How does the SQL injection from the “Bobby Tables” XKCD comic work?

It drops the students table. The original code in the school’s program probably looks something like This is the naive way to add text input into a query, and is very bad, as you will see. After the values from the first name, middle name textbox FNMName.Text (which is Robert’); DROP TABLE STUDENTS; –) and the last name textbox LName.Text (let’s … Read more

What is jQuery Unobtrusive Validation?

Brad Wilson has a couple great articles on unobtrusive validation and unobtrusive ajax.It is also shown very nicely in this Pluralsight video in the section on ” AJAX and JavaScript”. Basically, it is simply Javascript validation that doesn’t pollute your source code with its own validation code. This is done by making use of data- attributes in HTML.

How can I check if a string is a valid number?

2nd October 2020: note that many bare-bones approaches are fraught with subtle bugs (eg. whitespace, implicit partial parsing, radix, coercion of arrays etc.) that many of the answers here fail to take into account. The following implementation might work for you, but note that it does not cater for number separators other than the decimal … Read more

Validate date in dd/mm/yyyy format using JQuery Validate

You don’t need the date validator. It doesn’t support dd/mm/yyyy format, and that’s why you are getting “Please enter a valid date” message for input like 13/01/2014. You already have the dateITA validator, which uses dd/mm/yyyy format as you need. Just like the date validator, your code for dateGreaterThan and dateLessThan calls new Date for … Read more

An invalid form control with name=” is not focusable

This issue occurs on Chrome if a form field fails validation, but due to the respective invalid control not being focusable the browser’s attempt to display the message “Please fill out this field” next to it fails as well. A form control may not be focusable at the time validation is triggered for several reasons. The two … Read more