I'm trying to pass paramter values to another .aspx page via a querystring. The record in the db table looks something like this lahlahlah. The value that gets passed looks like this lahblahblah. So basically the is not getting passed.
Here's what my querystring looks like: Code:
when guarding against sql injection attack from modified form or
querystring variables is it enough to strip out just apostrophes...if the
variable USERNAME is the name of a text box passed to a script is the below
always safe...
q1="select * from TABLENAME where username='" &
trim(replace(request("USERNAME"),"'","''")) & "'"
I've never seen this before. I am new to querystrings, as just using hidden
fields and the POST method has been more than adequate for me until
recently. But I started using the GET method, and I noticed that when I
clicked the submit button, it gave me this for a URL:
http://localhost/DisplayTickets.ASP...nsearchTSE.y=11
The thing is, selectTSE and Status are the two <SELECT> boxes, so I
understand them being there. But why is is telling me the x and y
coordinates of where I clicked the button to submit the form?
I should add that the submit button is an image, not a regular button.
This doesn't hurt anything, just wondering why it's there. And maybe it will
hurt something later on; I don't know enough to say.
can cookies be passed from a pop up "secure folder log in" window, provided by my hosting company? As I would like to display a welcome message with their name when they log in.
View Replies View Relatedwhen i try passing a numeric value as a string("0004") using asp to a stored procedure, the value is stored as 4 and not as 0004 in the table. In the table and stored procedure the value type is nvarchar.
View Replies View RelatedI have a page that passes a variable in to an sql query
It parses the string (a date) for month and year.
It works when i use the date() function Code:
i need to add a variable brought into the
script like: script.asp?variable=var
and i need to make it for use in
var1 = request.querystring("var")
mySQL = "SELECT * FROM members WHERE nick = 'VAR1'"
can anyone tell me how to do this?
When i submit this form all the record values are being passed to the next asp page. But i want only those records which the user has changed in this page.
View Replies View RelatedI am using SQL SERVER 2005 and ASP.
Would anyone be kind enough to give me a solution to the problem below please?
If for example in the stored procedure looks like this:
-- Initialize the SQL Server XML stored procedures
EXEC sp_xml_preparedocument @xmlDoc OUTPUT, @xmlString
Insert into @TableBook
SELECT * FROM OPENXML (@xmlDoc, 'books/book') WITH
(
bookNameVARCHAR(100) 'name',
authorVARCHAR(100) 'author'
)
The question is supposing there is a node called 'Surname' but I am not adding 'Surname' to 'Author'. If I want to check 'Surname' value DOES exists and I want to replace it with 'Author' or if 'Surname' does not exist, just use 'Author' node instead.
I am not sure how you can use IF statement to check a node and put the value into SET @surname and then put something like author VARCHAR(100) '@surname' OR author VARCHAR(100) '@Author'. Just like switching it around.
I would like to clean up my mailing list by changing the URL I use at the moment which is in the format
www.mysite.com/view_pic.asp?pic_number=123
To be
http://www.mysite.com/view_pic.asp?p...il=bob@bob.com
it would then insert the email into a table, collect these for a while and only see these as active members.Any ideas how to do this, I've tried a few things but no luck.
I am trying to work out the length of time that a page was opened till it reached another page, I amusing the script below Code:
View Replies View RelatedThe subject sounds confusing but here is what i want to do. I have a
button on my page which says
OnClick="javascript:window.open('reportsContainer.asp?pag eURL=Report1.asp?intCurrentPage=1&blnRetrieveFlag=1&Show=1',TasksRPT');"
Now on the Conatiner.asp what i do is
if Request.QueryString("Show") = 1 then
pageURL = Request.QueryString("pageURL")
end if
And then i set the pageURL along with intCurrentPage and
blnRetrieveFlag parameters to my fram src as
<frame height=500 scrolling=auto name="pageFrame" id="pageFrame"
border=0 src="<%=pageURL%>">
Code:
does anyone know why my session number doesnt stay the same when i pressed refresh?
it works on w2k, but not on w2k server
my programmer thinks that the IIS is not passing the session back to the client. is there a way to check or any other alternative for sessions?
I am creatiung a track record website which displays a list of branches and how many people are available at each individual time slot.
I thought the best way to update would be to create a link which passed two variables, the branch and what time slot. This would then be retrieved int he book.asp page which then would knock one of the current count. I came up with the below page: Code:
my ASP code creates a form and an array of chekbox with this statement response.write "<input type='checkbox' name='chkProduct" & Cstr(counter) & "' value='delete'>" all goes well and i also have a button that points to a VBScript function passing one parameter the counter start value so i can loop throught the checkboxs on the client side and determine if checked or not.
Ok i can display my command "document.frmProductCart.chkProduct & (Cstr(counter)) & .checked" as a string in alert but cannot make it as a command like it should be, anyone got any pointers ?
I have created a database connection function which I use to open my database connection and recordset and another to close it. Easy stuff I know. The problem is this.
I want to be able to create database conenctions and recordsets specifically when I call the function. For example Code:
I have a ton of TD attributes that have to be changed based on the
data in the DB. All TD elements are ID and runat=server.
Changing the attributes of a SINGLE TD is simple:
<td id=thisTD runat=server>
thisTD.Attributes.Clear();
thisTD.Attributes.Add("Class",reader["thisTD_Class"].toString());
Now, say we have 100 TD elements with IDs TD_1 to TD_100
I have not been able to find a way to (essentially) say:
for(int i=0;i<100;i++){
"TD_"+i.Attributes.Clear();
"TD_"+i.Attributes.Add("Class",reader["TDClass"+i].toString());
}
in J-Script, I could do it by Eval() or about eight ways through the
DOM. It seems crazy to me that if I can access the Attributes of a
specific element directly by ID (thisTD.Attributes), I couldn't also
access it by reference.
