Great Ideas. Always Flowing.

We are not happy until you are happy. Client satisfaction guaranteed. Whatever your needs and requirements, we have the skills and resources for the job!

Quick login...

Or... now make it easy with Facebook Integration
Connect via Facebook

Top Sellers

Dynamic Registration 4.0

Frustrated over the lack of customization for your user's registration fields? Dynamically setup your DNN Portal with custom registration fields, layout, questions, and other core integration options......

Ultra Video Gallery 4

Ultra Video Gallery is a brother product of Ultra Media Gallery, UVG allows you to upload videos in various format and automatically encode them to flv or H264 format, you also can add videos from internet or record live videos from your webcam.

XMod Pro 2.7 - Forms and Views for Databases

Build high performance, completely customizable data-entry forms and views driven by your DNN and external databases. New built-in tools make it a snap to quickly create data entry forms, data views, and even database tables. Plus, add your own HTML, CSS, Javascript, SQL commands, stored procedures,

Smith Shopping Cart v3.88

The most advanced DotNetNuke shopping cart on the planet. Easy to use e-Commerce, Secure Shopping Cart Software and SEO friendly. B2C / B2B Ecommerce Sites.

Event Calendar and Registration 4.0

One stop solution for events calendar and events registration! FREE DOWNLOAD is available now!

DNN Modules

Forums > Product Discussion - DotNetNuke Modules > Dynamic Forms
Initial SQL Query Binding With My Own Query String - possible?
Last Post 05-19-2010 07:14 AM by Chad Nash. 3 Replies.
AddThis - Bookmarking and Sharing Button Printer Friendly
  •  
  •  
  •  
  •  
  •  
Sort:
PrevPrev NextNext
You are not authorized to post a reply.
Author Messages
Ray DixonUser is Offline
skipping stones
skipping stones
Posts:7
Avatar

--
05-18-2010 08:26 AM

    I've looked through the forums and it appears that when using query string parameters with initial SQL query binding, you are limited to query string names of DSParam1, DSParam2, and DSParam3 and that they are case-sensitive. I want to use a query string name that make more sense in the context of the form I'm loading. Specifically, I'd like to use ID, id, or fbid. Is this possible? If so, how? If not, why?

    I searched the Dynamic Forms User Guide and there is no mention at all of the DSParam* parameters. Why aren't these documented when they are fixed? I spent a great deal of time last night trying to figure out why my SQL binding wasn't working and it looks like it is because I'm limited to these query string parameter names, which seem arbitrary. If there is a valid reason for this limitation, it should at the very least be documented in the user guide.
    Chad NashUser is Offline
    Posts:5260
    Avatar

    --
    05-18-2010 04:40 PM
    Hi Ray,

    Thanks for your post... Once we implemented this the primary reason we used these static variables is because of risks to SQL Injection... Any data passed via these parameters are parsed for specific SQL Injection routines. Since we released this however I do believe we plan on future releases having the ability to use other alternate query string parameters and so forth. Always a risk level that we review when it comes to parsing SQL with textbox fields, querystring fields etc...

    I agree with your comments on the user guide. I think that these features might have been added in between releases to support the ability to offer SQL Binding and the ability to utilize these in SQL queries and somehow it got missed. Actually I reviewed an older user guide and they were in there so I think somehow they got taken out with the latest release. Either way I apologize for the confusion and will make sure these are added for future releases.

    Thanks for your understanding.

    -Chad
    Ray DixonUser is Offline
    skipping stones
    skipping stones
    Posts:7
    Avatar

    --
    05-18-2010 06:33 PM

    Thanks for the explanation and background, Chad. Is there a work around? For instance, is there a way I could have a field with a short name of ID, set its value using a query string, and then use SQL queries to set the default values of other fields?
    Chad NashUser is Offline
    Posts:5260
    Avatar

    --
    05-19-2010 07:14 AM
    Hi Ray,

    I think right now you would have to use the reserve words until we add further features to allow for this. I know once you are past the SQL binding you can (so for SQL Validation, SQL Events, etc...) but I don't know about SQL defaults and SQL binding that loads directly. You could always pass the same.. ID=5&DSParam1=5 and therefore pass it in twice? Once for the field you want and once for the queries that need to see it as DSParam1 etc... Are you limited because the URL on the other end can't change easily or because you need more then a couple parameters to bring in?

    Also - One limitation we discovered whenever we did open up the feature for other querystrings variables is performance. If we have to loop through each and every querystring property for each and every field/SQL I think there might be a delay. At least if we looped through all form keys... Maybe not just querystring variables but we also have options for session variables $(DSSession1) etc... and it might be a bit much to loop through every session variable for queries etc...

    Thanks,


    -Chad
    You are not authorized to post a reply.

    Forums > Product Discussion - DotNetNuke Modules > Dynamic Forms
     
     

    Join our mailing list...

    Get current news and events the easy way
    Subscribe Me

    Recent Blogs...

     
    Copyright 2005 - 2011 by Data Springs, Inc.
     
  • film izle
  • 720 izle
  • film
  • sinema izle
  • film makinesi
  • T�rk�e dublaj film
  • film izle
  • film izle
  • baglan film izle
  • sinema izle
  • 1080 film izle
  • film mercegi