Preventing The JavaScript Injections?
Mar 16, 2009
What's the best way to prevent javascript injections in a VB.NET Web Application? Is there some way of disabling javascript on the pageload event?Recently, part of the security plan for our vb.net product was to simply disable buttons on the page that weren't available to the specific user. However, I informed the guy who thought of the idea that typing
javascript:alert(document.getElementById("Button1").disabled="")
in the address bar would re-enable the button.
Update:Aside from validating user input, how can I protect the website from being toyed with from the address bar?
View 5 Replies
ADVERTISEMENT
Oct 25, 2010
I have this code
UPDATE OPENQUERY (db,'SELECT * FROM table WHERE ref = ''"+ Ref +"'' AND bookno = ''"+ Session("number") +"'' ')
How would I prevent SQL Injections on this?
[code].....
View 8 Replies
Dec 29, 2009
Is there a way to prevent the VB .NET editor from saving the project whenever IT LIKES TO ? It very annoying ; it so stupid that it saves things that I don't want to and that I didn't ask it to do .If I add a form and then close the editor , when I open the project again , that form is still there though I DIDN'T save it !If I change a declaration from Friend to Public and close the editor without saving , then when I open again the project , my modified code remains modified , though I DID NOT save it !Today I realized that if I delete some controls of a form and then close the Editor , then when I reopen it , the controls are missing for good ! It saved that modification by itself !
View 3 Replies
Feb 26, 2012
I've completed an assignment that requires me to search through two listboxes for a particular number.If the number is found, the text on a label changes to a dollar amount, otherwise a message box is displayed letting the user know that the requested number cannot be found.It works well enough, searches through the listboxes, finds the number, and displays the message box when it can't be found.However, the message box shows repeatedly up to five times.After the user clicks "OK" on the fifth appearance, the program crashed and displays the follow message."Invalid Argument = Value of '5' is not valid for 'index'.Parameter name: index."I don't know what's causing this, or how to fix it.I do use the index as a counter at a portion of the program...but I'm not sure where I went wrong with it.[code]Also there are five items in the second listbox...probably has something to do with it.
View 2 Replies
Sep 20, 2010
I designed an application in vb.net 2005 while using Administrator account on vista.After compiling the application it start requesting for elevation during startup.I will like to prevent this, because the customer is complaning
View 2 Replies
Sep 27, 2011
i have develop small project in vb.net and also created setup for it with license key but when i install the project in C drive it can run on another machine with simply copy it how to prevent this piracy
View 5 Replies
Sep 24, 2009
I have two froms when one from is opend it should not be minimized when mouse clicked outside the from like the message box in vb.net
View 1 Replies
Jun 28, 2010
I have 2 forms. Form1 and Form2 When the user calls for a new record to be created, Form2 shows modally centered in form1. I have disabled the control box and need to stop the form from being moved by the mouse. I do not see (Movable) in the properties list.
View 3 Replies
Nov 15, 2011
I have a program, I have published it, and I have been actually using it in my PC. Whenever it encounters an error, the JIT debugger comes out. How do I prevent it from popping up using try...catch blocks, or is there any other ways or code on how to do this?
View 3 Replies
Dec 9, 2009
<VB.NET 2008>I created a MDI frame and I try to open a Winform by clicking menu.I do not want to allow opening same winform which is already opened by user.How do I check whether the winform is already opened or not?
View 5 Replies
Dec 12, 2010
I am trying to prevent the user from activating a Print command for the content displayed in a WebBrowser. If the user hits Ctr P, the print dialog appears. I would think I have to trap this, but am not sure how to do this. There is no KeyPress event in the browser, and using the keypress event on the Form does not appear to trigger when text is typed into browser.
View 3 Replies
May 3, 2012
The original post provoked more responses than I anticipated. Therefore I have tried to draw them together with this post.There appear to be several schools of thought on this issue.One holds that I should not release time-bombed software because it is illegal.
Suppose I include code that often randomly checks if the user is registered and then puts up a message and shuts down the program if a check fails - rather like an improved nag screen. Would this be regarded as illegal?One holds that I should not worry about it because the pirates wouldn't buy my software anyway.
