How to avoid aiding the development of malicious code I see an uncomfortable number of questions asking for info that could easily be put to malicious use. You can probe the OP to discover their intent, and you get replies that come in one of two flavors.
I have come to realize that trying to discover their intent is a waste time. Not because of the reactions, but their intent is really irrelevant to the matter at hand. Security. Posting code of any nature in a public forum that can be abused for malicious purposes is outright reckless. I wish could provide the help they request, but I don't know most of those programming tricks anyway. I would discourage anyone from publicly posting code that could be perverted no matter what the person asking for it claims. Their claims take a back seat to common sense. Anyone can read the post, people. Don't post anything that could become part of someone's malicious software in public.
A open conversation thread on this topic exists at[url]...
I would like to ask our community to take a brief moment to consider the outcome of answering a question before doing so. Sometimes a question can lead down a path to examples of how to create malware applications, and that is something we want to try to avoid. There are a few key things we can watch out for which would often indicates a question about malicious code intent.
First, watch for requests to do network communications that violate one or more RFC documents (e.g. How do I spoof my IP address?). Second, watch for requests on automating other websites - a quick check of the other site's AUP or TOU will typically tell you if the automation is permitted. Third, watch for requests that appear to want to harvest data from the web, without following the typical procedures for a web crawler (bot).[code]...
I have forms with multiple pictureboxes, labels, etc. They are all numbered, for example, pb_QL01 to pb_QL99, or lb_Main01 to lb_Main29. In the old days, I could reference the properties of these in code using, for example, Me.Controls(a).Image where 'a' was the string of the name of the object (e.g. "pb_QL23"). So, I get it that you can't do this anymore in QB2008 (too bad). I need to set the properties in loops. [Code]
but it takes a long time to cycle through all of my controls, and there are some properties that will not work (like mycontrol.image), image not an option. So, is there an easy way to get this done? I don't want to add the controls in code, since they already exist on the form. If I have to use collections (which I'd prefer not to if there is an analogous way to the old way of passing the name of the control in code with a string, but if I need to, how do I get this to work.
I am creating an application that will compile code at runtime and then execute that code. My worry is this: Someone might make a malicious script, that deletes files for example. Is there an option in VB.NET that prevents Kill statements and other file operations from executing? Maybe a kind of 'security' feature? If not, is there another approach that I should take?
how can i avoid data duplicate in the database?i mean if i add in the fields that has been already save it will still save.i don't know how to query or filter not to add the same info.i have the code below but it still save if i input same as already in the database.[code]i want is to query first before it add the data to avoid same info.
I have a dropdownlist with a list of options which is subject to change (e.g. 'active users'). Another data source may include historical data, but I wish to use the 'active users' dropdownlist against it. This means an ArgumentOutOfRangeException will be thrown so I want to catch that, and insert the required entry into the dropdownlist on the fly.
I've seen a few suggestions that point towards overriding the ondatabinding event within the dropdownlist, I've managed to do this insofar as I can create a static listitem for example "Value does not exist" and bypass the exception. However I wish rather than "Value does not exist" so show the actual value which we were attempting to find in the ddl.
ondatabinding is passed a standard EventArgs item which doesn't offer much to go on, I can see there is a DataListItemEventArgs class - is this in any way associated with a dropdownlist? I tried directcast on the EventArgs but that didn't work.
So is there any way - within ondatabinding - of finding out the value we're attempting to set on the dll, which causes the ArgumentOutOfRangeException?
I don't THINK it should be a credentials issue.I'm reading the credentials out of a database and using the same ones whether the program is running on my development machine (Win7) or my production server (Win 2008 R2).[code]
I would really like to have some icons for my applications, I cant seem to find any suitable on the net so I was wondering if there was any way I could change the file type of a jpg to ico or is there any free software for creating my own icons.
I am trying to minimize my code writing. I have DBLayer base class that selects, inserts, updates and deletes records from database. I need only fieldlist and table name from each derived classes to perform the actions. I have defined static tablename, fieldnames in derived class. Currently I am defining next static functions in derived class for GeneralSelect [which selects all records], GeneralInsert[Which inserts a records], GeneralUpdate[Which updates records as per given id] and GeneralDelete[Which deletes a record of the given id]. The parameter and all functioning are same just the differece is the table name and fieldnames.
One DBLayer Class that performs database actions Class DBLayer Public shared function Query(byval SQL as string) as dataTable
[code]....
... same goes for all other table objects... If I have 20 database tables i have to write getdata method in all 20 class changing only the tablename so i would like to get ride of it. So in order to get ride of it what do i need to do?
i have this line of code to catch an exception if a letter is inputed, or if it is out of rang as a number, but I have added WHEN to avoid catching numberical data. Now how can I use an exception error to use it before my case statement in order to avoid running the code twice, cause once the case codes has been through it will run a clear txtbox which is already taken care by the try catch, don`t if thats clear for you but i understand it. here is the code in parts...
Try 'Integer Levels: intLvls is egual to the assigned text box, the first one from 'the top, this line of code allow the user input to be captured into a variable.
I am writing a code-generator that will need to output some miniscule portions of VB.NET code, and since this is a code generator that will add user-provider code, I'd like to try to avoid type name conflicts with types or names in the user-provided code.
