in the textbox when we pass the text within "< " bracket then it shows the error like
A potentially dangerous Request.Form value was detected from the client (grouplink$txtAddPerson="
I am injecting HttpContextBase into a caching class. HttpContextBase is registered as PerWebRequest. I interact with the caching class on each web request and this works fine, but I also need to initialise the cache at application start.
I understand that PerWebRequest does not work in Application_Start though:
http://stackoverflow.com/questions/2670717/castle-perrequestlifestyle-not-recognize
What is the best way to resolve this in my situation?
Blind SQL Injection
Severity: High
Test Type: Application
Vulnerable URL:
Remediation Tasks: Filter out hazardous characters from user input
Variant 1 of 2 [ID=12654]
The following changes were applied to the original request:
• Set parameter 'nm's value to 'Demography'%20and%20'foobar'='foobar'
Hello,
Can somebody help me with this - I need some tips or code to connect to wsdl service, send XML request and than print response on client side. I only have primer written in ASP.NET and need PHP alternative:
function doXMLRequest(Xmltext)
Set oSOAP = Server.CreateObject("MSSOAP.SoapClient30")
oSOAP.ClientProperty("ServerHTTPRequest") = True
oSOAP.mssoapinit sys_xmlservice, "", "", ""
oSOAP.ConnectorProperty("Timeout") = 600000
myXMLResponse = oSOAP.XMLReq(XmlText)
doXMLRequest=myXMLResponse
set oSOAP=nothing
end function
Thanks in advance! :)
I'm trying to update body of all sms on Android device with
getContentResolver().update(Uri.parse("content://sms"), values.....
query but after request done, also updates message creation/received time.
How i can update message but leave old message date?
I have tried send to update query
ContentValues values = sms values oject;
values.put("body", updatedBody);
values.put("date", oldValues.getAsString("date"));
but it does not help.
I keep getting an error:
A first chance exception of type 'System.Threading.ThreadAbortException' occurred in mscorlib.dll An exception of type 'System.Threading.ThreadAbortException' occurred in mscorlib.dll but was not handled in user code The thread '' (0x27ee4) has exited with code 0 (0x0).
I was told it was related to this:
protected void Button1_Click(object sender, EventArgs e)
{
Response.Redirect("Results.aspx?Keywords=" + searchString.Text);
}
I figured it may help to include my complete code. The code above is the only C# code on my first asp page.
That code relates to this code on this page. It is also the only C# code I have on my second page. I am simply just trying to pass a keyword from a search form to this block of code:
if (Request.QueryString["Keywords"] != null){
string keywords = Request.QueryString["Keywords"];
string myAppID = "HIDDEN";
var xml = XDocument.Load("http://svcs.ebay.com/services/search/FindingService/v1?OPERATION-NAME=findItemsByKeywords&SERVICE-VERSION=1.0.0&SECURITY-APPNAME=" + myAppID + "&RESPONSE-DATA-FORMAT=XML&REST-PAYLOAD&keywords=" + keywords + "&paginationInput.entriesPerPage=5");
XNamespace ns = "http://www.ebay.com/marketplace/search/v1/services";
var titles = from item in xml.Root.Descendants(ns + "title")
select new{
title = xml.Descendants(ns + "title").Select (x => x.Value),
};
foreach (var item in titles){
Label1.Text += item;
}
}
This block of code calls the keyword value and uses it in an api to perform a search. The code of the xml(api) formats like this:
<findItemsByKeywordsResponse xmlns="http://www.ebay.com/marketplace/search/v1/services">
<searchReslut count="5">
<item>
<title></title>
</item>
<item>
<title></title>
</item>
<item>
<title></title>
</item>
Why am I getting this error how do you fix it?
I've got a template for a partial that I'd like to use and I'm wondering if it's possible to just render the thing without needing to send a mock request to a controller. I'm never going to need to render this to an AJAX call, so it seems silly to set up a controller and action, not to mention the security issues with making a private partial open to the world.
Is there a way to PHP make asynchronous http calls? I don't care about the response, I just want to do something like file_get_contents(), but not wait on the request to finish before executing the rest of my code. This would be super useful for setting off "events" of a sort in my application, or triggering long processes.
Any ideas?
I have a page that performs an Ajax request that replaces a div every second.
This div also has hyperlinks in it.
If the user tries to click one of the hyperlinks, it will work, but if they move the cursor over the link, wait for a second without moving the cursor, the hyperlink no longer has the "hover" pseudostyle and if they click at the wrong time, the link doesn't work.
Is there a way to update the div without causing this, or to restore the "mouse over" state of the link?
