Comments on: Developing a ‘login’ with ajaxed

By: Jake

Jake — Fri, 14 Nov 2008 15:50:08 +0000

The login.asp didn't work until I added

PLAIN TEXT

ASP:

page.DBConnection = true

By: Michal

Michal — Mon, 21 Jul 2008 01:52:54 +0000

i see.. dunno if this makes a lot sense but i will think about it ... maybe its useful

By: Vince Russo

Vince Russo — Mon, 21 Jul 2008 01:15:54 +0000

All I've done is change the column name to something that is different.
I changed line 241 in your JSON.asp file to read
toJSON lCase("c"&i), val.fields(i).value, true

I just changed "c"&i - c is just a letter and the i is your incremented value.
together they will make c0,c2,c3, etc...

Every column in the table will have its named pair to be substituted with c0,c1,c2,c3,c4, etc... (this hides the true column names)

In javascript access the passed JSON using Ajax request.
myObject.rows[i].c1;
myObject.rows[i].c2; etc.

This hides the actual name of my sql columns, but I can still access the data by using the substituted names.

It is a quicker and simpler way.

What do you think?

By: Michal

Michal — Sun, 20 Jul 2008 23:52:49 +0000

this makes no sense .. if you hide it then you cannot use it anymore ;)

By: Vince Russo

Vince Russo — Sun, 20 Jul 2008 15:44:55 +0000

OK.

I do want all the columns returned, I just don't want their real column names returned in the JSON feed.

I could use an alias as you suggest, I never thought of that.

But, it would be cool to provide the functionality that I suggested to hide the column names if an alias wasn't used.

I think less work then alias column names in a table.

Just my 2 cents.

Thanks for you suggestion, it does make sense.

Vince

By: Michal

Michal — Sun, 20 Jul 2008 15:19:03 +0000

when you return a recordset then you should only select those columns which you want to return .. e.g

sql = "SELECT col1, col2 FROM table" page.return(db.getRecordset(sql))

only col1 and col2 will be returned. they must be returned because you want to do something with them ..
you could also alias the columns if you dont want to keep the "real" names:

sql = "SELECT col1 AS myCol FROM table"

hope that helps you.... greets

By: Vince Russo

Vince Russo — Sun, 20 Jul 2008 14:46:57 +0000

Hi Michal,

I see you made a post, I didn't realize that.

I'm not sure what you mean by just don't select them.

They are in the recordset.

Vince

By: Vince Russo

Vince Russo — Sun, 20 Jul 2008 14:45:53 +0000

I changed line 241 to
toJSON lCase("c"&i), val.fields(i).value, true

This will do what I want, it now sends c0,c1,c2,c3 etc... as my col names, so this wont expose the actual column names in my database.

I would be cool to add a flag to the toJSON call though so it would work the way it does now, or with my mod just by setting the flag.

Just a suggestion.

THanks

Michal

This is awsome

By: Michal

Michal — Sun, 20 Jul 2008 14:38:12 +0000

you can hide columns easily .. just dont select them ;)

By: Vince Russo

Vince Russo — Sun, 20 Jul 2008 14:13:42 +0000

Is there anyway to hide the column names in the JSON that is returned?

Say, instead of the names of the tables just have them named c1,c2,c3 etc..

Is that possible, maybe it can be set by a flag in the call.

response.write((new JSON).toJSON("rows", Recordset1,False,nocolnames))

I thought if someone knows the column names in a table it allows the database to be hacked more easily.

Vince