Malicious Text Being Stored To Database
Mar 7, 2008Is there a function or something that is built into VB.NET so that when I save a text field (of a user's input), malicious code isn't being executed in the process.
View 2 RepliesIs there a function or something that is built into VB.NET so that when I save a text field (of a user's input), malicious code isn't being executed in the process.
View 2 RepliesNeed to design a program that can encrypt and decrypt messages stored in simple text files using a private key stored in a separate file. Software should also be able to allow the users to enter simple messages that either displays the encrypted or decrypted message. The encryption method should use a simple substitution method. It should be set out in the following format:
Example (the "@" is the separator):
@
The character The Code End of line
A @ 4gh EOL
B @ 84!9 EOL
Has to use the 256 ASCII character codes. The separator will be used to separate the character and its corresponding code.Here are the pseudocodes I have come up with:
� Read any private key file
separator = readline(file);
while not EOF(file) do
tempStr = readline(file);
[code].....
I have a program where a lot of the required information for it is stored in text files. I simply read this information into large arrays. However, I don't think it's necessary to load all the information each time. Rather, it would be more efficient if I could simply search through a list of items to find the one I need and then use the data from it, or to find a similar name and use it elsewhere.
Would I be right in using a database? And is database programming done in SQL? I have a book on it telling me to use the SQL Server (IIRC), so I shouldn't be doing it in the VB.NET Express GUI?
Here's an example of what I would do:
Hex = 03 00 => dex number 003
Search in file Pokemon Dex Numbers
003 returns Bulbasaur
Check Bulbasaur base stats in the base stats file
etc
So basically I'm reusing a lot of information. I think a database would be best and it would all be internal right? I'm getting complaints about access denied to a text file (since it's stored in the program directory in the program files).
So to cap up the few questions I have:
-Databases are done in SQL and not inside the GUI?
-Databases would load internally?
-I could search a database without having to load it into like an array or something?
I'm suspicious my spouse is cheating. In the past few months he has systematically locked me out of all of his social media accounts shortly after getting a job with a group of female secretaries that travels for a week at a time. He has been dodging or non-communicative when confronted about this.url...
The only way to avoid interaction with antispyware is to create it myself.I understand that copying text or something into an open notepad session or the clipboard is out of the question; however I'm pretty sure that I could create a (fairly) simple script that does the following:[code]I know this is extremely inneficient but this is the most covert way i can think of, a simple wscript that runs on startup and creates these .txt files in an important looking place (windows/config/system/logs/win32 - example)
I found a VB WebCam program from Africa on this site [url]
However one of the instructions is to "add a reference to WebcamControl.dll ". I've researched that .dll and it appears to be able to "Silently record users' sensitive personal information, identity details and business files, make traces of the users' online activities and browser habits and then transmit them to insecure remote servers".
I haven't downloaded this .dll or found a location to download it. Am I correct in assuming this program was designed with malicious intent?
I have a site developed using vb.net 2.0. It has a URL of like [URL]..I want to avoid any malicious requests using other URLs. I have tried to implement using the code below and would like to kick such requests out of the site on the page load. How can I achieve this?
If (urlParams.Contains("http") And
Not urlParams.Contains(Request.ServerVariables("HTTP_HOST").ToString)) Then
Would like to kick out of the site here.
End If
How to avoid aiding the development of malicious code I see an uncomfortable number of questions asking for info that could easily be put to malicious use. You can probe the OP to discover their intent, and you get replies that come in one of two flavors.
I have come to realize that trying to discover their intent is a waste time. Not because of the reactions, but their intent is really irrelevant to the matter at hand. Security. Posting code of any nature in a public forum that can be abused for malicious purposes is outright reckless. I wish could provide the help they request, but I don't know most of those programming tricks anyway. I would discourage anyone from publicly posting code that could be perverted no matter what the person asking for it claims. Their claims take a back seat to common sense. Anyone can read the post, people. Don't post anything that could become part of someone's malicious software in public.
A open conversation thread on this topic exists at[url]...
I would like to ask our community to take a brief moment to consider the outcome of answering a question before doing so. Sometimes a question can lead down a path to examples of how to create malware applications, and that is something we want to try to avoid. There are a few key things we can watch out for which would often indicates a question about malicious code intent.