I'm troubleshooting a java app where XML is sent between two systems using HTTP POST and a servlet. I suspect that the problem is that the XML is growing way to big. Is it possible that this is the problem? Is there a limit?
When it doesn't work, the request.getParameter("message") on the consumer side will return null.
Both apps are running on tomcat
Hi,
Just started my first MVC 2.0 .net application. And I set up some default pages like:
/Loa/Register
/Loa/About
But when I request for /Loa/sdfqsdf (random string) I get the "The resource cannot be found." error, how can I redirect this non-existing action to a default action?
Like an "action not found" default action?
thx!
I have created a windows service.
When I install msi, this service goes to local services, but doesn't start. When i try to start it, it gives this error:
Windows could not start this service on Local computer.
Error 1053: The service didnot respond to the start or control request in a timely fashion.
One more thing is, that when I install msi as a service, it goes to local services, but doesn't start and gives warning that you don't have privileges to start this service.
Hi,
I seem to not be able to find implementation from the common Ajax libraries (JQuery, mootools, prototypejs...) that would allow the operation of parsing the window.location.href for request parameter. I would expect something like:
$P{"param1"} == "param1_value"
Am I missing something?
p.s. The web does contains implementation examples for such operations
Here is my test: I access a servlet to get the JVM to load (absorb the loading request). Then i access a JSP that has <%= 5+7 %> in it and nothing else. The first access to this JSP uses 350ms of CPU time and has latency of 200ms. Subsequent accesses only have latency and cpu time of about 20ms.
Why does the first access to the jsp after starting the servlet container take longer?
I am developing a jQtouch app and each request done via ajax creates a new div in the document for the loaded content. Only a single div is shown at any one time.
How many div's can I have before the app starts getting unresponsive and slow?
Anyone have any ideas on this?
I'm working on a Facebook app, and I'm trying to get a friends list similar to Farmville 2.
They have a "friends who like games" list. My first thought is, I can get a list of all friends, then for each friend, see if they like any pages with type == "GAMES/TOYS". But ideally, I would like to get the list in one query (not by making one graph API or FQL request per friend).
Is this possible, and if so, how?
Does the original data type of the username string in a call to FormsAuthentication.SetAuthCookie(...) make any difference with regards to security or code maintainability?
As I understand it, the cookie is encrypted and used to identify a user on each request. I'm curious whether it should affect the design of the primary key on my Users table in my database, eg. Guid vs int or a unique username string.
This might seem like an odd request but I'd like to use jQuery's Selectable tool to only select one item at a time and I'd like it to show me a value I'll have within each tag. At the very least I want the contents of that selection. Has anyone tried to do this? For some reason these little things seem to not be all that easily findable in their API for it.
i have a table "request" with 4 columns namely:
1.recId :long primary key
2.interactionId:long
3.requestedBy:boolean
4.requestedType:boolean
and data is as follows:
VALUES
(185,455699,0,5),
(186,455746,0,1),
(187,455746,1,1),
(188,455752,0,1),
(189,455753,0,1),
(190,455753,1,1),
(191,455754,1,1)
i want a query to fetch all the rows where interactionId is same and having requestedBy both 1 and 0 values and requestType=1;
regards,
Nihar
I have a MySql Master server replicating to three Slaves.
A legacy website is performing load-balanced Reads from the Slaves.
Is there a method of identifying from the website which of the Slaves is serving a Read request?
I'd prefer a function that I can use to return a server name or ip address as part of the SELECT, but any reasonable method will do.
Thank you in advance.
Hi folks,
I need to setup temporary User models for each visitors, where the visitors are obviously tied by session data.
I might not be aware of it, but does Django support attaching data to Anonymous users?
The only way, I am currently aware of, is to use the session dictionary part of the request object.
Help would be very much appreciated!
I'm using enterprise library for logging web page events. Because page is load balanced I have to store logs in database on different server (requirement). Sadly, I found storing around 20 entries per page request is very slow (adds additional ~10s). Can anybody explain why this happens and how to fix it.
P.S. I'm using default pooling settings in logging database connection string.
I have a PHP script that uses standard POST variables like $_POST['email']. When a form on a remote server sends a POST request to my script, it doesn't receive the POST data at all. It's not in $_REQUEST either.
Thanks for any help!
Is it to possible to capitalize the letters in a Textfield as they are being typed by the user in Java?
E.g. The user would type 'hello' and 'HELLO' would appear in the Textfield.
(Odd request and I don't like the idea either.)
Hi all,
In my Java servlet code, I want to be able to programatically write to the jetty access log. I am aware that jetty will automatically log every incoming HTTP request to the access log. However, my servlet needs to occasionally append it's own line to the access log. Has anyone here done something similar?
Thanks!