Programming Archives - 25 중 16 번째 페이지

outlook내 icloud내 연락처의 표시방법 변경

Sub 표시방법변경()
    
    Dim objOL       As Outlook.Application
    Dim objNS       As Outlook.NameSpace
    Dim objContact  As Outlook.ContactItem
    Dim objItems    As Outlook.Items
    Dim objContactsFolder As Outlook.MAPIFolder
    Dim objICloudFolder As Outlook.MAPIFolder
    Dim obj         As Object
    Dim strFirstName As String
    Dim strLastName As String
    Dim strName     As String
    
    On Error Resume Next
    
    Set objOL = CreateObject("Outlook.Application")
    Set objNS = objOL.GetNamespace("MAPI")
    Set objICloudFolder = objNS.Folders("iCloud")
    Set objICloudContacts = objICloudFolder.Folders("연락처")
    Set objItems = objICloudContacts.Items
    
    For Each obj In objItems
        If obj.Class = olContact Then
            Set objContact = obj
            
            With objContact
                strFirstName = .FirstName
                strLastName = .LastName
                
                If (.FirstName <> "" And .LastName <> "") Then
                    .FullName = .LastName + .FirstName
                End If
                
                If (strLastName = "" And strFirstName = "") Then
                    strName = .CompanyName
                Else
                    strName = strLastName + strFirstName
                End If
                
                If (.JobTitle <> "인턴") Then
                    .FileAs = strName + IIf(.JobTitle <> "" And .FirstName <> "", " " + .JobTitle + "님", " 님")
                Else
                    .FileAs = strName + " 님"
                End If
                
                If (.Email1Address <> "" And strName <> "") Then
                    .Email1DisplayName = .FileAs
                End If
                
                If (.Email2Address <> "" And strName <> "") Then
                    .Email2DisplayName = .FileAs
                End If
                
                If (.Email3Address <> "" And strName <> "") Then
                    .Email3DisplayName = .FileAs
                End If
                
                .Save
            End With
        End If
        
        Err.Clear
    Next
    
    Set objOL = Nothing
    Set objNS = Nothing
    Set obj = Nothing
    Set objContact = Nothing
    Set objItems = Nothing
    Set objICloudFolder = Nothing
    Set objICloudContacts = Nothing
    
End Sub

Sub 표시방법변경()

Dim objOL As Outlook.Application

Dim objNS As Outlook.NameSpace

Dim objContact As Outlook.ContactItem

Dim objItems As Outlook.Items

Dim objContactsFolder As Outlook.MAPIFolder

Dim objICloudFolder As Outlook.MAPIFolder

Dim obj As Object

Dim strFirstName As String

Dim strLastName As String

Dim strName As String

On Error Resume Next

Set objOL = CreateObject("Outlook.Application")

Set objNS = objOL.GetNamespace("MAPI")

Set objICloudFolder = objNS.Folders("iCloud")

Set objICloudContacts = objICloudFolder.Folders("연락처")

Set objItems = objICloudContacts.Items

For Each obj In objItems

If obj.Class = olContact Then

Set objContact = obj

With objContact

strFirstName = .FirstName

strLastName = .LastName

If (.FirstName <> "" And .LastName <> "") Then

.FullName = .LastName + .FirstName

End If

If (strLastName = "" And strFirstName = "") Then

strName = .CompanyName

Else

strName = strLastName + strFirstName

End If

If (.JobTitle <> "인턴") Then

.FileAs = strName + IIf(.JobTitle <> "" And .FirstName <> "", " " + .JobTitle + "님", " 님")

Else

.FileAs = strName + " 님"

End If

If (.Email1Address <> "" And strName <> "") Then

.Email1DisplayName = .FileAs

End If

If (.Email2Address <> "" And strName <> "") Then

.Email2DisplayName = .FileAs

End If

If (.Email3Address <> "" And strName <> "") Then

.Email3DisplayName = .FileAs

End If

.Save

End With

End If

Err.Clear

Set objOL = Nothing

Set objNS = Nothing

Set obj = Nothing

Set objContact = Nothing

Set objItems = Nothing

Set objICloudFolder = Nothing

Set objICloudContacts = Nothing

End Sub

trac 내 graphviz Sample

{{{
#!graphviz
digraph G { Hello->World->Graphviz->Rules; }
}}}

{{{

#!graphviz

digraph G { Hello->World->Graphviz->Rules; }

}}}

관련 글: wordpress 내에서 graphviz

SQL Injection 방어

출처 : http://forums.asp.net/t/1254125.aspx

를 보면 ASP.NET 1.1이냐 2.0 이냐에 따라 각각 이렇게 하라고 한다. 아직은 난 web.config가 익숙지 않아서 그런지 1.1 방식으로 하면 잘 되는데 2.0 방식으로는 잘 안된다. -_-

