ASP.NET

Code Reviewer Needed to help solve bug RSS

3 replies

Last post Nov 11, 2012 06:30 AM by Mikesdotnetting

‹ Previous Thread|Next Thread ›

- Reply
SuperRom

Member

179 Points

240 Posts

Code Reviewer Needed to help solve bug

Nov 10, 2012 02:59 PM|LINK

The code below (my Second post) shows createuser aspx, createuser vb.net, and web config. Please go over the cod to find any mistake that may be causing some of my users from not being able to complete the three stage sign up process. Thanks.
- Edited by SuperRom on Nov 10, 2012 03:00 PM
- Edited by SuperRom on Nov 10, 2012 10:40 PM
- Edited by SuperRom on Nov 11, 2012 05:06 AM
- Reply
Mikesdotnett...

All-Star

154818 Points

19853 Posts

Moderator
MVP

Re: Code Reviewer Needed to help solve bug

Nov 10, 2012 04:05 PM|LINK

Is this a paid job? If so, your post should have been made in the Jobs forum. Otherwise the point of these forums is to solve issues publicly. That can only happen if you post the problematic code.

Regards, Mike
Beginning ASP.NET Web Pages with WebMatrix | My Site | Twitter

SuperRom

Member

179 Points

240 Posts

Re: Code Reviewer Needed to help solve bug

Nov 10, 2012 10:41 PM|LINK

CREATE WIZARD ASPX

  <asp:CreateUserWizard ID="CreateUserWizard1" runat="server" CancelDestinationPageUrl="http://xxxxx.com"
                        OnCreatedUser="CreateUserWizard1_CreatedUser" EmailRegularExpression="\w+([-+.']\w+)*@\w+([-.]\w+)*\.\w+([-.]\w+)*"
                        EmailRegularExpressionErrorMessage="Your email address must be in a valid format."
                        DisableCreatedUser="False" DuplicateUserNameErrorMessage="Username already in use. Please use another. Thank you."
                        Height="91px" CssClass="CUW" DisplayCancelButton="True" DuplicateEmailErrorMessage="E-mail address entered is already is use. Please use another.
                        " Style="position: absolute; top: 9px; left: 10px; width: 426px; text-align: left">
                        <WizardSteps>
                            <asp:CreateUserWizardStep ID="CreateUserWizardStep1" runat="server">
                                <ContentTemplate>
                                    <table style="width: 425px; margin-left: 0px; text-align: left">


 

         </table>
                                </ContentTemplate>
                                <CustomNavigationTemplate>
                                    <table border="0" cellspacing="5" style="width: 100%; height: 40px;">
                                        <tr>
                                            <td>
                                                <asp:Button ID="createuser" runat="server" Enabled="true" CommandName="MoveNext"
                                                    Style="z-index: 1; left: 100px; top: 300px; position: absolute; height: 26px;
                                                    font-family: Verdana , Arial , Times New Roman, Sans-Serif; font-size: 13px;
                                                    font-style: italic; color: green; font-weight: bold; width: 110px;" Text="Second Step!"
                                                    TabIndex="13" ToolTip="No Email Address in Username!" />
                                            </td>
                                            <td>
                                                <asp:Button ID="Cancelusercreation" runat="server" CommandName="Cancel" Style="z-index: 1;
                                                    font-style: italic; color: #333333; font-weight: bold; font-family: Verdana , Arial , Times New Roman, Sans-Serif;
                                                    font-size: 13px; left: 225px; top: 300px; position: absolute; height: 26px; width: 100px;"
                                                    Text="Cancel" CausesValidation="False" NavigateUrl="http://xxxxxx.com"
                                                    TabIndex="14" />
                                            </td>
                                        </tr>
                                    </table>
                                </CustomNavigationTemplate>
                            </asp:CreateUserWizardStep>
                            <asp:CompleteWizardStep runat="server">
                            </asp:CompleteWizardStep>
                        </WizardSteps>
                    </asp:CreateUserWizard>








CREATE USER CODE BEHIND

        If Page.IsValid Then ' Meaning every box has been utitlized. Then perform task.