Maybe, but there's no fun in that.One holds that it is a waste of time because it is impossible to protect 100%.Maybe, but once again no fun.My view was that an honest user buying from my site would get a genuine copy. If a dishonest user got a harmful copy and lost the lot then I couldn't care less.Reed Kimble pointed out the existence of "fake sellers" who could cause harm by selling honest users a dishonest copy.This is a problem that I had not thought of and it poses a dilemma.
If I do include protection, then how do I distinguish between and honest user and a dishonest one? They will both be caught by the protection.should I not include any protection at all so that the honest user doesn't lose out, and just accept that the dishonest one gets away with it?Or nail the pirate and accept the honest loser as collateral damage?
[code]....
View 8 Replies
Jan 6, 2009
Does anyone have any experience in writing VB.Net apps that control Internet usage? I have a friend that needs to have her office computers monitored in order to prevent the users from playing on the internet. I'm not sure what the best approach to this issue is.
View 9 Replies
Dec 26, 2010
I'm using the HTMLAgilityPack to parse HTML pages. However at some point I try to parse wrong data (in this specific case an image), which ofc fails for obvious reasons. Code:
How to check whether the content is 'parse-able' before trying to parse it to prevent the error? For now it is an image which makes an error popup however I think it might be just anything which isn't (x)html.
View 2 Replies
Mar 19, 2010
This code is driving me nuts. I have no idea what I could be missing that is preventing a record from being added to the Database. Here is what I have
[Code]...
View 7 Replies
Sep 19, 2009
We have a construction company and I am designing a program in Visual basics for it. This program is intended to be installed only on the computers in our office ( its not going to be distributed ). There is always a risk that one of our employees will take our software and distribute it . Is there anyway to prevent this. If not how can we make this as difficult as possible?
View 1 Replies
Mar 29, 2009
need help please on how to prevent multiple instances of a form at runtime in vb so tha when a user clicks a button to load a form it loads an if the user clicks the same button again whilst the other instance of the form is running it doesnt open a new one but insted sets focus on the currently running form.br2
View 4 Replies
Apr 16, 2010
I have code my pictureboxes so that I can move them around my form, however i can move a picturebox under another picturebox. Basically What i would like to be able to do it for a picturebox not to be able to go underneath another picturebox and thus dissapear.For example my picturebox 1 when i move it can go under my picturebox2, I would like it to touch the edges of picturebox2 at most but not go underneath it. I am using visual basic 2008.
View 3 Replies
Apr 15, 2010
Ok I am trying to make it so that if words are found within the 'Textbox1.text' they will be delete or remove or completely not allowed to even be entered into the text box. I have found a code on these forums from a previous post which has worked for me
View 6 Replies
May 5, 2009
I have assigned a column of values from an Excel file into a dataset.I am using the following code to check if the column header is empty:[code] However for some reason even if I have an empty column header in the Excel spreadsheet, it is automatically assigned a value within the dataset. For example if I blank out the third column header in Excel spreadsheet, the dataset assigns it as "F3" as its column header which is making the above code ineffective. Can anyone tell me how to prevent the dataset to automatically assign a value to its column header.
View 4 Replies
Mar 9, 2010
I have a win app with some buttons. Whenever I run the app, the buttons move away from their default location. Is there a way to fix the button in one location.
View 2 Replies
Feb 4, 2010
Preventing a program opening twice?
View 4 Replies
Jul 6, 2009
VS 2008 Preventing characters being entered
View 1 Replies
Aug 16, 2010
I often face the following problem : when I have a form with lots of controls on it (100 , 200 etc) and I change the name of a control , the IDE goes slow for a few seconds . This is very annoying when I have to change the name to a lot of controls . I believe this is happening because the IDE checks the forms , the code etc to see if there any problem after (re)naming the controls . Of course this is welcome because it prevents a lot of problems , but at the same time it creates some serious problems as well . Thus , I wonder , is there any way I could prevent the IDE from checking all those things in order not to reduce it's speed ? Of course I am talking temporarily . I believe that what I gain by letting it check after every name-changing , I also gain it if I only let it check once (at the end of the name-changing process) .
