address bar

18-Jun-07 1:36

Hey people, I think you didn't understand me

I have a button - for example - on my web form
In some cases I disable this button by server side code, no problem

Now my question is:

Can any user openning this page execute javascript code from browser's address bar to enable that button??

And if yes, how can I prevent user from doing that??

badgrs18-Jun-07 2:03

Re: How to prevent running javascript code from address bar [modified]

18-Jun-07 2:03

We understood you perfectly.

Ahmad Safwat wrote:
Can any user openning this page execute javascript code from browser's address bar to enable that button??

Yes.

Ahmad Safwat wrote:
And if yes, how can I prevent user from doing that??

You can't, which is the point we were trying to make.

Go ahead and disable the button, but don't make that the only means to stop users doing whatever function is attached to it in the code-behind. You could always set its Visible property instead so it won't even be rendered to the client.

Ahmad Safwat18-Jun-07 2:42

Re: How to prevent running javascript code from address bar

18-Jun-07 2:42

hi badgrs,

thanx my dear, I already hide controls instead of disabling them, but I thought there may be a better solution that I don't know

I don't want to check user's javascript code, I need to block scripting
I need to prevent users from run any javascript code on my page
Is this possible

because hiding controls sometimes make the page looks bad Frown | :(

thanx again

badgrs18-Jun-07 3:16

Re: How to prevent running javascript code from address bar

18-Jun-07 3:16

Ahmad Safwat wrote:
I need to prevent users from run any javascript code on my page
Is this possible

No.

Ahmad Safwat18-Jun-07 3:31

Re: How to prevent running javascript code from address bar

18-Jun-07 3:31

thanx my dear Smile | :)

badgrs18-Jun-07 3:44

Re: How to prevent running javascript code from address bar

18-Jun-07 3:44

Ahmad Safwat wrote:
thanx my dear

Hmm, thats usually a phrase my ganny says to me...

Let me elaborate a bit, no isn't a very explanatory answer:
Ultimately you have no control what-so-ever over the browser. You can (and should) do everything possible to make things easier for the user, but you should never try to stop them doing anything. If they want to screw things up thats their problem, let them do it, just make sure you have sufficient validation in place server-side.

Ahmad Safwat18-Jun-07 4:36

Re: how to display the database table values in the form

18-Jun-07 4:36

Hmmmm, thanx my dear Poke tongue | ;-P

This is really a good advice

thank u

web part creation error

Viral Upadhyay17-Jun-07 21:52

Viral Upadhyay

17-Jun-07 21:52

HI i m using a simple web part application
But when i run that application it show me sqlserver 2005 error
the error is :

An error occurred during the execution of the SQL file 'InstallMembership.sql'. The SQL error number is -2 and the SqlException message is: Timeout expired. The timeout period elapsed prior to completion of the operation or the server is not responding

I am not doing any database maniputation in my page still it show this error.

Any idea please tell me

Thanks in Advance

Viral
YahooID : just_viral
My Site : www.theseoworld.info

[Message Deleted]

Prakash_Mishra17-Jun-07 21:22

Prakash_Mishra

17-Jun-07 21:22

[Message Deleted]

Sathesh Sakthivel17-Jun-07 21:47

Sathesh Sakthivel

17-Jun-07 21:47

Prakash_Mishra wrote:
Prakash Mishra(Banglore,India)

Prakash Mishra(Banglore,India)

One is Enough.

Regards,

Satips. Rose | [Rose]

Re: how to display the database table values in the form

N a v a n e e t h17-Jun-07 23:12

N a v a n e e t h

17-Jun-07 23:12

Hello

What is the use of repeating the same question rather than explaining it in a simple way ? I think including me no one understood what is your problem exactly. So please make it clear to get help.

Sincerly
Navaneeth
My Website

To insert values from a gridview to textboxes in web page

codingrocks17-Jun-07 21:20

codingrocks

17-Jun-07 21:20

i am doing an web page application in which i want to populate all the row data

values of the colum or row clicked by user...

As there is no mouseover or mouse click event for GridView in ASP .net wat can i do ....

Please Help......