            Try

                txtuser = CType(CreateUserWizardStep1.ContentTemplateContainer.FindControl("Username"), TextBox)

                txtpass = CType(CreateUserWizardStep1.ContentTemplateContainer.FindControl("Password"), TextBox)

                txtpass.Text = txtpass.Text.Replace("'", "").Replace("'", "").Replace("""", "").ToLower

                txtemail = CType(CreateUserWizardStep1.ContentTemplateContainer.FindControl("Email"), TextBox)

                txtemail.Text = txtemail.Text.Replace("'", "").Replace("/", "").Replace("~", "").Replace("'", "").Replace("""", "")



                TUPass = txtpass.Text.Replace("'", "").Replace("'", "").Replace("""", "").ToLower

                TUName = txtuser.Text.ToString.Trim.Replace("'", "").Replace("/", "").Replace("~", "").Replace("""", "").Replace("'", "").Replace("""", "").Replace(":", "").Replace("(", "").Replace(")", "").Replace("+", "").Replace("%", "").Replace("*", "").Replace("^", "").Replace("&", "").Replace("#", "").ToLower

                TUemail = txtemail.Text.Replace("'", "").Replace("/", "").Replace("~", "").Replace("'", "").Replace("""", "")




                txtgender = CType(CreateUserWizardStep1.ContentTemplateContainer.FindControl("ddlIam"), DropDownList)
                txtseeking = CType(CreateUserWizardStep1.ContentTemplateContainer.FindControl("ddlseeking"), DropDownList)

                'DOB
                month = CType(CreateUserWizardStep1.ContentTemplateContainer.FindControl("ddlmonth"), DropDownList)
                day = CType(CreateUserWizardStep1.ContentTemplateContainer.FindControl("ddlday"), DropDownList)
                year = CType(CreateUserWizardStep1.ContentTemplateContainer.FindControl("ddlyear"), DropDownList)
                dob = month.SelectedValue.ToString.Trim + day.SelectedValue.ToString.Trim + year.SelectedItem.ToString.Trim



               
                Roles.AddUserToRole(TUName, "member") 'NEW HERE
                FormsAuthentication.SetAuthCookie(TUName, True) 'NEW HERE
                'User is logged in once they create an account
                CreateUserWizard1.LoginCreatedUser = True



            Catch ex As Exception


                'Get the username from the Createuserwizard1 oject control as string to be placed inside the member roles automatically
                Roles.AddUserToRole(TUName, "member") 'NEW HERE
                FormsAuthentication.SetAuthCookie(TUName, True) 'NEW HERE
                'User is logged in once they create an account
                CreateUserWizard1.LoginCreatedUser = True



                'Used to enter in the error into the sql table to analysis.
                Dim sqlex As String = ex.Message.ToString
                EnterintoSQLerrorTable(sqlex, "ContentTemps Error")



            End Try





            Dim currentdate As Date = Date.Today

            Dim Today As String = CStr(Date.Today.ToString("MM/dd/yyyy")).ToString.Replace("/", "")


            Dim trueage As String = ""


            Dim Ftoday As String = Right(Today, 4) 'Year


            Dim Mtoday As String = Left(Today, 2) 'Month

            Dim Stoday As String = Today.Substring((Today.Length - 1) - 5, 2) 'Day


            Dim ComToday As Integer = CInt(Ftoday + Mtoday + Stoday)

            Try

                Dim FDOB As String = Right(dob, 4) 'Year

                Dim MDOB As String = Left(dob, 2)
                If MDOB.Substring(0, 1) = "0" Then 'good

                    MDOB = Left(dob, 2) 'month
                Else

                    MDOB = "0" + Left(dob, 1) 'month
                End If



                Dim SDOB As String = dob.Substring((dob.Length - 1) - 5, 2) 'day

                Dim ComDOB As Integer

                ComDOB = CInt(FDOB + MDOB + SDOB)

                trueage = Left(CStr(ComToday - ComDOB), 2)


            Catch ex As Exception

                trueage = "30"

                'Used to enter in the error into the sql table to analysis.
                Dim sqlex As String = ex.Message.ToString
                EnterintoSQLerrorTable(sqlex, "Age on Profile")


