Clarification on IIS reported sql-injection exploits
My post will not get as much press as Slashdot , but here is some postings from sources at MS, including Bill Staples on the SQL Injection attacks that help clarify things. http://blogs.technet.com/msrc/archive/2008/04/25/questions-about-web-server-attacks.aspx http://blogs.iis.net/bills/archive/20......
Hanselminutes Podcast 109 - ASP.NET Dynamic Data with Scott Hunter
My one-hundred-and-ninth podcast is up . Recorded at the Microsoft MVP Summit, this show is about the new ASP.NET Dynamic Data subsystem that's being added to ASP.NET. I sit down with Scott Hunter , a Program Manager for ASP.NET (everyone in the division is required to be named Scott, BTW ;) ) ......
Interesting Finds: 2008.04.26
.NET 47 ASP.NET MVC Resources to Rock Your Development New Version of Functional Programming Tutorial Understanding when to use a Finalizer in your .NET class Web What Happened to Operation Aborted? Exceptional Performance Worksheet Other A Great XPath Query Tool ......
Refresh the UpdatePanel using JavaScript Code
(It's the post I wrote one year ago in my previous blog which has been cancelled now.) Lots of customers asked me that how to refresh the UpdatePanel - it actually is to raise an async postback using JavaScript code. The feature is quite important in some scenarios but unfortunately, ASP.NET AJAX ......
SQL Injection Attacks on IIS Web Servers
There have been conflicting reports about SQL Server injection attacks and a possible new IIS vulnerability.
This is not related to a new IIS or SQL or ASP.NET vulnerability
A bot is scanning the Web trying SQL Server injections
Of course, it is finding a lot of poorly designed non secured pa......
The Ninja of Dependency Injectors --- Ninject
Recently I am been following Rob Conery as he explores Test Driven Development using the ASP.NET MVC framework. Rob is using a style of development known as Test First Development or Red - Green - Refactor. The timing of these articles was actually nice as I was exploring the use of the MVC framewo......
Upcoming blog posts
I have been inspired by Rob Conery's blog posts on his journey down the TDD path, I decided there were a few blog series that I want to do myself. So in the near future I will be writing a few series of posts that will cover: Using TypeMock from a beginners perspective Using Ninject in an ASP.NET M......
Where should the ASP.NET team release stuff?
One of the things I love about working on the ASP.NET team is that the team is very focused on getting customer feedback. One of the ways we do this we need to ship bits early and often. While I think this is great, it does present some challenges in terms of helping customers find the ......
All Hail King Nerd!
Jason Follas has done it again! He has trumped
all of our feeble geeky efforts to firmly establish himself as the reigning "King
Nerd." Over the years, Jason repeatedly has proven his worthiness. Here are a few
highlights.
Built his own Donkey Kong machine. N......
Anatomy of a "Small" Software Design Change
File this one away for the next time your boss comes in and asks, Yeaaah, I’m going to need you to make that little change to the code. It’ll only take you a couple hours, right? Software has this deceptive property in which some changes that seem quite big and challenging to the layman end up bein......
CodeSnip: How to make use of parameterized cursor in Oracle
Often it is convenient to pass a given set of values as input parameter to a cursor. It is very useful where nested cursors are used. Parameterizing the cursor makes it more usable and avoids the limitation of hard coding values in where the clause. In this code snippet, Deepankar examines this tec......
SQLAuthority News - Download Microsoft Office Visio 2007 Professional SQL Server Add-In
Visio Infrastructure for SQL Servers is a tool which is meant for IT administrators who require constant interactions with the users for the installations of the SQL server in any IT infrastructure. Visio Infrastructure for SQL Servers is a tool which is meant for IT administrators who require cons......
Updated ASP.NET Dynamic Data Bits Posted
We just posted some updated bits and samples for ASP.NET Dynamic Data... I encourage you to go pick them up and let us know what you think... Some cool new stuff in this release: Visual Studio Integration is much cleaner Now supports "pretty" URLs http://products/details/1 instead of http......
