clear all temp and catched file and try again

thanks buddy for u r valuable input well first of all this is NOT my way coding and i raised this question just to find out any good EXAMPLE how attacker can take advantage of this poorly fabricated query.Though we all advocating parameterized queries and stored procedures including ME and even this query seems easily attackable but still could not figured out HOW neither got any single example from anyone :^) btw that was the first article which make me aware of the SQL injection long ago :-O

thankx for link.I went through this but still could not got my answer. Can u pls help me out to find in what way this query can venerable to SQL injection strQuery = "select * from Table where Name ='" & strName.Replace("'","''") & "'"

there there is no way to inject after replacing ' with '' :^)

why don't u change column DB type to nvarchar !! :^)

Is SQL Injection is possible even after replacing all single quote i.e ' from the user input with two single quote i.e '' ? .If so can you give me any example.

Hi Friends, I am using vs2002 and CR 9.1.In my application i have to Export the crystal report to PDF and i am able to do so using below code. Public Sub ExportToPDF() Dim rptDiskFileOptions As New DiskFileDestinationOptions() Try Dim FilePath As String FilePath = Server.MapPath(General.C_TempDownLoadPath & & "Report.pdf") '.Replace("/"c, "\") rptDiskFileOptions.DiskFileName = FilePath rptDoc = DirectCast(Cache(strCacheReport), ReportDocument) rptDoc.ExportOptions.ExportDestinationType = ExportDestinationType.DiskFile rptDoc.ExportOptions.DestinationOptions = rptDiskFileOptions rptDoc.ExportOptions.ExportFormatType = ExportFormatType.PortableDocFormat rptDoc.Export() Response.Redirect(General.C_TempDownLoadPath & "ReportName.pdf") Catch exc As Exception Throw exc Finally rptDoc = Nothing rptDiskFileOptions = Nothing End Try End Sub Now my problem is that some time i am getting pdf file without any problem but most of the time it give me this exception. An unhandled exception of type 'System.ExecutionEngineException' occurred in crdb_adoplus.dll can anyone help me to resolved this problem. Regards, Ritesh

Hello Frds, Till yesteday all was working fine but Today When i open windows broser (e.g my computer or any other folder) or IE i can not see the standard menu bar which contains file,Edit,view button..... even i tried to right click it's not showing any menu.........In File Explorer Ctrl + F is also not working..what could be the reason...... I tried all the Registry Tricks and solution available on internet(e.g changing Polies,Removing ITBarLayout Key etc etc) but no luck.... I am using Win2K Prof OS Any help....... :sigh:

Hi, I have 2 web application hosted on 2 separate servers.In first application i had one anchor tag whose target=_None and href="url of 2nd application" Is it possible to access the cookie which is created by first application in second application ? if yes how? Any help on this......... :sigh: Regards, Ritesh

hi, the third party is running under local service account (same as w3w ) and i set full control for this account for exe as well as for web app, i don't have much idea about remoting but i will try to it, Thankx, Ritesh

Hi, thanks for reply.I tried with both Process class as well as with Shell() but no luck, when i call the process it runnning in task manager but generate no o/p file....... :confused: Regards, Ritesh

Hi, My ASP.NET application is hosted on Windows 2003 Standard Server with IIS6.0. My application dynamically converts the autocad files to PDF when user request it, For this i am using third party command line tool which accept input file path and output file path and i am calling this exe using [B][I]Shell()[/I][/B] method. Evetything is working fine on development machine which is windows 2000 pro. But when i run the same on server seems like thigs not working,Is it related to any security settings of IIS. (I also set the application Execute permission to Script and Executable but no luck.... :ehh: ) If you can provide any thread it would be help full. Regards, Ritesh N. Jain

Hi, After some R&D i think i figured out the solution...........it all has do to with IE 6.0 's trusted site's security setting.I just set "Automatic Promting for file download" setting to enable and it works fine. Regards, Ritesh

Hi Abhishek, thanks you very much for you reply.currently i am doing same steps,i.e opening temp. page and doing response.redirect to target file,It was my mistake that i forgot to mention that my application is sort of document management system and it stores file with any extension on FTP server.As sugested by you in Step 3 is mainly deal with msword documents,but i am also facing same problem with autocad (.dwg) files. and in my temp page i am also doing further proecessing of file like converting it into pdf format and applying watermark onfly etc, so i guess converting files into binary format further slowdown the whole process (as size of files are in 10+MB). I am not sure but i guess it has something to do with mime setting as when i added *.* in the mime type list of my iis server it's work file (but only if i use localhost in my url). If you can have any suggestion i would be very helpfull.... thanks, Ritesh