            End Try




            '-------------------------------------------



            'Geographical
            Dim txtcountry As DropDownList = CType(CreateUserWizardStep1.ContentTemplateContainer.FindControl("ddlcountry"), DropDownList)
            Dim txtstate As DropDownList = CType(CreateUserWizardStep1.ContentTemplateContainer.FindControl("ddlstate"), DropDownList)
            Dim txtcity As TextBox = CType(CreateUserWizardStep1.ContentTemplateContainer.FindControl("txtcity"), TextBox)
            Dim txtzip As TextBox = CType(CreateUserWizardStep1.ContentTemplateContainer.FindControl("txtzip"), TextBox)

            Try

                Dim Profile As ProfileCommon = CType(ProfileCommon.Create(TUName.Trim, True), ProfileCommon)

                Profile.Initialize(TUName.ToString, True)
                Profile.Username = TUName
                Profile.PIforsearch.Gender = txtgender.SelectedValue.ToString.Trim
                Profile.PIforsearch.Seeking = txtseeking.SelectedValue.ToString.Trim
                Profile.PIforsearch.DOB = dob

                Profile.Birthday.Month = month.SelectedValue.ToString.Trim
                Profile.Birthday.Day = day.SelectedValue.ToString.Trim
                Profile.Birthday.Year = year.SelectedItem.ToString.Trim

                Profile.PIforsearch.Age = trueage
                Profile.PIforsearch.Country = txtcountry.SelectedValue.ToString.Trim
                Profile.PIforsearch.State = txtstate.SelectedValue.ToString.Trim
                Profile.PIforsearch.City = txtcity.Text.ToString.Trim.Replace("'", "").Replace(".", "").Replace("~", "").Replace("'", "").Replace("""", "").Replace(":", "").Replace("(", "").Replace(")", "").Replace("+", "").Replace("%", "").Replace("*", "").Replace("^", "").Replace("&", "")
                Profile.PIforsearch.Zip = txtzip.Text.ToString.Trim.Replace("'", "").Replace(".", "").Replace("~", "").Replace("'", "").Replace("""", "").Replace(":", "").Replace("(", "").Replace(")", "").Replace("+", "").Replace("%", "").Replace("*", "").Replace("^", "").Replace("&", "")

                Profile.Email = txtemail.Text.ToString.Trim.Replace("'", "").Replace("'", "").Replace("""", "")
                Profile.IP = IPAD

                Profile.Save()



            Catch ex As Exception

                'Used to enter in the error into the sql table to analysis.
                Dim sqlex As String = ex.Message.ToString
                EnterintoSQLerrorTable(sqlex, "Profile Save")

            End Try



            '-------------------------------------------

            Try

                'Getting the GUID from the ASP datasource to be placed inside the member database to link.
                Dim mbr As System.Web.Security.MembershipUser = Membership.GetUser(TUName)
                userGUID = mbr.ProviderUserKey

                Call UpdateAspmemberPass(userGUID.ToString.Trim, TUPass)

            Catch ex As Exception

                'Getting the GUID from the ASP datasource to be placed inside the member database to link.
                Dim mbr As System.Web.Security.MembershipUser = Membership.GetUser(TUName)
                userGUID = mbr.ProviderUserKey

                Call UpdateAspmemberPass(userGUID.ToString.Trim, TUPass)





                'Used to enter in the error into the sql table to analysis.
                Dim sqlex As String = ex.Message.ToString
                EnterintoSQLerrorTable(sqlex, "Profile Save")

            End Try



            '--------------------------------------------



            Const qstring As String = "INSERT INTO member( UserID,Username, Gender,Seeking, DOB,Age, Country, State, City, IP_Address,RegIP_Address,Email,Zip,Aboutme,Profilegreeting,latitude,longitude, membersince,mailmonthlysent) VALUES (@UserID,@Username, @ddlIam,@ddlseeking,@DOB,@Age, @Country, @State, @City, @IP_Address,@RegIP_Address,@Email,@Zip,@Aboutme,@Profilegreeting,@latitude,@longitude,@membersince,@mailmonthlysent)"
            Dim constrg As SqlConnection = New SqlConnection(System.Configuration.ConfigurationManager.ConnectionStrings("xxxxxxxConnectionString").ConnectionString)
            Dim cmd As SqlCommand = New SqlCommand(qstring, constrg)


