CProgrammingTrends Home Page About iEntry Article Archive News WebProWorld Forums Jayde iEntry Contact Advertise Downloads iEntry
06.02.04

Banish Security Blunders with an Error-prevention Process
Security can be a complex and often overwhelming issue. To ensure application security, not only must you prevent hackers from entering the system, but you need code in place that safeguards security should those preventive measures fail. There is no room for error. You can anticipate and prevent hundreds of security vulnerabilities, but if you overlook just one vulnerability, a hacker can wreak total havoc on your system.

These are the three most commonly exploited internal software weaknesses:

- Dangerously-constructed SQL statements (for programs that interact with a database).

- Buffer overflows (for C and C++).

- Uncaught runtime exceptions (for Java, as well as .NET-based languages such as managed C and C++).
Read The Whole Article
Accessing Excel Spreadsheet in C#
Most of the time you will use SQL, Oracle, Access or some other database to store data. But it is possible to use Excel spreadsheet much like a database to stored data. This article and code will explain how to do this in C#.

Spreadsheet Setup

The first step to using an Excel spreadsheet as a place to store data and possibley update/delete/add data, is to put the data in the spreadsheet. Most of the time you will have column headers for you data and this will be the field names used when writing queries. After populating the spreadsheet with data (you may already have a spreadsheet you want to use, which is fine) the next step is to Define the Names in the workbook. A Name in the Excel workbook is a section of data that will be given a name and a range. The name that you give it will be much like a table name in a database. Here is how to create a name:
Read The Whole Article


Elegance and Other Design Ideals
Bjarne Stroustrup talks with Bill Venners about many aspects of software design, including growing small applications into larger ones, avoiding class distinctions between designers and users, the dangers of premature generalization, and the essence of elegance.

Bjarne Stroustrup is the designer and original implementer of C++. He is the author of numerous papers and several books, including The C++ Programming Language (Addison-Wesley, 1985-2000) and The Design and Evolution of C++ (Addison-Wesley, 1994). He took an active role in the creation of the ANSI/ISO standard for C++ and continues to work on the maintenance and revision of that standard. He is currently the College of Engineering Chair in Computer Science Professor at Texas A&M University.
Read The Whole Article


C# Tip: Making Windows Forms Pop Under
Pop-under windows are windows that, when created, are immediately shuttled behind all other windows in the z-order. In fact, many times you don't notice them until you've closed or minimized all other open windows. Basically, they're seen as a less obtrusive means of advertising than pop-ups that require immediate (and usually resentful) attention from the user. With the lines between browser-based Web applications and traditional Windows applications being blurred every day, it should come as no surprise that Windows programmers are looking for ways to emulate the (infamous) pop-under effect utilized by Web marketers. Therefore, in this week's article, we'll look at the steps required to pull of this stunt...er...task.
Read The Whole Article


Object-Oriented Programming in C#
This chapter discusses object-oriented programming in C#. OOP is what C# is all about; in this chapter, we're going to specialize on this topic. You may well be an accomplished OOP programmer already, in which case it's still a good idea to scan this chapter. OOP in C# has several differences from all other object-oriented languages.

If you're an OOP programmer, you know that object-oriented programming centers on creating types. The simple type int lets you declare integer variables, and in the same way, you can create your own classes, which contain not only data like the simple types, but methods as well. Just as you create integer variables with the int type, so you create objects from classes. An integer variable is an instance of the int type, just like an object is an instance of a class.
Read The Whole Article


Handling The Network Errors
To fully handle all network exceptions that the program might generate, you must monitor calls to Create(), GetResponse(), and GetResponseStream(). Each type of potential error is described in this article.

The Create() method defined by WebRequest can generate three exceptions. If the protocol specified by the URI prefix is not supported, then NotSupportedException is thrown. If the URI format is invalid, UriFormatException is thrown. It can also throw an ArgumentNullException if it is called with a null reference, but this is not an error generated by networking.
Read The Whole Article




Read this Newsletter at: http://www.cprogrammingtrends.com/2004/0602.html
Free Newsletters
Part of the iEntry Network
over 4 million subscribers
CProg.Trends
SecurityConfig
ITProNews

Send me relevant info on products and services.


 

 

 

 

From the Forum:
web form
Hi all !

Who can help me out here. I am helping create a website and I would like to incorporate a form where people can select various boxes and the results are sent by mail to the administrator.

Contact me for an exemple.
Read the Post

 

 

-- CProgrammingTrends is an iEntry, Inc. publication --
iEntry, Inc. 880 Corporate Drive, Lexington, KY 40503
2004 iEntry, Inc.  All Rights Reserved  Privacy Policy  Legal


archives | advertising info | news headlines | free newsletters | comments/feedback | submit article



DevNewz.com SecurityProNews.com