Hi, My web application is hosted on windows2003 server (IIS 6.0).I am facing one strange problem on client machine, i use response.redirect("url for Office document like .doc,.xls") to open the any attacment with the records, in some of the machine the attachement open properly but in some it's not(it seems like client gets back the response and page appear for fraction on time and gets dissapear.) even when i run the application on server itslef i notice that attachment getting open when i use http://localhost in my url but problem occurs when i use IP address or machine name. Is it something related to IE setting or some setting of IIS. but the things work perfectly on any machine if attachment is pdf file. Any help will be appreciated. Regards, Ritesh

Hi, I am at cient place and getting very strange problem with my asp.net application............when i call my web application from any desktop machine in lan it's working fine(even from my laptop it's working fine) but when i called it from the any of the client LAPTOP (HP make) having Window XP Prfession ver 2002 i am get the main page properly,but when i click on any of the image button/link button (on click of this i am calling response.redirect("Page..") ) nothing get's happend. I check for firewall and Antivirus but nothing is there........ Also when i click any where on page it get's postback.I also noticed that when i click on image button/link button 4-5 times continously i get the redirected page.......... and this problem is occuring in all client Laptop........ When i traced the iis log for the request sent i got this... Request From Laptop...... 14:21:23 10.110.2.63 GET /tepedmts/DSSMainPage.aspx 200 14:21:25 10.110.2.63 POST /tepedmts/DSSMainPage.aspx 200 (Here i click on button) Request From normal machine where it works fine... 14:22:20 127.0.0.1 POST /TEPEDMTS/DSSMainPage.aspx 302 14:22:20 127.0.0.1 GET /TEPEDMTS/DocumentReport.aspx 200 Can anyone explain me this weired behaviour and what could be the solution... Thanx, Ritesh

Hi, I have licence copy of VS.NET2002 and I have developed ASP.NET application which uses crystal report 9.1 buddled with vs.net. If i deploy this application at client site, does client required to purchase crystal report licence? Regards, Ritesh

Hi, Can anyone please tell me what's the relation between aspnet_wp and CLR.Is aspnet_wp is a part of CLR which executes/Compiles the web related Classes just like JIT in windows based application? Regards, Ritesh

Hi, on Default.aspx page write this (lets' assume name of text box in tbDefault) server.transfer("Frame.aspx") and in page load of Frame.aspx page textboxFocus.text = request.form.item("tbDefault") Or u can try this on Default.aspx page write this (lets' assume name of text box in tbDefault) context.Items.Add("tbDefault", tbDefault.Text) server.transfer("Frame.aspx") and in page load of Frame.aspx page textboxFocus.text = context.items("tbDefault") I hope this will help u.... Regards, Ritesh

hi i am facing one starnge problem............... I have one table in SQL DB which has following constraints........ Indexes IX_InvoiceTaxDetails_InvoiceDetailIndex clustered located on PRIMARY InvoiceDetailIndex PK_InvoiceTaxDetails nonclustered, unique, primary key located on PRIMARY InvoiceTaxDetailsIndex Constarints FOREIGN KEY FK_InvoiceTaxDetails_InvoiceDetail No Action No Action Enabled Is_For_Replication InvoiceDetailIndex REFERENCES BMJ.dbo.InvoiceDetail (InvoiceDetailIndex) FOREIGN KEY FK_InvoiceTaxDetails_TaxCombinationsDetails No Action No Action Enabled Is_For_Replication TaxCombinationsDetailsIndex REFERENCES BMJ.dbo.TaxCombinationsDetails (TaxCombinationsDetailsIndex) PRIMARY KEY (non-clustered) PK_InvoiceDetailIndex (n/a) (n/a) (n/a) (n/a) InvoiceTaxDetailsIndex Even though i have defined Primary key On column InvoiceTaxDetailsIndex my table has multiple data with same Value in InvoiceTaxDetailsIndex field e.g InvoiceTaxDetailsIndex InvoiceDetailIndex TaxCombinationsDetailsIndex TaxAmount TaxValueSlabIndex FoxUpdate UpdateDateTime ---------------------- ------------------ --------------------------- ----------------------------------------------------- ----------------- ------------------------------------------------------ ------------------------------------------------------ 305123 143171 2803 778.57000000000005 561 NULL 2005-11-19 19:55:34.763 305123 143171 2803 778.57000000000005 561 NULL 2005-11-19 19:55:34.763 can any one tell me what could be the reason.......... Regards, Ritesh