            Session("userid") = userGUID.ToString.Trim
            Session("username") = TUName.Replace("'", "").Replace("""", "")
            Session("email") = txtemail.Text.ToString.Trim.Replace("'", "").Trim.Replace("'", "")
            Session("password") = TUPass.Replace("'", "").Replace("""", "")

            Try
                constrg.Open()
                cmd.CommandTimeout = 500

                cmd.Parameters.Add("@UserID", SqlDbType.NChar).Value = userGUID.ToString.Trim
                cmd.Parameters.Add("@Username", SqlDbType.NChar).Value = TUName.Replace("'", "").Replace("""", "")
                cmd.Parameters.Add("@ddlIam", SqlDbType.NChar).Value = txtgender.SelectedValue.Trim
                cmd.Parameters.Add("@ddlseeking", SqlDbType.NChar).Value = txtseeking.SelectedValue.Trim

                cmd.Parameters.Add("@DOB", SqlDbType.NChar).Value = dob
                cmd.Parameters.Add("@Age", SqlDbType.Int).Value = trueage
                cmd.Parameters.Add("@country", SqlDbType.NChar).Value = txtcountry.SelectedValue.Trim
                cmd.Parameters.Add("@state", SqlDbType.NChar).Value = txtstate.SelectedValue.Trim
                cmd.Parameters.Add("@city", SqlDbType.NChar).Value = txtcity.Text.ToString.Trim.Replace("'", "").Replace(".", "").Replace("~", "").Trim.Replace("'", "").Replace("""", "").Replace(":", "").Replace("(", "").Replace(")", "").Replace("+", "").Replace("%", "").Replace("*", "").Replace("^", "").Replace("&", "")
                cmd.Parameters.Add("@IP_Address", SqlDbType.NChar).Value = IPAD.ToString.Trim

                cmd.Parameters.Add("@RegIP_Address", SqlDbType.NChar).Value = IPAD.ToString.Trim
                cmd.Parameters.Add("@Email", SqlDbType.NChar).Value = txtemail.Text.ToString.Trim.Replace("'", "").Trim.Replace("'", "")
                cmd.Parameters.Add("@Zip", SqlDbType.NChar).Value = txtzip.Text.ToString.Trim.Replace("'", "").Replace(".", "").Replace("~", "").Replace("'", "").Replace("""", "").Replace(":", "").Replace("(", "").Replace(")", "").Replace("+", "").Replace("%", "").Replace("*", "").Replace("^", "").Replace("&", "")
                cmd.Parameters.Add("@Aboutme", SqlDbType.NChar).Value = "I am a new user."
                cmd.Parameters.Add("@Profilegreeting", SqlDbType.NChar).Value = "I am a new user."



                Try


                    Getlatlong(txtzip.Text.ToString.Trim, latitude, longitude)

                Catch ex As Exception

                    'Used to enter in the error into the sql table to analysis.
                    Dim sqlex As String = ex.Message.ToString
                    EnterintoSQLerrorTable(sqlex, "Lat Long")

                End Try



                If latitude = "" Or latitude Is Nothing Then
                    cmd.Parameters.Add("@Latitude", SqlDbType.Float).Value = CDbl("-79.718605")
                    cmd.Parameters.Add("@Longitude", SqlDbType.Float).Value = CDbl("-70.488281")
                Else
                    cmd.Parameters.Add("@Latitude", SqlDbType.Float).Value = CDbl(latitude)
                    cmd.Parameters.Add("@Longitude", SqlDbType.Float).Value = CDbl(longitude)
                End If

                cmd.Parameters.Add("@membersince", SqlDbType.DateTime).Value = Date.Now
                cmd.Parameters.Add("@mailmonthlysent", SqlDbType.DateTime).Value = Date.Now.ToString




                cmd.ExecuteNonQuery()


            Catch ex As SqlException

                'Used to enter in the error into the sql table to analysis.
                Dim sqlex As String = ex.Message.ToString
                EnterintoSQLerrorTable(sqlex, qstring)

                cmd.Dispose()
                constrg.Dispose()
                constrg.Close()
            Finally
                cmd.Dispose()
                constrg.Dispose()
                constrg.Close()