Using LINQ to SQL makes life easier. An introduction of LINQ to SQL.
LINQ to SQL came out with 3.5 and I am still amazed that many people accomplished to stay away from that simple technology. When you ask them, they've heard about but they are not sure how everything works together. Instead of looking it up to learn to see if there is something that may improve......
(Mis)Adventures with AdventureWorks
After many centuries (seemingly) of using Northwind as our sample database for examples in the code, we gradually moved over to using AdventureWorks. Among other reasons, we thought it would be handy to work with a database that was invented since the advent of the Web and that includes some URLs h......
SQL SERVER - Converting Subqueries to Joins
There are always more than one way to do one thing in any programming languages. In SQL Server there are always more than one way to achieve same result set. It is quite often I see that developers write subqueries in place of joins or joins in place subqueries.I recommend to read my previous artic......
SQL Server 2005 datetime validation
This expression validates most legal dates for a SQL Server 2005 datetime format. It includes checking for leap years. (Written for a default U.S. install, not sure what results would be on versions for different regions)
For double digit dates, 00 is considered to be the year 2000, so leap years ......
Working with XML Data Using LINQ, a TreeView, and a ListView :: Displaying Data
With more and more data being stored in XML, web applications today commonly need some way to view and edit the data stored in an XML file from a web
page interface. If the XML data is relatively "flat" and tabular in nature, we can use data Web controls like the DataGrid, GridView, and Repeater......
Orlando 2008 DevConnections Talks
I'm in Orlando this week speaking at the DevConnections conference on 3 different topics. It's my personal favorite as far as conferences go and features a lot of cool technologies, people and events. This week I'm covering custom ASP.NET AJAX controls, building N-Layer applications ......
SQL SERVER - 2008 - Update Resolving Conflict Between SQL Server 2005 and SQL Server 2008
I have been receiving many complains where user has installed SQL Server 2008 and when trying to install SQL Server 2005 after that installation never completed. Well, Microsoft has provided solution for this issue. Download the patch and install it first and then try to install SQL Server 2005 and......
SQL SERVER - Identifiers As Valid Object Names
Previous I wrote blog post about SQL SERVER - Explanation and Example Four Part Name. It was explaining the new feature of SQL Server 2005 of Schema. Few days ago I received email from Chi-Ho, Min of Taiwan, he suggested that he was successfully able to use column without completely specifying all ......
SQL SERVER - Is Cursor Database Object or Datatype
It is commonly believed that cursor are Database Objects. I have always given the definition of cursor as SQL Server cursors are database objects used to manipulate data in a set on a row-by-row basis.Just a few days ago - Imran one of the active reader of blog asked me question if cursor is databa......
SQL SERVER - Generate Foreign Key Scripts For Database
Regular reader of SQLAuthority.com blog Madhaiyan Seenivasan has send email with one very interesting script. This script generates all the foreign key addition script for your database. Many times there are situations where one need to drop all the foreign key and add them back. This SQL Script ca......
ASP.NET MVC Source Refresh Preview
We recently opened up a new ASP.NET CodePlex Project that we will be using to provide previews (with buildable source code) for several upcoming ASP.NET features and releases. Last month we used it to publish the first drop of the ASP.NET MVC source code. This first drop included the so......
Examining ASP.NET's Membership, Roles, and Profile - Part 10
The Membership system automatically tracks the last
date and time each user's account has been accessed. With the SqlMembershipProvider, this information is
stored in the aspnet_Users database table in a datetime column named LastActivityDate. This
column is automatically updated to the cu......
SQL SERVER - 2008 - Row Constructors - Load Temp Tables From Stored Procedures
While playing with SQL Server 2008 I found new feature of “Row Constructors”, where I can load temp table from stored procedure directly.Look at the following SQL where I have to use OpenQuery from server to itself creating loopback server and execute stored procedure and insert into temp table.INS......
