Clever Geek Handbook

Handling ASP Backlinks from Javascript Widget

I am trying to create a small data driven widget that is populated with data from a database on the fly. I can load it initially just fine, but when the ASP DropDownMenu index is changed, the widget returns 404.

It could be a sign of how I am using Javascript, or how I am using ASP. I honestly don't know for sure.

Javascript: http://pastebin.com/f127d6b84
ASP: http://pastebin.com/f38c73708
VB.NET codebehind: http://pastebin.com/f7881a903

0


source to share


2 answers


If the postback returns 404, I would look at the url you are posting the postback to.



http://webwidgetstest.reeceandnichols.com/rDeskWidgetMLSt.aspx?agentname=jendene
+1


source


Also your widget has some security issues, namely SQL Injection.

Dim SelectString As String = "select ListingNumber, ListingSearchHitCount, ListingDetailHitCount, VirtualTourHitCount from FNIS.dbo.ListingHitCountCurrent, RAN.dbo.Heartland_Residential, where Heartland_Residential.LIST_AGENT_1_ID = '" and Request ("" FNIS.dbo.ListingHitCountCurrent.ListingNumber and Heartland_Residential.Status = 'A' "



This embedded SQL statement does not parameterize the Request field ("agent name").

0


source






More articles:


All Articles