                'Getting the GUID from the ASP datasource to be placed inside the member database to link.
                Dim mbr As System.Web.Security.MembershipUser = Membership.GetUser(TUName)
                userGUID = mbr.ProviderUserKey

                If userGUID.ToString.Trim = Nothing Or userGUID.ToString.Trim = "" Then

                    EnterintoSQLerrorTable("USERGUID iS NULL", "USERGUID IS NULL")
                    userGUID = retreiveinfo("Select Userid from member where username='" + TUName + "'")

                End If


                Try
                    Call SendConfirmOne(userGUID.ToString.Trim, TUName, TUemail, TUPass)
                Catch ex As Exception
                    EnterintoSQLerrorTable("SendConfirm iS NULL", "SendConfirm IS NULL")
                End Try


                Try
                    Response.Redirect("http://xxxxxx.com/signupTemp.aspx?userid=" + userGUID.ToString.Trim + "&username=" + TUName + "&email=" + TUemail + "&password=" + TUPass, False) 'KEEP TO TRUE

                Catch ex As Exception
                    Dim sqlex As String = ex.Message.ToString
                    EnterintoSQLerrorTable("Error", "Redirect Error on SignUp")

                    Response.Redirect("http://xxxxxxx.com/signupTemp.aspx?userid=" + Session("userid").ToString.Trim + "&username=" + Session("username").ToString.Trim + "&email=" + Session("email").ToString.Trim + "&password=" + Session("password").ToString.Trim, False) 'KEEP TO TRUE



                End Try


            End Try





 


        Else

            Exit Sub 'Page Not Valid

        End If


WEB CONFIG

<?xml version="1.0" encoding="utf-8"?>
<!-- 
    Note: As an alternative to hand editing this file you can use the 
    web admin tool to configure settings for your application. Use
    the Website->Asp.Net Configuration option in Visual Studio.
    A full list of settings and comments can be found in 
    machine.config.comments usually located in 
    \Windows\Microsoft.Net\Framework\v2.x\Config 
-->
<configuration>

    <configSections>

        <section name="combineAndMinify" type="CombineAndMinify.ConfigSection" requirePermission="false"/>

    </configSections>

    <appSettings>
        <add key="CookieBlockSL" value="BLCAS" />
    </appSettings>
    <!--Connection String Begin-->
    <connectionStrings>
        <clear />
        <add name="xxxxxConnectionString" connectionString="Data Source=xxxxx-xxxxx;Initial Catalog=xxxxxx;Integrated Security=True; Max Pool Size=2000; Pooling=true;Connection Timeout=1000" />
        <add name="xxxxxx" connectionString="Data Source=xxxxx-xxxxx;Initial Catalog=xxxxxxx;Integrated Security=True;Max Pool Size=2000; Pooling=true;Connection Timeout=1000" />
        <add name="xxxxxConnectionString" connectionString="Data Source=xxxxxx-xxxxx;Initial Catalog=xxxx;Integrated Security=True;Max Pool Size=2000; Pooling=true;Connection Timeout=1000" />
        <add name="xxxxxConnectionstring" connectionString="Data Source=xxxx-xxxx;Initial Catalog=xxxxx;Integrated Security=True; Max Pool Size=2000; Pooling=true;Connection Timeout=1000" />
    </connectionStrings>
    <!--Connection String End-->
    <system.web>
        <httpRuntime maxRequestLength="102400" requestLengthDiskThreshold="100" executionTimeout="5000" appRequestQueueLimit="10000" maxQueryStringLength="102400" />
        <trace enabled="false" localOnly="false" />
        <sessionState timeout="20" mode="InProc" cookieless="UseCookies" />
        <!-- Role Manager Begin-->
        <roleManager enabled="true" cacheRolesInCookie="true" cookieProtection="All" createPersistentCookie="true" cookieName=".ASPXROLES" defaultProvider="AspNetSqlRoleProvider" cookiePath="/" cookieTimeout="500" cookieSlidingExpiration="true">
            <providers>
                <clear />
                <add name="AspNetSqlRoleProvider" connectionStringName="xxxxxxxConnectionString" type="System.Web.Security.SqlRoleProvider" applicationName="/" />
            </providers>
        </roleManager>
        <!--Role Manager End-->
        <!--Profile Begin-->
        <profile defaultProvider="AspNetSqlProfileProvider" automaticSaveEnabled="false" enabled="true">
            <providers>
                <clear />
                <add name="AspNetSqlProfileProvider" connectionStringName="xxxxxxConnectionString" type="System.Web.Profile.SqlProfileProvider" applicationName="/" />
            </providers>


