/Scaffolding-with-AspNet-MVC-2-and-SubSonic-3#comment-1627It's Sent. I like the idea. I was thinking the Telerik grid would be nice too. Whatever you go with I would like to suggest that you use Html.DisplayFor when rendering the fields so that the grid display can be customized by using templates. Also it would be nice if it respected some of the System.ComponentModel.DataAnnotations attributes like [ScaffoldColumn(false)] if you don't want to show a column on the grid.2010-03-04T20:29:10urn:comment:1627/Scaffolding-with-AspNet-MVC-2-and-SubSonic-3#comment-1626Brian Any way you could send me your mod? I am thinking of starting an MVC Scaffolding project on Codeplex... perhaps I could have a SubSonic/Ling to Sql and then an Entities Framework example and use either the Telerik Open Source Grid or one of the others out there. I am also thinking that it would be nice to create a spark view as well. Anyone else interested?2010-03-04T13:23:43urn:comment:1626/Scaffolding-with-AspNet-MVC-2-and-SubSonic-3#comment-1625This is awesome! I'm coming from Dynamic Data and was looking for a way to do this in MVC. I modified the ScaffoldController class to use Linq to SQL and it works great. Thanks!2010-03-03T20:29:55urn:comment:1625/Scaffolding-with-AspNet-MVC-2-and-SubSonic-3#comment-1624Great post! I just finished a project using ASP.NET MVC 1 using Subsonic 3, and certainly had some struggles with certain things. Can't wait to give MVC 2 a try with Subsonic.2010-02-28T21:27:36urn:comment:1624/Exporting-a-DataTable-to-Excel-(DataTable-to-CSV)#comment-1668I love the extension stuff it's making my life so much easier!! Using this I can recreate the tostring method that used to exist in ADO (before .NET) where you could pass your column and row delimiters (blow out an HTML table for instance).2009-09-09T13:28:20urn:comment:1668/Google-Adsense-average-Click-Through-Rate-(CTR)#comment-1675I get about 2% at my blog http://fastestfreebies.blogspot.com/2009-08-07T09:09:11urn:comment:1675/MsBuild-vs-Nant#comment-1699So Robz I have to ask you is UppercuT built on top on Nant? My largest beef with Nant is that it locks you into certain hardware and is always a year behind. I have not tried using it with Visual Studio 2010 but I imagine it won't support it until 2011. Nant is still a useful tool but I would rather make a call out to Nant than have Nant call MsBuild. The other thing cool about MsBuild is that you can't create a project without having a build file as every project file is an MsBuild file :).2009-08-04T03:21:33urn:comment:1699/MsBuild-vs-Nant#comment-1698I have used both and I have to say, I like NAnt better because it doesn't couple me to a particular version of MSBuild. I also like that I can call out to MsBuild from NAnt.2009-08-03T11:05:41urn:comment:1698/Exporting-a-DataTable-to-Excel-(DataTable-to-CSV)#comment-1667Brilliant, exactly what I needed. thanks..2009-07-14T03:45:27urn:comment:1667/XSS-by-Example-(Cross-Site-Scripting)#comment-1686I agree for CSRF and not XSS, good article though2009-07-12T10:12:25urn:comment:1686/CSRF-by-Example-How-to-do-it-How-to-defend-it#comment-1661It seems this blog engine IS vulnerable to OSRF (On Site Request Forgery)2009-07-12T03:43:51urn:comment:1661/openSUSE-vs-Ubuntu-for-Net-Developers#comment-1714As you note, Ubuntu lags a little bit on the release of Mono. But there are a lot of other reasons to use Ubuntu. First, due to its large user base, it tends to have larger repositories than OpenSuSE. While I started off with Novell's distribution, and it will always have a place in my heart, package installation can be a tremendous pain. However, on Ubuntu, it's tremendously easy to get up and running very quickly because of the size of said repositories. Moreover, outside of Mono, there are very utilities where I don't need the to have absolute bleeding edge. As a result, I find that it's much easier to just compile it from source out of the Mono svn. I then run it in a parallel environment from my system Mono. While this situation might not be ideal for all users, I find that it works for me very well. One last point. While Ubuntu may lag in comparison to OpenSuSE, the lag is fairly limited. The upcoming 9.10 release will feature Mono 2.4, bringing it to the same version in OpenSuSE. (The benefit of regular 6 month releases.)2009-07-11T22:44:07urn:comment:1714/XSS-by-Example-(Cross-Site-Scripting)#comment-1685"></a>test<script>alert(1);</script>2009-06-25T23:25:20urn:comment:1685/XSS-by-Example-(Cross-Site-Scripting)#comment-1684You are correct as it was not via some input from a malicious user but the script was being run on purpose. The story that diggs itself is an interesting read and does present another way of attempting CSRF. When I get the time I will have to try it out.2009-06-25T10:35:54urn:comment:1684/Exporting-a-DataTable-to-Excel-(DataTable-to-CSV)#comment-1666And you need to remove the non-printable hi-bit characters. And what if the column type is a System.Guid? And what if the column value is null?2009-06-25T07:20:20urn:comment:1666/Exporting-a-DataTable-to-Excel-(DataTable-to-CSV)#comment-1665I have a similar method. You need to check for commas in your string fields and surround with quotes (e.g. Some text, "Some text, with a comma", Some more text) 2009-06-25T00:55:49urn:comment:1665/XSS-by-Example-(Cross-Site-Scripting)#comment-1683the thing you attempted there was CSRF and not XSS... You're attempts where to do cross domain AJAX requests, which are a no-no due too Same Origin Policy. Another thing to note is that the requests send Referer and X-JSON-RPC headers which cannot be spoofed through a webpage; AJAX could spoof them if there where no SOP. What you where trying to do is similar with "the Story that Diggs itself" http://www.it-bbr.de/blog/post/The-Story2c-that-diggs-itself.aspx2009-06-18T11:00:40urn:comment:1683/XSS-by-Example-(Cross-Site-Scripting)#comment-1682testing<b>aaa<b>2009-06-15T17:17:57urn:comment:1682/Google-Adsense-average-Click-Through-Rate-(CTR)#comment-1674I am curious. Why are you unable to register for an adsense account is your Gmail account new?2009-06-15T04:04:56urn:comment:1674/Google-Adsense-average-Click-Through-Rate-(CTR)#comment-1673Luck you.. I can't register for adsense. I've to wait at least 6 months later.2009-06-14T06:09:03urn:comment:1673