First, watch for requests to do network communications that violate one or more RFC documents (e.g. How do I spoof my IP address?). Second, watch for requests on automating other websites - a quick check of the other site's AUP or TOU will typically tell you if the automation is permitted. Third, watch for requests that appear to want to harvest data from the web, without following the typical procedures for a web crawler (bot).[code]...
I am creating an application that will compile code at runtime and then execute that code. My worry is this: Someone might make a malicious script, that deletes files for example. Is there an option in VB.NET that prevents Kill statements and other file operations from executing? Maybe a kind of 'security' feature? If not, is there another approach that I should take?
View 6 RepliesI have developed some software(vb.net) that records fees paid by the students. The purpose is that the database should be stored in a server, which can be accessed from any stations linked with it.This is working fine with a network of 10 computers. I need to publish it over the net so people could do this job logging in over internet. Database (access database) should be stored on a web based server.
View 1 RepliesI have declared an array of text boxes created dynamically at run time. The textboxes are assigned some values by user. The text boxes are located in a Form so that once the user fills in the info and clicks the "ok" button, these values are passed at the back end and the form dissappears. However the user can bring back the form again by clicking another button.
The problem is that once the form reappears, the information previously provided in the form remains. Even the user clears the text boxes to provide new value, the text boxes at code behind do not receive these values.
How do I get text stored in a text document from a website? I know it is possible, just dont know how.
View 2 RepliesI am working with Vb.net and have a form with a combo Box. On load the form is loaded with one of the following details depending on what is stored in the database; Cancelled, Processed and Failed. [code] Then I have an update button and when the user drops down the list he/she can select between Cancelled/Processed/Failed. I want to be able to grey out or disable Processed and Failed, so that when the user updates the field he/she can ONLY update with the Cancelled option ONLY.
View 7 Repliesive made changes to my data stored in the database for a login i.e. ive changed the password that is stored in the database however for my application to continue the previous password still has to be used does anybody know why and how to change this, this also is the case for new entry's in the database i.e. new users. I also had an update button that also no longer works i think this is because of the same problem. I think the problem is that its saving the data changes from the update to the data set and not the database its self can this be changed?
View 4 RepliesI am working on login and registration page in vb express 2010. I have connected access 2007 database with my project and when I register as a user, it stores information to the database successfully and I can log in with that id as well. But when I close that project and reopen it, the same exact id won't work and the information in the database disappears.
View 1 RepliesI am attempting to create a tier application. Im wondering which approach would be better to take on. Should i have stored procedures on the database and then call these from my Data Access Layer (this is when you right click your dataset and add a table adapter, select existing stored procedures or create the entire query in my Dataset under TableAdapter?
My reason for asking is because my Stored procedures are created to insert and update in one command (by using an If statement), but saw the other approach recently. Any reason for one over the other?
The Intranet was done with forms authentication and stored in a SQL database. how I go about (if possible) authenticating a login in a vb.net project that queries the user settings from the ASP.Net database that was created on the SQL server for the forms Authentication.
View 5 RepliesI have a requirement for a form where user can add a list of 'documents'. These could be word, excel, images etc... pretty much anything. They want a form where they use the openfiledialog to locate the document and then want the list of documents stored on a database.
However, when they view this form they want a preview of all of the listed documents and the ability to print them all. I was considering a datagrid view with image cells but how would I show a word document in there? Or, should I insist that they convert all documents to PDF's?
I am making a login with the database stored in MYSQL and for some reson when i press login i get a error on this line
CODE:
I am developing an application that runs on a network. It needs to contact to database (access database) very very often, which is stored in server. Around 30 Client computers contact the database almost every 2-3 seconds. I need to know could there be potential manifest problem in with the application? Could there will be a problem if database is being updated by one client, at the same time other client contacts it?
View 3 Repliesim trying to read a database that is online. My goal is to be able to store a database online, and be able to edit it through my application and the web (the web part is done). all that remains is the application.
View 5 RepliesWe are trying to retrieve PDF files stored in a SQL Database. We want to display them on a web page. We are using VB and ASP Code within Visual Studio 2008. We have found snippets of code, but because we are new it does not make sense to us. We are looking for infomation on how to retrieve the PDF from the database and either display directly to a web page, or write the information to a Temporary PDF file we can delete later.