  </profile>
        <!--Profile End-->
        <membership defaultProvider="AspNetSqlmembershipProvider" userIsOnlineTimeWindow="5">
            <providers>
                <clear />
                <add name="AspNetSqlmembershipProvider" type="System.Web.Security.SqlmembershipProvider" connectionStringName="xxxxxxxxConnectionString" enablePasswordRetrieval="false" enablePasswordReset="false" requiresQuestionAndAnswer="false" requiresUniqueEmail="true" passwordFormat="Hashed" maxInvalidPasswordAttempts="10" minRequiredPasswordLength="1" minRequiredNonalphanumericCharacters="0" passwordAttemptWindow="10" applicationName="/" />
            </providers>
        </membership>
        <customErrors defaultRedirect="404.aspx" mode="On">
            <error statusCode="404" redirect="404.aspx" />
        </customErrors>
        <!-- 
            Set compilation debug="false" to insert debugging 
            symbols into the compiled page. Because this 
            affects performance, set this value to true only 
            during development.

            Visual Basic options:
            Set strict="true" to disallow all data type conversions 
            where data loss can occur. 
            Set explicit="true" to force declaration of all variables.
        -->
        <compilation debug="false" strict="false" explicit="true" targetFramework="4.0">
            <assemblies>
                <add assembly="System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089" />
                <add assembly="System.Web.Extensions, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
                <add assembly="System.Data.DataSetExtensions, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089" />
                <add assembly="System.Xml.Linq, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089" />
                <add assembly="System.Web.Extensions.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
                <add assembly="System.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A" />
                <add assembly="System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089" />
            </assemblies>
        </compilation>
        <!--<caching>
            <sqlCacheDependency enabled="false" pollTime="1000">
                <databases>
                    <add name="DTLDB" connectionStringName="xxxxxxConnectionString" pollTime="1000" />
                </databases>
            </sqlCacheDependency>
        </caching>-->
        <pages renderAllHiddenFieldsAtTopOfForm="true" buffer="true" viewStateEncryptionMode="Always"  controlRenderingCompatibilityVersion="4.0" >
            <namespaces>
                <clear />
                <add namespace="System" />
                <add namespace="System.Collections" />
                <add namespace="System.Collections.Generic" />
                <add namespace="System.Collections.Specialized" />
                <add namespace="System.Configuration" />
                <add namespace="System.Text" />
                <add namespace="System.Text.RegularExpressions" />
                <add namespace="System.Linq" />
                <add namespace="System.Xml.Linq" />
                <add namespace="System.Web" />
                <add namespace="System.Web.Caching" />
                <add namespace="System.Web.SessionState" />
                <add namespace="System.Web.Security" />
                <add namespace="System.Web.Profile" />
                <add namespace="System.Web.UI" />
                <add namespace="System.Web.UI.WebControls" />
                <add namespace="System.Web.UI.WebControls.WebParts" />
                <add namespace="System.Web.UI.HtmlControls" />
            </namespaces>
            <controls>
                <add tagPrefix="asp" namespace="System.Web.UI" assembly="System.Web.Extensions, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
                <add tagPrefix="asp" namespace="System.Web.UI.WebControls" assembly="System.Web.Extensions, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />

            </controls>
        </pages>
        <!--
            The <authentication> section enables configuration 
            of the security authentication mode used by 
            ASP.NET to identify an incoming user. 
        -->
        <authentication mode="Forms">
            <forms name="Aspx-xxxxxx.com" protection="All" loginUrl="~/login.aspx" timeout="300" slidingExpiration="false" path="/" requireSSL="false" cookieless="UseCookies" enableCrossAppRedirects="false">
                <credentials passwordFormat="Clear">
                    <user name="" password="" />
                </credentials>
            </forms>
        </authentication>
        <authorization>
            <allow users="*" />
        </authorization>
        <!--
            The <customErrors> section enables configuration 
            of what to do if/when an unhandled error occurs 
            during the execution of a request. Specifically, 
            it enables developers to configure html error pages 
            to be displayed in place of a error stack trace.
 
