Jesus H Christ - this takes the idea of SQL injection to a whole new level.
Don't - just don't. Rethink your entire architecture. On Wed, Sep 8, 2010 at 3:50 AM, Rifky Rafeethu <[email protected]> wrote: > what i mean by Selection Formula is The TSQL Select Command. i cannot show > the Select Command to the user because it will reveal the Table Name and > all. > what is the best way to do the my requirement in a simplest way? i mean the > popup window with a list in it where user pick one. > Rgds > Rifky > > On Wed, Sep 8, 2010 at 12:03 AM, Cerebrus <[email protected]> wrote: >> >> No. Querystrings are always visible by design. You could create a >> popup window with the address bar hidden, but the title bar and link >> itself would show the URL. >> >> BTW, what exactly do you mean by "selection formula" ? >> >> On Sep 7, 1:40 pm, Rifky Rafeethu <[email protected]> wrote: >> > Hi All, >> > i'm doing a project in asp.net. in that i want to show a pop up form to >> > show >> > a list of items from which the user will select one. when the user click >> > the >> > select link, the pop up should close and the value should be set to a >> > text >> > box. >> > >> > i planed to create the popup as a seperate aspx page with a gridview so >> > that >> > i can use the same page to get different type of lists (such as address >> > Country, Items, charges etc). i cannot hardcode the selection formula in >> > this case. so is there any way that i can send the selection foumula >> > through >> > the query string WITHOUT showing it to the user in the title. (showing >> > it in >> > title will be a security issue isn't it) >> > >> > OR >> > >> > is there any alternate efficient way to achive the PopUp select option. >> > >> > pls help me on this as i'm stuck at this point. >> > >> > Rgds >> > Rifky >
