What should be right directory in select attribute

Question

0.00/5 (No votes)

See more:

Hi,

I am saving data from database in xml file as below:

public partial class HS_SearchResult : System.Web.UI.Page
{
    ConnectionLogin cl = new ConnectionLogin(); // user define class 
    public string SearchResults = string.Empty;
    protected void Page_Load(object sender, EventArgs e)
    {
        DataSet ds = new DataSet("Category");
        ds = cl.dataset("select * from tblItem where cat_id = "+Request.QueryString["q"]);
        // get xml file from data set

        string XMLfile = ds.GetXml();
        
        SearchResults = GetHtml(Server.MapPath("~/HS/XSLTFILES/Searchcat.xslt"), XMLfile);
    }
    public static string GetHtml(string xsltpath,string xmlfile)
    {
        MemoryStream stream = new MemoryStream(ASCIIEncoding.Default.GetBytes(xmlfile));
        XPathDocument xx = new XPathDocument(stream);
        StringWriter wr = new StringWriter();
        XslCompiledTransform xc = new XslCompiledTransform();
        xc.Load(xsltpath);
        xc.Transform(xx, null, wr);
        return wr.ToString();
    }
}

This code is working correctly.
when i am transforming this xml file into HTML through xslt file. code is given below in xslt file..

XML

<?xml version="1.0" encoding="utf-8"?>
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:msxsl="urn:schemas-microsoft-com:xslt" exclude-result-prefixes="msxsl">
    <xsl:output method="html" indent="yes"/>

  <xsl:template match="/">

      <html>
        <head>
          <title></title>
        </head>
        <body style="color:black;">
          <h1>Your Result Here</h1>

            <table id="searchresult">
              <xsl:for-each select="Category/cat_id"> // i think the mistake is here can any body tell me what shoult be the right directory in select attribute
              <tr>

                <td class="labledata"> Name:</td>
                <td>
                  <xsl:value-of select="item_name"/>
                </td>
              </tr>
              <tr>
                <td class="labledata">Address:</td>
                <td>
                  <xsl:value-of select="item_owner"/>
                </td>
              </tr>

              </xsl:for-each>

            </table>
          rohihumai

        </body>
      </html>
    </xsl:template>
</xsl:stylesheet>

Result: Your Result Here i.e written in H1 tag of this file.
<xsl:for-each select="Category/cat_id"> // i think the mistake is here can any body tell me what shoult be the right directory in select attribute

Posted 22-Nov-13 5:10am

dhiman.rohit9

Updated 22-Nov-13 20:53pm

bjdestiny

v3

Add a Solution

Comments

José Amílcar Casimiro 22-Nov-13 12:53pm

Sql Injection -> ds = cl.dataset("select * from tblItem where cat_id = "+Request.QueryString["q"]);

Here is the xml file?

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)