But I have been able to find NOTHING to indicate how this may be done.
Obviously, my problem is not limited to a single attribute, or else I
would have just typed them all out by now. Trouble is, there is a lot
of logic that must be applied to the data before setting the
attribute. Without being able to iterate or loop by reference, I will
be typing for ages just to change some freaking classes.
I have encountered some strange behaviour when using the XMLHTTP Request object in Javascript to return xml from a C# Webservice Method. I create a SOAP envelope and send it off to the Webservice, which I have debug points in, which when hit I can see that all the parameters are coming thru as null....
View Replies View RelatedI'm trying to pass a parameter from a for loop to the nested while loop
but only the first counter is passed. Here is the code:
is it possible to check if a variable is present in the querystring, or is that unneccesary? will it assume the variable is empty if it is not present in the querystring?
View Replies View Relatedi have a hyperlink from a results page:Code:
Response.Write "<TD>" &"<a href = JobDetails.asp?id=" & rs("JobID") &" >" & "Click Here" & "</a></TD>"
the sql statement in JobDetails.asp =
Code:
sqlstr = "select * from Jobs where JobID = '" & Request.QueryString("ID") & "'"
rs.Open sqlstr, conn
im getting this error when i click the hyper link
line 20 is the rs.Open sqlstr, conn line
this error seems to happen with dates but i dont have any dates at all.
I want to write a page which will
load a default page for me with some links and all. lets say someone
clicks on the link, which not only points to the same page but also
passes a querystring. Looking at the querystring I will then display
data from a database.
So my question in short is... Is it possible to have a single asp page
which can return either a default page where no querystring is passed
or a result from the database when a querystring is passed?
If the answer is yes, then is it a good idea to do this or have 2
seperate pages?
I've got a request form for samples of our product that we send out. The form is being linked from our ebay auction pages. In the link from the auction page I'd like to include the model number of the sample that they're requesting. (ie. /sampleRequest.asp?AS240)
Then, on my sampleRequest.asp page which contains the input form I'd like to include a hidden field which holds the value of that querystring. Finally, upon submitting this form I'd like that value to be placed into the sampleModel field in my Requests table in my database.
The problem I'm having is how to populate the hidden form field with the querystring form the ebay auction page. Code:
I have a querystring like this:
checkbox1=2&checkbox2=1&checkbox3=2checkbox1=5&checkbox9=1&checkbox3=1
I would like to insert each set of checkbox1, checkbox2, checkbox3 into a table like field1(checkbox1), field2(checkbox2), field3(checkbox3). Remember each set of 3 checkboxes are 1 unit inserting into a table. Is this possible?
I am trying to maintain some ASP code that I did not generate and the programmer who did has a very different style than I do so I am having some problems. Hopefully someone out there can help me by answering my question.
I have the following line of code:
If (isEmpty(Request("dir"))) Then.....
Now my question:
Could the Request("dir") used above be the same thing as using Request.QueryString("dir")???
I just noticed though that when I include the file name to the folder it worked.
ie unitingrhythms.co.uk/?size=4 - no output
& unitingrhythms.co.uk/index.asp?size=4 - outputs 4
can the querystring be read when the file isn't shown?
i have a querystring on one page where the url looks like:
delete.asp?name=test2.pdf&type=file
on delete.asp i have:
Dim name, type
name = Request.QueryString("name")
type = Request.QueryString("type")
It gives me an error for some reason.
i am working on ASP.net in c# and i want to pass " +" in querystring but "+" is converted to space.Is thereany encoding method to show "+" in querystring.
View Replies View RelatedI have a querystring that contains the + sign as a separator, I need to read these values individually in a select statement, for example.
&text=Single+205
where single is the type of room somebody wants and 205 is the user ID in the Customer table.
I have a banner that is clicked and the people are takin to a general information page. From the banner they are given the URL and a querystring of ?AdID=X. On that page they click and are taken to our signup page where i have a form for them to fill out.
The mentioned querystring is the referering company. How can I get the querstring information into a hidden value on my form before submitting to the database. I have tried <%=request("HTTP_REFERER")%> and it writes the whole URL into the database. I need just the querystring. Have also tried. <%=request.querystring("AdID")%> and that does not work either.
I am using querystrings to pass URLs to be able to tell what page to go back to when an action is done on my inventory site. For example, if an order status is updated, the page that does the update knows to go back to a page to display the page that the person was looking at before the update was done.
One of the pages that displays orders filtered by search criteria uses querystrings. If I try to send that URL as a querystring, it all gets combined together. For example, I have one page that redirects to something like "emailUpdate.php?Send=True&OrderID=342&LastPage=results.asp?Item=Computer&Method=Brand&Criteria=Dell" where "results.asp?Item=Computer&Method=Brand&Criteria=Dell" is the page I want to return to.
The "Item=Computer" gets set just fine, but the rest of the URL is concidered part of the first URL. Is there some special characters that I can use to show that I want the one URL to be its own querystring?
how do I add a querystring, with ASP? You're probably thinking, "just add it to the url"...but that's not what I want to do. Here's an example of what I do want to do,
[vbs] Dim someString
'// Here a querystring gets added, through headers or something
'// Here my code uses the newly added querystring
someString = Request.QueryString("MyAddedQueryString")
[/vbs]
this is just a simplified example. Does anyone know how to do that?
I have a this piece of code...
<
dim ur
url="http://www.test.com?var1=1&var2=2
%
And this is a part of a flash movie..
<param name="movie" value=testez.swf?clickTAG=<%=url%>
when i click in the movie the page goes to..
http://www.test.com?var1=
But the another variable var2 doesnt appear in the url. How its possible pass all the parameters when you click in a flash movie?