I've never seen this before. I am new to querystrings, as just using hidden
fields and the POST method has been more than adequate for me until
recently. But I started using the GET method, and I noticed that when I
clicked the submit button, it gave me this for a URL:
The thing is, selectTSE and Status are the two <SELECT> boxes, so I
understand them being there. But why is is telling me the x and y
coordinates of where I clicked the button to submit the form?
I should add that the submit button is an image, not a regular button.
This doesn't hurt anything, just wondering why it's there. And maybe it will
hurt something later on; I don't know enough to say.
when guarding against sql injection attack from modified form or querystring variables is it enough to strip out just apostrophes...if the variable USERNAME is the name of a text box passed to a script is the below always safe...
q1="select * from TABLENAME where username='" & trim(replace(request("USERNAME"),"'","''")) & "'"
can cookies be passed from a pop up "secure folder log in" window, provided by my hosting company? As I would like to display a welcome message with their name when they log in.
when i try passing a numeric value as a string("0004") using asp to a stored procedure, the value is stored as 4 and not as 0004 in the table. In the table and stored procedure the value type is nvarchar.
I'm trying to pass paramter values to another .aspx page via a querystring. The record in the db table looks something like this lahlahlah. The value that gets passed looks like this lahblahblah. So basically the is not getting passed.
When i submit this form all the record values are being passed to the next asp page. But i want only those records which the user has changed in this page.
Would anyone be kind enough to give me a solution to the problem below please?
If for example in the stored procedure looks like this:
-- Initialize the SQL Server XML stored procedures EXEC sp_xml_preparedocument @xmlDoc OUTPUT, @xmlString
Insert into @TableBook SELECT * FROM OPENXML (@xmlDoc, 'books/book') WITH ( bookNameVARCHAR(100) 'name', authorVARCHAR(100) 'author' )
The question is supposing there is a node called 'Surname' but I am not adding 'Surname' to 'Author'. If I want to check 'Surname' value DOES exists and I want to replace it with 'Author' or if 'Surname' does not exist, just use 'Author' node instead.
I am not sure how you can use IF statement to check a node and put the value into SET @surname and then put something like author VARCHAR(100) '@surname' OR author VARCHAR(100) '@Author'. Just like switching it around.
it would then insert the email into a table, collect these for a while and only see these as active members.Any ideas how to do this, I've tried a few things but no luck.
I am creatiung a track record website which displays a list of branches and how many people are available at each individual time slot.
I thought the best way to update would be to create a link which passed two variables, the branch and what time slot. This would then be retrieved int he book.asp page which then would knock one of the current count. I came up with the below page: Code:
my ASP code creates a form and an array of chekbox with this statement response.write "<input type='checkbox' name='chkProduct" & Cstr(counter) & "' value='delete'>" all goes well and i also have a button that points to a VBScript function passing one parameter the counter start value so i can loop throught the checkboxs on the client side and determine if checked or not.
Ok i can display my command "document.frmProductCart.chkProduct & (Cstr(counter)) & .checked" as a string in alert but cannot make it as a command like it should be, anyone got any pointers ?
I have created a database connection function which I use to open my database connection and recordset and another to close it. Easy stuff I know. The problem is this.
I want to be able to create database conenctions and recordsets specifically when I call the function. For example Code:
in J-Script, I could do it by Eval() or about eight ways through the DOM. It seems crazy to me that if I can access the Attributes of a specific element directly by ID (thisTD.Attributes), I couldn't also access it by reference.
But I have been able to find NOTHING to indicate how this may be done. Obviously, my problem is not limited to a single attribute, or else I would have just typed them all out by now. Trouble is, there is a lot of logic that must be applied to the data before setting the attribute. Without being able to iterate or loop by reference, I will be typing for ages just to change some freaking classes.
I have encountered some strange behaviour when using the XMLHTTP Request object in Javascript to return xml from a C# Webservice Method. I create a SOAP envelope and send it off to the Webservice, which I have debug points in, which when hit I can see that all the parameters are coming thru as null....
I want to understand the difference between submit button and regular button: <input type="submit"> and <input type="button">. My understanding is that submit button will send the entire HTML form to the web server, but regular button won't.
I have a problem that needs to pass HTML elements data back and forth in several ASP pages. I am using regular button to do that. But what's the approaches?
actually this is an example of a button called "Edit",however i am not sure of something. what does this c=<%=trim(server.urlencode(rs("cat_name")))%>&c_id=<%=rs("subsub_cat_id")%>'"> mean??
and the "cat_name" and "subsub_cat_id" is it from the database table?
i has installed IIS on Win2k Pro to test some horrible .asp stuff. I, er, he also has phptriad installed and rather like Apache as his localhost server from time to time. How can he switch IIS off?
I want to make it so that when the user is looking at a rendered ASP page and they hit the ENTER key, one of the buttons on the form gets "clicked". In other words I want for the user to not have to click on the button, and just hit ENTER instead. How do I specify the button?
Does anyone know how to code a button that when hovered over moves. Then maybe on the 3rd roll over it will not move and actually allow the user to select it?????
i am having problem with my submit function. When i refresh my page or select an option from the drop down list it is submiting the values into the database where it should submit when i click the submit values. Another problem is tat wad ever values i submit it is appearing with comma at the beginning of the value in the database.
I'm using Frontpage to Design the page and .NET to edit the code behind it. Is there an easy way, like a button, or some simple syntax to add a button to "browse PC" where when the user clicks on the button it opens up that standard HardDrive browse box and you can select a file? And question 2, can you do directory reads where you open a directory and then just keep reading through each file in the directory till you get to the end?
Now I have two different buttons in one form. I trying to figure out how to get the page to know what button was pushed, and then do a set of actions. Such as:
If button1 is pushed then blah end if if button2 is pushed then blah end if
Thats the basic pseudo code for what Im trying to do. Keep in mind this is a image button.
I have been using an image instead of a button to submit a form, this works fine within firefox, however when i come to test it in IE6 it doesnt submit the form... If i add a proper button then it works fine, however in keeping with the look and feel of the site it is important that i use an image. the code i have is as follows:
Code: <input type="image" name="Submit" value="Submit" src="images/proceed.gif" alt="Proceed to the next step" width="221" height="29" border="0" /> The form posts back to the same page to do some validation routines, but when it is not an image then as i have said in IE it doesnt work
I have two radio button and one input filed on my form. What I want a do when user change the selection then I want a display the today date into enterdate input filed. Then later I can add this date into database. How can I do that.
