ASP.NET

enjoycrack wrote:

for the sql injection issue..i'd suggest to use stored procudures instead of inline sql

public class DemoClass {

   private string _wef, _abc;

   public DemoClass(string wef, string abc) {
      _wef = wef;
      _abc = abc;
   }

   public string Wef { get { return _wef; } }
   public string Abc { get { return _abc; } }

}

// read the data

List<DemoClass> items = new List<DemoClass>;
while (objDR.Read()) {
  items.Add(new DemoClass(objDR.GetString("wef"), objDR.GetString("abc")));
}

// access the data

foreach (DemoClass d in list) {
  doSomethingWithTheData(d.Wef, d.Abc);
}

boyindie wrote:

when i check the html source file the tag has been filled with the valid address but it jus doesn't seem to want to render the image

'This returns the connection string
    Public Shared Function GetConnectionString(ByVal strConnection As String) As String
        Dim strReturn As New String("")
       'If you have multiple connection strings then you can pass it a connection name otherwise it defaults to your default connection
        If Not String.IsNullOrEmpty(strConnection) Then
            strReturn = ConfigurationManager.ConnectionStrings(strConnection).ConnectionString
        Else
            strReturn = ConfigurationManager.ConnectionStrings("MyConnectionName").ConnectionString
        End If
        Return strReturn
    End Function

Dim oConnection As New SqlConnection(YourClassName.GetConnectionString("MyConnectionName"))

<connectionstrings>
        <add name="MyConnectionName">
   connectionString="Persist Security Info=False;Data Source=localhost;Initial Catalog=db;Integrated Security=SSPI;Trusted_Connection=TRUE;Application Name=AppName"
            providerName="System.Data.SqlClient" />
  </add>
</connectionstrings>