New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDevelopment and...Development and...Building ExtensionsBuilding ExtensionsModulesModulesHow to use URL REWRITING in QuerystringHow to use URL REWRITING in Querystring
Previous
 
Next
New Post
9/4/2012 8:45 AM
 

Hi Guys,

                  In my application using querystring for Dynamic module Development  as follows: "Response.Redirect("Dept.aspx?department=electriacl");  In address bar value passing as follows : "department=electriacl" .how to encrpt or rewrite this url  for security purpose.please help me out.

 

 
New Post
9/8/2012 12:16 AM
 
I can just give you a couple of general directions since your question is not very clearly stated. Sorry if I am off from what you are looking for.

1. If you are afraid of SQL injection you might consider an alternative to passing a string value in the QueryString and pass an integer instead. You could have a table for example to store your departments with at least an ID and a DepartmentName columns. Then your redirect could be "departmentid=1" and in your code you will typecast the QueryString to an integer and would know that departmentid=1 is actually "electrical".

2. You could look into how to write stored procedures. They are secure and ideally all your database access will be done through stored procedures. Then you can use a string variable and pass it to the stored procedure as a parameter.

3. Never print the QueryString parameter directly on the page like this.
lblMessage.Text = Request.QueryString["message"].ToString();
If you need to do this you should sanitize the string by using a regular expression or any other means you know of.

Hristo Evtimov
www.packflash.com
 
Previous
 
Next
HomeHomeDevelopment and...Development and...Building ExtensionsBuilding ExtensionsModulesModulesHow to use URL REWRITING in QuerystringHow to use URL REWRITING in Querystring


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.