how to know a Request.Param value is numeric type or not?

  • Thread starter Thread starter 2003et
  • Start date Start date
2

2003et

How can I understand a Request.Params object's type?

I need this:
User enters www.domain.com/myfile.aspx?6
then myfile.aspx.cs use
"SELECT name FROM people WHERE id="+Request.Params[0];

so if the user enters the parameter as string instead of integer:
www.domain.com/myfile.aspx?test

the page fails!

How can I prevent this? I think I should analize the first param's type but
how?

Thanks in advance

E.T.
 
try
{
int id = int.Parse(Request.Params[0]);
// continue with your sql processing
}
catch
{
// show an error message
}

-Jason
 
oh right...

Thank you

Jason DeFontes said:
try
{
int id = int.Parse(Request.Params[0]);
// continue with your sql processing
}
catch
{
// show an error message
}

-Jason
How can I understand a Request.Params object's type?

I need this:
User enters www.domain.com/myfile.aspx?6
then myfile.aspx.cs use
"SELECT name FROM people WHERE id="+Request.Params[0];

so if the user enters the parameter as string instead of integer:
www.domain.com/myfile.aspx?test

the page fails!

How can I prevent this? I think I should analize the first param's type but
how?

Thanks in advance

E.T.
Click to expand...
Click to expand...
 
And if a user enters:
www.domain.com/myfile.aspx?1;DROP DATABASE master

the page will really fail. ;)


"SELECT name FROM people WHERE id="+Request.Params[0];
oh right...

Thank you

try
{
int id = int.Parse(Request.Params[0]);
// continue with your sql processing
}
catch
{
// show an error message
}

-Jason
How can I understand a Request.Params object's type?

I need this:
User enters www.domain.com/myfile.aspx?6
then myfile.aspx.cs use
"SELECT name FROM people WHERE id="+Request.Params[0];

so if the user enters the parameter as string instead of integer:
www.domain.com/myfile.aspx?test

the page fails!

How can I prevent this? I think I should analize the first param's type
Click to expand...
but
how?

Thanks in advance

E.T.
Click to expand...
Click to expand...
Click to expand...
 
Back
Top