View 14 Replies
May 12, 2012
I have a RectangleShape on a form and certain events that invoke the Paint event for the Shape.But it redraws unwantedly when I drag the form to the taskbar or minimize and then maximize it or press the alt or tab key while the form has focus.I do not want this to happen. I have made sure that no other event fires the RectangleShape's Paint() event.
View 5 Replies
Dec 15, 2011
I am developing a WinForm application using VB.NET (I am fluent in C# as well, so post in whatever language) and have run into some trouble. I have an image on my form that I would like to expand when clicked on. I have all that logic set, but I want that when it expands, the user has to click on an 'X' in the upper right corner of the PictureBox to close the expanded image. While the image is being displayed, I don't want the user to be able to interact with the rest of the UI on the form.
Basically I need something along the lines of (pardon me for switching to HTML but I know this works there) creating a div that covers the whole screen, making it opaque, putting another div on top of that, and then putting the image and the 'X' button on top of that. I have tried using opaque forms (didn't work), and panels with a transparent backcolor (didn't work either). I've resorted to taking a screenshot of the form, setting it as the image of a PictureBox, and putting the PictureBox on top of that. However, that seems like way to much overkill.
My current layout is MainForm -> Dynamically create new Form and add it to Main Form -> Add PictureBox to Dynamic Form and set its image to be a screenshot of MainForm -> Add a PictureBox on top of that PictureBox and set its image to the expanded image that I want
View 1 Replies
Nov 3, 2011
I am writing a program to automatically recognize new data log files in a specific folder and proceed to process them in a routine I scripted. I have the program working fine for when I manually place files in there, but I know there will be an issue when my data logger is working because it will create files and then write to them for approximately 12 hours.[code]Which works fine, but how can I modify that or what should I use to force the program to wait until the file is done being modified? Say force it to wait at least 1 minute after the last modification?
View 1 Replies
Jun 10, 2011
I have a textbox, and it's set to multiline, so a user can enter a few sentences. The problem is, if the user hits the enter button while in the textbox, it's starting a new line. This data is being saved as a text file, and it's causing problems when the text file is loaded back into the app, causing load failures.
I'd like to completely make the enter key useless when the textbox has focus. Or, if they hit enter, it tabs over to another button.
Here is some code I used to make the enter button behave more like a tab-
Private Sub txtCallNotes_KeyPress(ByVal sender As Object, ByVal e As System.Windows.Forms.KeyEventArgs)
If e.KeyCode = Keys.Enter Then
Me.btnSubmit.Focus()
End If
End Sub
The problem is, the enter button still does a carriage return, causing a new line.
In the properties, Accept Return is False.
View 4 Replies
Oct 28, 2011
I am using a CheckBoxList in a VB.NET web project. The elements are pulled from a DataSource which is populated elsewhere in the system.
The problem is, if someone put in some raw HTML, the CheckBoxList seems to render it rather than assume plain text.
In this screenshot, for example, I entered <a href="http://www.google.com" onmouseover="alert('123');">hover here</a> so now whenever you hover over that CheckBox, an alert window pops up. This seems like a potential for XSS and I would like to disable it altogether.
I have tried googling and searching SO for someway to disable HTML rendering such as this, but haven't found anything relevant, so my apologies if this already has been answered elsewhere.
View 1 Replies
Mar 9, 2010
I m implementing control based security in my application. where i m saving controlname (per form) in database, which are to be restricted. So far I have implemented the security and restricted control get disabled.
Now what i want to do is that i have to prevent that for those controls the "control.Enable" property should not change. how can i restrict that.
I have achieved the functionality by canceling enable=true property in "Invalidated" event of the control. but this is not some generic way. I have to map this event for all controls in all forms :(.
What i really want is that as all my froms are derived from same parent which implements the security. so the parent should some how restrict enable property from changing.
So,HOW CAN I PREVENT CONTROL enable property from changing in their parent class?
View 8 Replies