ASP.NET Dynamic Data Preview disponible
Il y a quelques mois, est sorti la preview des extensions 3.5 d'ASP.NET contenant un lot de nouvelles fonctionnalités qui seront délivrées plus tard cette année (ASP.NET AJAX Improvements, ASP.NET MVC, ASP.NET Silverlight Support, et ASP.NET Dynamic Data compris). Cette preview......
Eliminate Duplicates in a Group By Query
I had someone ask me this question today about a query where he wanted to get a max value along with the ID and Date of the record. However, the varying Date values were causing “duplicates” (as you would expect). He only wanted the first instance he came across. In SQL 2000 I......
Liens du 11 avril: ASP.NET, ASP.NET AJAX, ASP.NET MVC, Visual Studio et Silverlight
Voici l’article le plus récent dans ma série Listes de liens. Visitez aussi ma page Astuces, trucs et tutoriels ASP.NET et ma page Tutoriels Silverlight pour des liens vers des articles populaires que j’ai écrits dans le passé. ASP.NET Plus de tutoriels su......
Sessionless MonoRail Controllers
I saw this post on the Castle Users mailing list and thought it was interesting and I wanted to post it. By default, MonoRail controllers assume that ASP.NET session state is enabled. If you disable ASP.NET's session state inside web.config, you'll get an exception when MonoRail tries to proc......
SQL Server Data Services via cURL
I just noticed a really cool article on using Microsoft's new SQL Server Data Services which explains how to use cURL at the command line to talk to the SSDS RESTful interface.What's cURL?If you've never heard of cURL, it is similar to wget in that it allows you to make HTTP requests of any web ser......
Ajax.NET and IIS 7 Integrated Mode
As there are some questions on how to run Ajax.NET on IIS 7 (i.e. Windows Vista) in integrated mode instead of classic mode here are two things you have to check: First check that the IIS_ISSRS group has access to your Web site folder. If you are using the default folder for Web sites with Visu......
Dynamic Queries and LINQ Expressions
I'm revisiting some code in my LINQ to SQL business objects layer that I've written about before. The problem I ran into and described was that I had a class with generic business object behavior that needs to look up values based on a database field that wouldn't be known until runtime.
The concr......
Pushing Data to a Silverlight Client with Sockets: Part II
In Part 1 of this two part series on socket support in Silverlight 2 I discussed how a server could be created to listen for clients using classes in the System.Net.Sockets namespace. In that post the TcpListener class was used to listen for client connections and the client stream was access......
AJAX UpdatePanel - "Statefull" Control Update Trigger
I get an obscene amount of email. Since I've been working with the Developer Community at Microsoft for 7 years, my email address has been spread around a bit. I get about 1000 email a day. Very often from developers who what me to write code for them :) I generally don't have time to do th......
Linq to SQL: Use a ListView to implement grouping
I finally completed my DotNetNuke Linq to SQL tutorial. The final installment shows you how to create a ListView with grouping. It also is pageable. As an extra bonus it remembers which sections are expanded even when you page forward and page back. All this in a surprisingly small amount of code.......
Thank you North Carolina!
I had a great trip in North Carolina… In addition to a fun time with my extended family, I had a chance to take two days “off” vacation and visit with three Fortune 500 companies, give a Framework Design Guidelines training class to the Visual Studio North Carolina office and spea......
April 11th Links: ASP.NET, ASP.NET AJAX, ASP.NET MVC, Visual Studio, Silverlight
Here is the latest in my link-listing series . Also check out my ASP.NET Tips, Tricks and Tutorials page and Silverlight Tutorials page for links to popular articles I've done myself in the past. ASP.NET More ASP.NET Security Tutorials : The last three of Scott Mitchell's excellent AS......
