Recently Viewed...
To help you navigate to pages you most recently visited, select from the links below.
Product Forums
Sharepoint Forums
Dynamic Forms Demonstrations
Newsletter
Page Tags
DNN Modules
SnowCovered Top Sellers

Opt In Email 4.0

'Relationship Building' and 'Communication' are two essential nuts and bolts for a business to prosper. This module allows you to bridge both of these and easily generate continuous awareness of your web site, products and services. Your prospects and customers will greatly appreciate this featur

Live Content v1.6.1 :: Web 2.0

Live Content uses Web 2.0 approach to provide a Rich User Interface and streamlines content presentation by overlaying content on current page. Overlay images, videos, audio, text/html content, flash, dotnetnuke modules, and external content. Experience the demo...

XMod 5.1

Version 5 of the perennial best-selling tool for creating data-based solutions in DNN without custom programming. This version focuses on greater flexibility, expandability, and ease-of-use.

Open-DocumentLibrary v3.0

Powerful, Ajax Enabled, Easy to Use. Document Management has never been better. Open-DocumentLibrary allows DotNetNuke users to share and manage documents in a flexible, intelligent way, offering granular control over Folder and Document access.

Ultra Video Gallery 2.4

Ultra Video Gallery is a brother product of Ultra Media Gallery, UVG allows you to add videos in various format and automatically convert them to flv format, you also can add videos from embed code and play them in our integrated flash video player.

Gloss // ALL COLORS! skin // XML Flash // W3C CSS XHTML1.0

Gloss is the first ALL COLORS! skin, featuring a powerful XML-based flash and being 100% W3C CSS XHMTL1.0 compliant. Tune it yourself on the fly, changing colors, backgrounds, containers, text color and size, width and more! Brilliant!Available for DNN4 and DNN5

Active Forums

The award winning discussion forum and community solution for DotNetNuke is now even better. When you need to build the best community site, you need the best module, Active Forums!

Minimalist by Evan O'Neil - ALL NEW !

ALL NEW ! - Minimalist includes skin packs in 12 great colors. Each color has Flat, Gradient and Glass versions. Feature rich XML Flash header, perfect for just about any purpose. 9 Different menu options in each skin pack; 3 horizontal menus, 3 vertical menus and 3 all-new Twin level menus . . .

Document Exchange 5

Edit documents directly on your server. The premier document management solution for DotNetNuke (DNN). Index contents of documents. Share documents across your portal and avoid duplicates. Revised and flexible UI. Extensible architecture.

Ultra Media Gallery 5.4

Ultra Media Gallery is the most popular photo gallery and media gallery solution for DotNetNuke, UMG offers 10 different flash player to browse your gallery with completely different user interface experience.
    |   Register   |   Wednesday, January 07, 2009   
Data Springs Product Forums...
Forums > Product Discussion - DotNetNuke Modules > Dynamic Forms
Subject: Sql driven combo boxes
Prev Next
You are not authorized to post a reply.

Author Messages
Tim
Posts:10
wading in the water
wading in the water
10/18/2006 11:34 AM  

I have multiple combo boxes that must update based on the selection in the first box.

 

The first box works fine. However I can not get the second box to work.

 

Here is my code for the first box:

select COUNTY_NAME as QuestionOption from IA_COUNTY

 

My second box takes the selected county and pulls a list of cities in that county.

 

Second box code:

select  NAME as QuestionOption, TOWN_ID as QuestionOptionValue from IA_TOWNS where COUNTY=@county

 

No matter what I do the second box doesn't populate.

 

The shortname for my first box is county.

The shortname for the second box is city.

 

Hopefully someone can help me with this.

After I get this box working I have to have city populate two

drop downs called Street and Intersecting Street.


 
Chad
Posts:2384
river guide
river guide
10/18/2006 11:56 AM  
Tim,

HI. The feature or ability to populate dropdownlists via SQL does exist, and the new enhancements to be able to set default values, show questions, hide questions, based on the response from another question also exists... But the ability to use the response from other questions within the SQL Query does not yet exist. You would need to setup a seperate question for each city in your case it sounds like. Our biggest concern with this is SQL Injection and security for SQL injection. A user could enter in things within a textbox and the value would then be parsed/changed and this is a major security concern. For example, if the user entered a value within a textbox such as (there are many but..) '' For example:

In your query:
select NAME as QuestionOption, TOWN_ID as QuestionOptionValue from IA_TOWNS where COUNTY=@county

IF a user were to enter in a value for a field:'';DROP TABLE USERS
select NAME as QuestionOption, TOWN_ID as QuestionOptionValue from IA_TOWNS where COUNTY='';DROP TABLE USERS

The ; would end the statement and execute the next statement. To some degree you can fix this within the query but we feel that this is a major security risk as we look at this enhancement. One thing we might do is enable it only for dropdownlists and not text fields. Since you as the admin setup the dropdownlist you should be ok. There are also a number of text we can remove from any query such as ;, DROP, DELETE, which will also help with security.

-Chad
Chad
Posts:2384
river guide
river guide
10/20/2006 11:43 AM  
Tim, since the most recent release with this added enhancement (ability to populate SQL Options for dropdownlist from response to previous dropdownlist response) fix your issues?
You are not authorized to post a reply.
Forums > Product Discussion - DotNetNuke Modules > Dynamic Forms > Sql driven combo boxes


ActiveForums 3.7

Copyright 2005 - 2009 by Data Springs, Inc.
Terms Of Use | Privacy Statement