        -->


        <machineKey decryption="Auto" decryptionKey="161ED409101CB88777BE9F6E6000300CF2BFB1BD051C7323BB4FBFEBAF70DB26,IsolateApps" validation="SHA1" validationKey="A1F70C701B7DD58FC842FE1520C568F690E1EAEE23D66F720416461FACE3E63B96AB7FA03981986BF052AB698F5C91D4914E439DD7E98A3114EAF1A2EC2C4579,IsolateApps" />
    </system.web>

    <!-- 
        The system.webServer section is required for running ASP.NET AJAX under Internet
        Information Services 7.0.  It is not necessary for previous version of IIS.
    -->
    <system.webServer>
        <httpCompression directory="%SystemDrive%\inetpub\temp\IIS Temporary Compressed Files" cacheControlHeader="365200" noCompressionForHttp10="false" noCompressionForProxies="false" sendCacheHeaders="true" dynamicCompressionEnableCpuUsage="89" dynamicCompressionDisableCpuUsage="90" minFileSizeForComp="1" noCompressionForRange="false">
            <scheme name="gzip" dll="%Windir%\system32\inetsrv\gzip.dll" />
            <dynamicTypes>
                <add mimeType="text/*" enabled="true" />
                <add mimeType="message/*" enabled="true" />
                <add mimeType="application/x-javascript" enabled="true" />
                <add mimeType="*/*" enabled="false" />
            </dynamicTypes>
            <staticTypes>
                <add mimeType="text/*" enabled="true" />
                <add mimeType="message/*" enabled="true" />
                <add mimeType="application/x-javascript" enabled="true" />
                <add mimeType="*/*" enabled="false" />
            </staticTypes>
        </httpCompression>
        <urlCompression doStaticCompression="true" doDynamicCompression="true" dynamicCompressionBeforeCache="true" />
        <staticContent>
            <clientCache cacheControlMode="UseExpires" httpExpires="Sun, 29 Mar 2020 00:00:00 GMT" />
        </staticContent>
        <validation validateIntegratedModeConfiguration="false" />


        <caching enabled="true">
            <profiles>
                <add extension=".png" policy="DontCache" kernelCachePolicy="CacheUntilChange" duration="00:00:30" location="Any" varyByHeaders="User-Agent" />
                <add extension=".gif" policy="DontCache" kernelCachePolicy="CacheUntilChange" duration="00:00:30" location="Any" varyByHeaders="User-Agent" />
                <add extension=".jpg" policy="DontCache" kernelCachePolicy="CacheUntilChange" duration="00:00:30" location="Any" varyByHeaders="User-Agent" />
                <add extension=".js" policy="DontCache" kernelCachePolicy="CacheUntilChange" duration="00:00:30" location="Any" varyByHeaders="User-Agent" />
                <add extension=".css" policy="DontCache" kernelCachePolicy="CacheUntilChange" duration="00:00:30" location="Any" varyByHeaders="User-Agent" />
                <add extension=".axd" kernelCachePolicy="CacheUntilChange" varyByHeaders="User-Agent" location="Any" />
                <add extension=".jpeg" policy="DontCache" kernelCachePolicy="CacheUntilChange" duration="00:00:30" location="Any" varyByHeaders="User-Agent" />
                <add extension=".htm" policy="DontCache" kernelCachePolicy="CacheUntilChange" duration="00:00:30" location="Any" varyByHeaders="User-Agent" />
                <add extension=".html" policy="DontCache" kernelCachePolicy="CacheUntilChange" duration="00:00:30" location="Any" varyByHeaders="User-Agent" />
            </profiles>
        </caching>
        <security>
            <requestFiltering allowDoubleEscaping="true">
                <requestLimits maxUrl="9096" maxQueryString="9048" />
            </requestFiltering>
        </security>
        <httpProtocol allowKeepAlive="true">
            <customHeaders>
                <remove name="Vary" />
                <add name="Vary" value="Accept-Encoding" />
            </customHeaders>
        </httpProtocol>