Developer Summit Sessions on Silverlight, MVC, FaceBook, and Work ethics amongst software developers
On Wednesday I presented a session on troubleshooting ASP.NET production issues at Developer Summit 2008 in Sweden. It offered a lot of good presentations as usual, and here is a summary of the ones I went to along with some links related to the topics they were covering. I will write a separate po......
FIX: The query designer in Visual Studio .NET 2003 adds random characters to the end of an SQL statement
949203 ... FIX: The query designer in Visual Studio .NET 2003 adds random characters to the end of an SQL statementThis RSS feed provided by kbAlerz.com.Visit kbAlertz.com to
subscribe. It's 100% free and you'll be able to recieve e-mail or RSS updates for the technologies you pick
from the M......
My presentation on Troubleshooting ASP.NET production issues at Developer Summit 2008
The purpose of my presentation was to show some common pitfalls and of course to show off windbg and sos just to show people that if you have a hang, perf issue, memory leak or crash, there are tools out there that can help you figure out the root cause so that you don't have to resort to guess......
Pushing Data to a Silverlight Client with Sockets: Part I
Silverlight 2 has built-in support for sockets which creates some interesting possibilities. If you've ever worked on a client-side application that needed to receive up-to-date data then you're probably used to solving the problem by polling. With polling the client contacts the server......
Putting ASP.NET Dynamic Data into Context
There's a lot of folks excited about ASP.NET MVC as an option for creating ASP.NET websites. As I say in my ASP.NET MVC talks, however, I figure about 5% of people creating ASP.NET sites will care about ASP.NET MVC. I say that for a number of reasons. ASP.NET MVC is a big paradigm shift. It ena......
SCREENCAST: Exposing/Consuming RSS/ATOM using WCF 3.5 & Silverlight 2
In this screencast, I show you how easy it is to expose RSS and Atom feeds using the new Web Programming Model (REST) features, classes in the new System.ServiceModel.Syndication namespace, and LINQ to SQL in the .NET Framework 3.5. Then, you will see how you can use classes from the System.S......
ASP.NET Dynamic Data Preview Available
A few months ago we released an ASP.NET 3.5 Extensions Preview that contained a bunch of new features that will be shipping later this year (including ASP.NET AJAX Improvements, ASP.NET MVC, ASP.NET Silverlight Support, and ASP.NET Dynamic Data). The ASP.NET Dynamic Data support within that p......
Silverlight 2 Networking Options
I've been spending my nights working on a new book covering Silverlight 2 and have been focusing on the new networking features that are available in the System.Net and related namespaces. Silverlight's great at animating objects, performing transformations and collecting data with all of th......
Creating an Online Boggle Solver :: Solving the Puzzle
My family enjoys playing games and one of our favorites is Boggle, an addictive word game where players attempt to find as many words in a 4x4 grid of
letters. At the end of a game, players are left wondering whether there were any unearthed words. To answer this question once and for all, I cre......
Free Source Code - mojoPortal 2.2.5.2 Released
I'm happy to announce the release of version 2.2.5.2 of mojoPortal,
an award winning open source content management system and web application framework.mojoPortal is implemented in C# and runs on Windows with .NET 2.0 or on Linux using Mono 1.2.6 or newermojoPortal works with MS SQL 2000/2005,......
SQL SERVER - 2005 - Connection Strings For .NET
SQL Native Client ODBC Driver Standard securityDriver={SQL Native Client};Server=myServerAddress;Database=myDataBase;Uid=myUsername;Pwd=myPassword;Trusted ConnectionDriver={SQL Native Client};Server=myServerAddress;Database=myDataBase;Trusted_Connection=yes;Connecting to an SQL Server instanceDrive......
My Latest Silverlight Articles
Over the past few months I've been writing articles for the .NET Insight insight newsletter covering various ASP.NET AJAX concepts. You can read those article here. I've wrapped up that series and have started writing about Silverlight 1.0. Each week a new article will be publishe......