DynDeveloper.com

Many of you know me personally, you know that I'm not a 'web site owner', but a full time Dynamics GP developer. The web site is really just where I put all my notes from 20+ years of doing this.

So, it is such an annoyance to get to work in the morning and see this email:

User:
Geo Location: Wilmington; DE; US; 19893
IP: 52.188.22.65
Time: 6/1/2020 2:22:44 AM
Source: System.Web
CONTENT_LENGTH:: 0
CONTENT_TYPE:: text/html; charset=utf-8
PATH_TRANSLATED:: C:\inetpub\wwwroot\DynDeveloper.com\ColumnNameSearch.aspx
QUERY_STRING:: ctl00_MainContent_RadGrid1ChangePage=38_100'A=0
REMOTE_ADDR:: 52.188.22.65
REMOTE_HOST:: 52.188.22.65
REMOTE_PORT:: 52141
REQUEST_METHOD:: GET
SCRIPT_NAME:: /ColumnNameSearch.aspx
URL:: /ColumnNameSearch.aspx
HTTP_CONNECTION:: Keep-Alive
HTTP_CONTENT_TYPE:: text/html; charset=utf-8
HTTP_ACCEPT:: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
HTTP_REFERER:: http://dyndeveloper.com/ColumnNameSearch.aspx?ctl00_MainContent_RadGrid1ChangePage=38_100'A=0
HTTP_USER_AGENT:: Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-PT; rv:1.9.1.2) Gecko/20090729 Firefox/3.5.2 (.NET CLR 3.5.30729)
URL: http://dyndeveloper.com/ColumnNameSearch.aspx?ctl00_MainContent_RadGrid1ChangePage=38_100'A=0

The irritating part is in red.

So, in the middle of the night, this person (from Wilmington, Delaware) decides to try a SQL injection attack on this web site. This is not the actual attack, it's a preliminary foray into the attack. They've formed a URL that has a single quote and some code after it.

Although I've never been victim, I've had to help clean up sites that were victim. I helped on guy, spent hours cleaning, and the next day it happened again. He didn't take the time to fix his code.

No point here... just annoyed.

If you happen to have a bot net, maybe you'll do a DOS on the IP above. (laughs) kidding. Don't do that.

K, I feel better now. Have a good day!

*** If you have a 'hack attempt' story, please leave it in the comment below.

Usually, when I want to affect the appearance of an ASP.NET control, specifically a Telerik control, I'll trap the ItemDataBound event and get it there. 

But doing that involves a multi step process. I'm trying a new approach, changing it using my stored procedure and the aspx page. No code behind. 

The approach involves having a SQL field that specifies the color, and setting the FORECOLOR.

But...

This control will accept this

but not this

It throws an invalid conversion error

Solution below

Hi,

When using the vendor lookup form in VST I cannot get it to go to the closet value from my input.  I am using GP2018.  The lookup sample app does not work either.  All other lookups I have used work fine, i.e. items, buyers, locations etc...

After setting up the appropriate code in GPAddins I do this on the lookup button....

Microsoft.Dexterity.Applications.SmartListDictionary.VendorLookupForm vendorLookupForm = SmartList.Forms.VendorLookup;
GPAddIn.WPCreditorIDFromLookup = true;
vendorLookupForm.Open();
vendorLookupForm.VendorLookup.VendorId.Value = txtCreditorFrom.Text;
vendorLookupForm.VendorLookup.VendorSortBy.Value= 1;
vendorLookupForm.VendorLookup.VendorSortBy.RunValidate();

It does not seem to matter what is passed, it will go to the last vendor.

I have tried all the other options...

vendorLookupForm.VendorLookup.AsiLuFindString.Value = txtCreditorFrom.Text;
vendorLookupForm.VendorLookup.AsiLuFindString.RunValidate();

But this does not produce anything.

Any insight would be appreciated.

Thanks

Hi, has anyone successfully launched GP, logged in and either executed Dex code or run a macro via a service or application and then logged out again?

Cheers

Using the following query returns 0 (zero) records despite every IV41100 record having a value in the NOTEINDX column.  How can this be?  I ask because I would like to insert 50+ records via SSMS and don't know what values that I should be using (NULL values are not allowed).

SELECT

       ['Inventory Landed Cost'].NOTEINDX AS 'Inventory Landed Cost-Note Index'
       ,['Record Notes Master'].NOTEINDX AS 'Record Notes Master-Note Index'
FROM
       IV41100 AS ['Inventory Landed Cost']
INNER JOIN
       SY03900 AS ['Record Notes Master']
              ON
                     ['Inventory Landed Cost'].NOTEINDX = ['Record Notes Master'].NOTEINDX

Thank you,

James

We have been working on updating an existing VS Tools C# customization.  We added some stored procedures to an existing custom dexterity dictionary but the new stored procedures are not showing up in the list when we try to create a trigger on one of those stored procedures.  We ran the DAG process on the dictionary after the changes were made, removed the old reference in the project and then re added the reference for the new DLL created by the DAG process.  When we are trying to set the trigger, the stored procedure is still not showing up in the list to select.  I am thinking somehow it is still loading the old list.  I looked for a refresh cache for intellisense but don't see anything.  I am using GP 2016 R2 and VS 2017.

Can anyone suggest what I can do to troubleshoot this issue?

Thanks,

Lonnie