<tracing>
            <traceFailedRequests>
                <add path="*">
                    <traceAreas>
                        <add provider="ASP" verbosity="Verbose" />
                        <add provider="ASPNET" areas="Infrastructure,Module,Page,AppServices" verbosity="Verbose" />
                        <add provider="ISAPI Extension" verbosity="Verbose" />
                        <add provider="WWW Server" areas="Authentication,Security,Filter,StaticFile,CGI,Compression,Cache,RequestNotifications,Module,Rewrite" verbosity="Verbose" />
                    </traceAreas>
                    <failureDefinitions statusCodes="200" />
                </add>
            </traceFailedRequests>
        </tracing>
        <httpErrors>
            <remove statusCode="404" subStatusCode="-1" />
            <error statusCode="404" prefixLanguageFilePath="" path="/404.aspx" responseMode="ExecuteURL" />
        </httpErrors>
        <httpRedirect enabled="false" destination="" exactDestination="false" />




        <handlers >

            <add name="JavaScriptHandler" verb="*" path="*.js" type="CombineAndMinify.HttpHandler, CombineAndMinify" resourceType="Unspecified"/>
            <add name="CssHandler" verb="*" path="*.css" type="CombineAndMinify.HttpHandler, CombineAndMinify" resourceType="Unspecified"/>

        </handlers>


        <modules runAllManagedModulesForAllRequests="true"/>

    </system.webServer>
    <runtime>
        <assemblyBinding appliesTo="v2.0.50727" xmlns="urn:schemas-microsoft-com:asm.v1">
            <dependentAssembly>
                <assemblyIdentity name="System.Web.Extensions" publicKeyToken="31bf3856ad364e35" />
                <bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="4.0.0.0" />
            </dependentAssembly>
            <dependentAssembly>
                <assemblyIdentity name="System.Web.Extensions.Design" publicKeyToken="31bf3856ad364e35" />
                <bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="4.0.0.0" />
            </dependentAssembly>
        </assemblyBinding>
    </runtime>
    <system.net>
        <mailSettings>
            <smtp from="support@xxxxx.com">
                <network host="localhost" password="xxxxxxxx!" port="25" userName="support@xxxxxxxx.com" />
            </smtp>
        </mailSettings>
        <connectionManagement>
            <add address="*" maxconnection="200" />
        </connectionManagement>
    </system.net>
    <combineAndMinify  minifyJavaScript="true" active="Always" combineCSSFiles="All" combineJavaScriptFiles="All" preloadAllImages="true" makeImageUrlsLowercase="true" headCaching="PerSite" insertVersionIdInImageUrls="true" />
 
</configuration>

Edited by SuperRom on Nov 10, 2012 10:41 PM
Edited by SuperRom on Nov 11, 2012 04:22 AM
Edited by SuperRom on Nov 11, 2012 04:43 AM
Edited by SuperRom on Nov 11, 2012 04:43 AM
Edited by SuperRom on Nov 11, 2012 04:45 AM
Marked as answer by SuperRom on Jan 05, 2013 02:42 AM

- Reply
Mikesdotnett...

All-Star

154818 Points

19853 Posts

Moderator
MVP

Re: Code Reviewer Needed to help solve bug

Nov 11, 2012 06:30 AM|LINK

To help people to help you, can you explain what happens to prevent users from being able to complete stage 3. Do they not even get that far? Do they report errors? What happens if you remove the try catch blocks?

Also, why are you stripping single quotes? Why are you using parameters in your SQL in some places but not in others?

Regards, Mike
Beginning ASP.NET Web Pages with WebMatrix | My Site | Twitter

‹ Previous Thread|Next Thread ›

Code Reviewer Needed to help solve bug RSS

3 replies

SuperRom

Code Reviewer Needed to help solve bug

Mikesdotnett...

Re: Code Reviewer Needed to help solve bug

SuperRom

Re: Code Reviewer Needed to help solve bug

Mikesdotnett...

Re: Code Reviewer Needed to help solve bug

This site is managed for Microsoft by Neudesic, LLC. | © 2013 Microsoft. All rights reserved.

Follow Us On:

Microsoft