Thanks

SAJAN A PILLAI

C#.NET Programmer
TELESOFT INDIA PVT LTD...
BANGALORE

Re: To insert values from a gridview to textboxes in web page

Sreekumar P P17-Jun-07 23:37

Sreekumar P P

17-Jun-07 23:37

1. You can use DataGrid's ItemDataBound event for this.

At any point you can have the exact cell value by --> e.Item.Cells[x].Text

--------------------------------------------------------------

2. You can also have mouseover or mouse-click events for a DataGrid Row.

if (e.Item.ItemType == ListItemType.Item ||e.Item.ItemType == ListItemType.AlternatingItem)
{
if (e.Item.ItemType == ListItemType.Item)
{
e.Item.Attributes.Add("onmouseover", "JavaScriptFunctionName();");
e.Item.Attributes.Add("onmouseout", "JavaScriptFunctionName();");
}
if (e.Item.ItemType == ListItemType.AlternatingItem)
{
e.Item.Attributes.Add("onmouseover", "JavaScriptFunctionName();");
e.Item.Attributes.Add("onmouseout", "JavaScriptFunctionName();");
}
}

Re: To insert values from a gridview to textboxes in web page

codingrocks18-Jun-07 0:25

codingrocks

18-Jun-07 0:25

i want to know how it can be done in gridview control

SAJAN A PILLAI

C#.NET Programmer
TELESOFT INDIA PVT LTD...
BANGALORE

how to add textbox to a table at runtime and send textbox's value to database

sanchet17-Jun-07 21:13

sanchet

17-Jun-07 21:13

hello,

i am trying to find out "how to add a simple textbox to a form at runtime and then send its textvalue(whatever written in it) to a datatable made in my dadabase"
is anybody can help me!
thanx in advance!

nitin

Re: how to add textbox to a table at runtime and send textbox's value to database

Sandeep Akhare17-Jun-07 21:18

Sandeep Akhare

17-Jun-07 21:18

Add a placeholder control where you want to add the textbox
then at run time create the new object of your textbox give it id and then
add that textbox to the placeholder .
now the control is in page you can use that value

Thanks and Regards
Sandeep

If If you look at what you do not have in life, you don't have anything,
If you look at what you have in life, you have everything... "

Re: how to add textbox to a table at runtime and send textbox's value to database

Sreekumar P P18-Jun-07 0:14

Sreekumar P P

18-Jun-07 0:14

Nitin, sandip is right...

However, you can also use "Panels" for the same

protected System.Web.UI.WebControls.Panel Panel1;
... ...
.... ....
TextBox txt =new TextBox();
txt.ID = "textBox1";
Panel1.Controls.Add(txt);
... ...
.... ....
//At any point of time you can read value from this text box
TextBox tempText = new TextBox()
tempText = (TextBox)Panel1.FindControl("textBox1")
string strValue = tempText.Text()

Sreekumar P P

Re: how to add textbox to a table at runtime and send textbox's value to database

sanchet18-Jun-07 20:18

sanchet

18-Jun-07 20:18

thanx sir ji,
your view is very helpful 4 me but there is a prblm now...
i put 2 btn on form
btn1.text= add button
btn2.text= insert
when i click btn1 , a textbox appeared on forn but when i click btn2 the textbox disappear and nothing inserted in my database.

nitin

Web 1.0 and Web 2.0

N a v a n e e t h17-Jun-07 21:03

N a v a n e e t h

17-Jun-07 21:03

Any one knows what is Web 1.0 and Web 2.0 ?

Navaneeth
My Website

Sathesh Sakthivel17-Jun-07 21:15

Sathesh Sakthivel

17-Jun-07 21:15

Web 1.0 was about reading, Web 2.0 is about writing
Web 1.0 was about companies, Web 2.0 is about communities
Web 1.0 was about client-server, Web 2.0 is about peer to peer
Web 1.0 was about HTML, Web 2.0 is about XML
Web 1.0 was about home pages, Web 2.0 is about blogs
Web 1.0 was about portals, Web 2.0 is about RSS
Web 1.0 was about taxonomy, Web 2.0 is about tags
Web 1.0 was about wires, Web 2.0 is about wireless
Web 1.0 was about owning, Web 2.0 is about sharing
Web 1.0 was about IPOs, Web 2.0 is about trade sales
Web 1.0 was about Netscape, Web 2.0 is about Google
Web 1.0 was about web forms, Web 2.0 is about web applications
Web 1.0 was about screen scraping, Web 2.0 is about APIs
Web 1.0 was about dialup, Web 2.0 is about broadband
Web 1.0 was about hardware costs, Web 2.0 is about bandwidth costs

Regards,

Satips. Rose | [Rose]

Sandeep Akhare17-Jun-07 21:19

Sandeep Akhare

17-Jun-07 21:19

Hi Sathish Did you get it from any souce you have type it Wink | ;)

Thanks and Regards
Sandeep

If If you look at what you do not have in life, you don't have anything,
If you look at what you have in life, you have everything... "

Sathesh Sakthivel17-Jun-07 21:23

Sathesh Sakthivel

17-Jun-07 21:23

Get it[^]

Regards,

Satips. Rose | [Rose]