View 1 RepliesI am using visual basic express 2008 . and i am adding few rows to the database using some stored procedure. it is working fine. after adding the row i am displaying in a grid using dataset . fine.but when i close the program and reopen the program i can't see any rows in the database..
I don't know the problem.this is my code to create a procedure.
Code:
ALTER PROCEDURE AddNewStaff
@SName varchar(50),
@DOJ date,
[Code]....
how to calculate numeric values in a sql table in vb.net. For example I am developing a system which returns the required fields in GridView, I then copied the "NetValue" field in a list box. Is ther a way of calculating (adding them together) all the Net values listed in the list box? or is there a better way around it?
View 2 RepliesI have got a MySQL database stored on a remote server. I can user PHPMyAdmin to access the database and make changes to the table, i can also use a third party piece of software to do the same however when i try and access the database through my program it says that "Access denied for user 'lukefrost'@'%' to database 'PHCAdminSystem'". However it will allow me with the same logon credentials the other ways explained above. Can anyone help me with what the problem might be?
View 1 RepliesThe code for this is:
'IMAGE HANDLING
Dim bytes() As Byte = DS.Tables("Location").Rows(0).Item(4)
Dim ProductImage As Image = Image.FromStream(New System.IO.MemoryStream(bytes))
pic_ProductImageDisplay.Image = ProductImage
pic_ProductImageDisplay.Load()
The error occurs line 3 stating "ArgumentException was unhandled: Parameter is not valid."
I am using VB.NET 2008 and SQL Server 2008.My program runs the below query all the time for different values, but yesterday, this query was executed, and it set the other values correctly in myTbl, but it didn't set the "Status" column to 'C' as stated in the query.
update myTbl set [Floor] = 'a',FloorConf = 'C',Status = 'C' where [myUpdateCol] = 'a-1'
There is no error when executing the query.Why the "Status" column wasn't being set correctly, and what can cause this ?
m_cmdSQL = New SqlClient.SqlCommand
With m_cmdSQL
.Connection = adoCon
.CommandText = "update myTbl set [Floor] = 'a',FloorConf = 'C',Status = 'C' where [myUpdateCol] = 'a-1'
End With
m_cmdSQL.ExecuteNonQuery()
i have 31 PAIRS of radio buttons Yes or No in a web form which will insert the value of radion buttons or text of radio buttons in a single table of 31 columns in SQL server. I grouped each pair of radio button (Y and N). How can I retrieve the selected radio button value of the group and insert it into MS sql server database table using one insert command in VB.Net?
View 2 RepliesI have developed a VB .net application which uses SQL CE as its database engine. It works great so far. I recently added a section to remove unwanted reports which are stored in the database. The app correctly pulls ReportIDs from the table, which the user can select. The program will then delete the records based on the ReportID from the database. I know this records because, for testing purposes, message boxes inform the user of how many records where collected.
Dim SQLDeleteData As String = "DELETE FROM ReportData WHERE (TableID = @ID)"
Dim Con As New SqlCeConnection(DataBaseCon)
Dim DeleteData As New SqlCeCommand(SQLDeleteData, Con)
Dim ReportDelete As Integer = -1
DeleteData.Parameters.Add("@ID", SqlDbType.Int).Value = CInt(ListView1.SelectedItems(0).Text)
noOfDeleted = DeleteData.ExecuteNonQuery
MsgBox("Records Data Deleted " & noOfDeleted)
When the form refreshes to show the user the possible ReportID's, the list no longer contains the recently deleted ReportID. Now this is where I am getting confused. When I go through the server explorer and look at the database there, in the appropriate tables the data still exists. Through the server explorer new query builder, I can still create a select statement to allow me to view the data I just deleted. Does the server explorer create some type of local cache that replicates the database in someway? Are there really two copies of the database somewhere?
How to retrieve the particular column row to the text box?
I mean how to display it in textbox?
The column has got different rows.
The code I wrote in vb net is :
cmd = New SqlCommand("select ida from Issue where aname='" + TextBox3.Text + "'", con)
In the above line I compare the textbox3 data in the table.And if the data matches then it should display the ida that matches with aname row to textbox4.