Understanding Script Injection Attacks : Sanjit Sil

Saturday, October 04 2008

This article helps to understand the concept of script injection attacks in detail using ASP.NET. Sanjit first provides a list of potentially dangerous HTML tags and then examines the concept of request validation with the help of some simple ASP.NET code. Sanjit also describes how to disable request validation and encode the output.

Learn The Basics Of LINQ : Timothy Khouri

Tuesday, September 30 2008

LINQ (Language INtegrated Query) is a powerful but misunderstood new language feature brought to us in the .NET framework version 3.5 (C# 3.0 and VB 9). Even though this is a new feature, it already has some huge misconceptions (such as thinking LINQ is a replacement to SQL). This article will teach you how to use LINQ (the language itself), where LINQ can save you a lot of time and will cover some basic concepts of Extension Methods and Lambda expressions....

Accessing data using Language Integrated Query (LINQ) in ASP.NET WebPages – Part 1 : Balamurali Balaji

Wednesday, September 24 2008

This article comprises of two parts; Part 1 deals with the introduction to LINQ and LinqDataSource control in ASP.NET and describes how to define and retrieve an in-memory data collection and display data in a web page. Part 2 explains how to create entity classes to represent SQL Server database and tables using Object Relational Designer and display data in a web page using LinqDataSource control. Language Integrated Query (LINQ) is a query syntax that defines a set of query operators that allow traversal, filter, and projection operations to be expressed in a declarative way in any .NET-based...

Using Parameterized Queries with the SqlDataSource : Scott Mitchell

Monday, September 22 2008

In the previous tutorial we saw how to use the SqlDataSource control to retrieve data directly from a database. Using the Configure Data Source wizard, we could choose the database and then either: pick the columns to return from a table or view; enter a custom SQL statement; or use a stored procedure. Whether selecting columns from a table or view or entering a custom SQL statement, the SqlDataSource control’s SelectCommand property is assigned the resulting ad-hoc SQL SELECT statement and it is this SELECT statement that is executed when the SqlDataSource’s Select() method is invoked (either...

ObjectDataSource in Depth (Part 2) : Manuel Abadia

Friday, September 12 2008

I’m going to add paging support to the example I was using for the ObjectDataSource. First we have to enable it in the GridView setting the AllowPaging property to "true". Also, set the PageSize to something low and insert more rows to the Products table. Now we have to set the EnablePaging property in the ObjectDataSource to let it know that we want to support paging. If we have enabled paging, our select method will need to handle two additional parameters. Their names are configurable using the StartRowIndexParameterName and MaximumRowsParameterName properties. If we don’t set those properties...

Updating the TableAdapter to Use JOINs : Scott Mitchell

Tuesday, September 09 2008

When working with a database it is common to request data that is spread across multiple tables. To retrieve data from two different tables we can use either a correlated subquery or a JOIN operation. In this tutorial we compare correlated subqueries and the JOIN syntax before looking at how to create a TableAdapter that includes a JOIN in its main query. With relational databases the data we are interested in working with is often spread across multiple tables. For example, when displaying product information we likely want to list each product’s corresponding category and supplier’s names. The...

Caching Data in the Architecture : Scott Mitchell

Monday, September 08 2008

As we saw in the preceding tutorial, caching the ObjectDataSource’s data is as simple as setting a couple of properties. Unfortunately, the ObjectDataSource applies caching at the Presentation Layer, which tightly couples the caching policies with the ASP.NET page. One of the reasons for creating a layered architecture is to allow such couplings to be broken. The Business Logic Layer, for instance, decouples the business logic from the ASP.NET pages, while the Data Access Layer decouples the data access details. This decoupling of business logic and data access details is preferred, in part, because...

Performing Batch Deletes from the Database : Scott Mitchell

Sunday, September 07 2008

The preceding tutorial explored how to create a batch editing interface using a fully-editable GridView. In situations where users are commonly editing many records at once, a batch editing interface will require far fewer postbacks and keyboard-to-mouse context switches, thereby improving the end user’s efficiency. This technique is similarly useful for pages where it is common for users to delete many records in one go. Anyone who has used an online email client is already familiar with one of the most common batch deleting interfaces: a checkbox in each row in a grid with a corresponding “Delete...

Persistent Logins Under ASP.NET 2.0 : Eric Smith

Friday, September 05 2008

For some sites, allowing users to "save their passwords" is not a major security concern, and it speeds up the user's ability to interact with the site. Assuming your site security can allow for persistent logins, this feature also is easy to provide. Under ASP.NET 1.x, the built-in FormsAuthentication enabled this very easily: it simply specified a True argument when the user ID was saved using FormsAuthentication.RedirectFromLoginPage....

Changing GridView Column Color : AzamSharp

Thursday, September 04 2008

Couple of weeks ago I wrote two articles which explained column sorting scenario for the GridView control. I explained sorting bound columns and also auto-generated columns. One important point which I left out was how to remember that which column was sorted. Consider a scenario in which you have 10 columns and you sort the GridView by using one column but after some time you forgot that which column was used for sorting. In this article I will explain that how you can change the column color of the row whose header was clicked for sorting. Please note this article does not discuss sorting......