In C#, I can prefix types with global:: to make sure they're matched from the global type namespace hierarchy, rather than some local name, but is there a similar system for VB.NET? ie. this: global::System.String
Is there a function or something that is built into VB.NET so that when I save a text field (of a user's input), malicious code isn't being executed in the process.
I'm suspicious my spouse is cheating. In the past few months he has systematically locked me out of all of his social media accounts shortly after getting a job with a group of female secretaries that travels for a week at a time. He has been dodging or non-communicative when confronted about this.url...
The only way to avoid interaction with antispyware is to create it myself.I understand that copying text or something into an open notepad session or the clipboard is out of the question; however I'm pretty sure that I could create a (fairly) simple script that does the following:[code]I know this is extremely inneficient but this is the most covert way i can think of, a simple wscript that runs on startup and creates these .txt files in an important looking place (windows/config/system/logs/win32 - example)
I found a VB WebCam program from Africa on this site [url]
However one of the instructions is to "add a reference to WebcamControl.dll ". I've researched that .dll and it appears to be able to "Silently record users' sensitive personal information, identity details and business files, make traces of the users' online activities and browser habits and then transmit them to insecure remote servers".
I haven't downloaded this .dll or found a location to download it. Am I correct in assuming this program was designed with malicious intent?
I have a site developed using vb.net 2.0. It has a URL of like [URL]..I want to avoid any malicious requests using other URLs. I have tried to implement using the code below and would like to kick such requests out of the site on the page load. How can I achieve this?
If (urlParams.Contains("http") And Not urlParams.Contains(Request.ServerVariables("HTTP_HOST").ToString)) Then Would like to kick out of the site here. End If
I'm trying to make a 2D platform game and I'm pretty inexperienced at programming. I've coded the player to move left and right and jump, but I can't figure out how to prevent multiple jumps while the player is in the air. Anyone know how to do this?
This sounds like the stupidest question ever!!! BUT what is the code for adding a number to a label with the label's value being calculated dependent on user input?! So you choose 2 numbers to multiply, If a box is ticked then you add 10 to the label. I've got everything else I just can't work out the structure/code for this little bit.
I have the below code which will send xml to me website when Button3 is clicked:
Private Sub Button3_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Button3.Click If RichTextBox2.Text = "Please enter the XML Data" Then
I hope you can tell me what is wrong with my code. I have tried this code below, And when the my requirements are met. the messageBox keeps loading, for as long as my requirements are met. (I get hundreds of messageBox's). I am using Visual Basic 2010.
Basicaly when a progressBar1 reaches a percentage I have Stated I what a MessageBox to show a message. and because the message is long would I add vbNewLine where I have Underlined.[code...]
I am working on adding some ajax controls for either a hover menu or popup control. But when I do I get the following code.<System.Web.Services.WebMethodAttribute()> <System.Web.Script.Services.ScriptMethodAttribute()> _ Public Shared Function GetDynamicContent(ByVal contextKey As System.String) As System.String
End Function I am trying to find out exactly how to code against this function. I am at a bit of a loss with regard to the WebMethodAttribute, and ScriptMethodAttribute, one would think I could delete one or the other. I watched numerous videos by MS and others and this code behind is not covered.
If someone could point to some tutorials, MSDN, white papers, or web sites where this is used, or in a project or something,
I am trying to create and remove a series of controls programatically. The user will have a numeric updown to pick a number. The program will then create a bunch of duplicate controls based on whatever number they pick on the fly.
Public Class Form1 Private Sub NumericUpDown1_ValueChanged(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles numberDebts.ValueChanged[code].....
The creation part works just fine.As the number is toggled upward a new label is created.However whenever I remove labels it acts very strangely.The first time I bring it down it works just fine. Then the next 3 do nothing but the 4th removes another line.I can also toggle back and forth and it will eventually remove the label. So for example.
Starts with 1 selected - 1 label visible (1) Change to 2 - 2 labels visible (1-2) Change to 3 - 3 labels visible (1-3)[code]....
If I toggle back and forth between 2 and 3 eventually label 4 will go away.I want only 1- my numeric up down value to be displayed and have everything else after that removed.
I am creating an application install program, but one of the main things i cannot get working is the combobox, this is a drop down list of all my applications that i have put in there. I was wondering if there was a way you could tell the combobox to look at a directory or share and list the names of files within it? So, for example i could place 5 programs inside a share or directory then when i run the program and the click the drop down combo the 5 programs are listed and then i can click and install this program. Also then if i add/remove any programs it also removes it from the combo list.
I have made it so that as soon as the form opens it puts an icon in the tray and when you right click the icon it comes up with a contextmenustrip. in the form I have put a button and a textbox. when you click the button, it creates a new item in the contextmenustrip What I wanted to do was add a peice of code to this new item, is this possible?
i am in runtime mode and have a form open. I do some calculations on it and based on those i generate some lines of VB code (concatenated and saved in a local variable). Is there a VB command that i can use that will take this code and INSERT it into another form?
i could copy the code, exit runtime, go to design mode and paste it into the form myself but because i want to do this for several subs for a lot of forms then it will become very time consuming.
I want to custom code to a report. For example, I have a text box, txtABC on the report. I want to assign it a value from variable, when report runs. How to do it.
