September 2012
-
Configuring a Web Server to Allow Excel File Creation via the Interop.Excel Namespace
In an earlier article I covered how to generate Excel reports on the fly using the Interop.Excel Namespace. This is a really handy technique that also gives you full control over the minutia of the document you are creating. However the catch in using this technique is that you will need to update the configuration of…
-
ASP.NET Choosing Parameters.Add or Parameters.AddWithValue
If you are adding parameters to a SqlCommand object then you can use either Parameters.Add or Parameters.AddWithValue. The Parameters.Add syntax requires you to explicitly specify the DataType of the parameter you are passing, while the Parameters.AddWithValue syntax implicitly attempts to convert the parameters you pass in. When choosing which method you want to use, you should be aware that…
-
Notes on Securing your Web Application Database Calls (Part 1)
A common part of writing a Web-based application in any programming language is setting up a SQL query and adding parameters to it. Although most of us have been doing this in one form or another for many years now, there are serious consequences involved that every developer should be aware of. I’m planning this…