Anyone know about www.nihaorr1.com/1.js?

The db that supports our companies ecommerce is filling up with this url. We seem to be victims of a sql injection attack. Is anyone else experiencing? How are you resolving? We just happened to see this data…are there other adverse affects to resources other than data?

Any shared experience would be helpful!

Basic authentication vs. NT Challenge and Response

When you password protect a web page using Internet Service Manager, you have the option of choosing either Basic authentication or NT Challenge and Response (aka: Integrated Windows authentication). The difference in the two methods is in the way the username and passwords are transmitted over the Internet. NT Challenge and Response encrypts the password so malicious snoopers can not intercept and use the information. Basic authentication sends the password as plain text. While it would be great to use NT Challenge and Response for all secured web pages, the only web browsers that currently support this protocol are Internet Explorer 3 and higher. If you might have users with other web browsers, your only choice is Basic authentication.

If you would like to have a secure website take advantage of using encrypted usernames and passwords but still want to be compatible with Netscape browsers, you can use Basic authentication over SSL. Using Secure Sockets will encrypt the user name and password but at the same time will still let Netscape browsers use your site, the best of both worlds

Updating Only Changed Rows in the GridView Control

Matt Berseth wrote a very interesting article on “Bulk Inserting Data Using the ListView Control”. The idea is to give the user an Excel like interface where they can edit the rows with custom data and finally click the update button to persist the data in the database. More…

Loading a control in a Login Control may give a NullReferenceException

If you try to use a Login Control and change the contents of the control when someone logs in, you have to be really careful how you do it. More…

Create Custom Route Constraints

In this tip, I show how you can create custom route constraints that prevent you from accessing a URL unless you are local and authenticated. More…

Silverlight and XAML Basics

In this second part to a three-part series that focuses on using XAML with Silverlight, you will learn how to use shapes and position elements. It is excerpted from chapter four of Essential Silverlight, written by Christian Wenz (O’Reilly, 2008; ISBN: 0596519982). More…

Convention Over Configuration

Emad Ibrahim kicks off a two-part series on how to create applications using ASP.NET MVC, jQuery, and AJAX. More…

Close and free up object references

While we’re on the topic of good coding techniques, I thought I would remind everyone to close and free up object references once they are done using them.

I tend to type in the commands to kill the object right after I create the object, and then start coding between them.

<%
Dim objConn, objRS
Set objConn = Server.CreateObject(“ADODB.Connection”)
objConn.ConnectionString = …
objConn.Open

Set objRS = objConn.Execute(“…”)

objRS.Close
Set objRS = Nothing

objConn.Close
Set objConn = Nothing
%>

Need a simple grid for ASP.NET Ajax?

A client grid control is probably the most requested control for the Ajax Control Toolkit. It will come eventually but if you need a simple grid control right now, DotNetSlackers’ Ajax Data Controls do a pretty good job. Their grid supports pagination, sorting, drag and drop of columns, in-place edition and is server-integrated. They also provide repeater types of controls but those are made a little more complex to use because of the lack of data binding. The whole thing is open-source. w00t!

Check it out:
http://dotnetslackers.com/projects/AjaxDataControls/GridView/Default.aspx

AJAX World: Building Great AJAX Applications from Scratch Using ASP.NET 3.5 and Visual Studio 2008

Come see a no-slides, code-only presentation that starts with a blank directory and builds a data-driven, AJAX enabled, ASP.NET web application from scratch that implements common AJAX patterns with the rich set of AJAX Control Toolkit, accesses data with LINQ, and implements standards-based styling and layout using CSS and clean HTML. Learn the new features of ASP.NET 3.5 and Microsoft Visual Studio 2008 and how they integrate together to provide the world’s most productive web development experience. This talk uses the 100% free .NET Framework and Visual Studio tools and the resulting application will work with all browsers, Safari, Firefox and of course IE.
Clicke to view more details………..