ASP.NET 1.1 C#

global.asax

using System.Globalization;
//Defines the set of characters that will be checked.
//You can add to this list, or remove items from this list, as appropriate for your site
public static string[] blackList = {
  "--",
  ";--",
  ";",
  "/*",
  "*/",
  "@@",
  "@",
  "char",
  "nchar",
  "varchar",
  "nvarchar",
  "alter",
  "begin",
  "cast",
  "create",
  "cursor",
  "declare",
  "delete",
  "drop",
  "end",
  "exec",
  "execute",
  "fetch",
  "insert",
  "kill",
  "open",
  "select",
  "sys",
  "sysobjects",
  "syscolumns",
  "table",
  "update"
};
//The utility method that performs the blacklist comparisons
//You can change the error handling, and error redirect location to whatever makes sense for your site.
private void CheckInput(string parameter) {
  CompareInfo comparer = CultureInfo.InvariantCulture.CompareInfo;
  for (int i = 0; i < blackList.Length; i++) {
    if (comparer.IndexOf(parameter, blackList[i], CompareOptions.IgnoreCase) >= 0) {
      //
      //Handle the discovery of suspicious Sql characters here
      //
      Response.Redirect("~/Error.aspx"); //generic error page on your site
    }
  }
}

void Application_BeginRequest(object sender, EventArgs e) {
  foreach(string key in Request.QueryString)
  CheckInput(Request.QueryString[key]);
  foreach(string key in Request.Form)
  CheckInput(Request.Form[key]);
  foreach(string key in Request.Cookies)
  CheckInput(Request.Cookies[key].Value);
}

using System.Globalization;

//Defines the set of characters that will be checked.

//You can add to this list, or remove items from this list, as appropriate for your site

public static string[] blackList = {

"--",

";--",

";",

"/*",

"*/",

"@@",

"@",

"char",

"nchar",

"varchar",

"nvarchar",

"alter",

"begin",

"cast",

"create",

"cursor",

"declare",

"delete",

"drop",

"end",

"exec",

"execute",

"fetch",

"insert",

"kill",

"open",

"select",

"sys",

"sysobjects",

"syscolumns",

"table",

"update"

};

//The utility method that performs the blacklist comparisons

//You can change the error handling, and error redirect location to whatever makes sense for your site.

private void CheckInput(string parameter) {

CompareInfo comparer = CultureInfo.InvariantCulture.CompareInfo;

for (int i = 0; i < blackList.Length; i++) {

if (comparer.IndexOf(parameter, blackList[i], CompareOptions.IgnoreCase) >= 0) {

//Handle the discovery of suspicious Sql characters here

Response.Redirect("~/Error.aspx"); //generic error page on your site

}

void Application_BeginRequest(object sender, EventArgs e) {

foreach(string key in Request.QueryString)

CheckInput(Request.QueryString[key]);

foreach(string key in Request.Form)

CheckInput(Request.Form[key]);

foreach(string key in Request.Cookies)

CheckInput(Request.Cookies[key].Value);

}

ASP.NET 2.0 C#

App_Code/SampleSqlInjectionScreeningModule.cs

using System;
using System.Data;
using System.Configuration;
using System.Linq;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.HtmlControls;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Xml.Linq;

namespace Sample {
  public class SampleSqlInjectionScreeningModuleCS: IHttpModule {
    //Defines the set of characters that will be checked.
    //You can add to this list, or remove items from this list, as appropriate for your site
    public static string[] blackList = {
      "--",
      ";--",
      ";",
      "/*",
      "*/",
      "@@",
      "@",
      "char",
      "nchar",
      "varchar",
      "nvarchar",
      "alter",
      "begin",
      "cast",
      "create",
      "cursor",
      "declare",
      "delete",
      "drop",
      "end",
      "exec",
      "execute",
      "fetch",
      "insert",
      "kill",
      "open",
      "select",
      "sys",
      "sysobjects",
      "syscolumns",
      "table",
      "update"
    };

    public void Dispose() {
      //no-op
    }

    //Tells ASP.NET that there is code to run during BeginRequest
    public void Init(HttpApplication app) {
      app.BeginRequest += new EventHandler(app_BeginRequest);
    }

    //For each incoming request, check the query-string, form and cookie values for suspicious values.
    void app_BeginRequest(object sender, EventArgs e) {
      HttpRequest Request = (sender as HttpApplication).Context.Request;

      foreach(string key in Request.QueryString)
      CheckInput(Request.QueryString[key]);
      foreach(string key in Request.Form)
      CheckInput(Request.Form[key]);
      foreach(string key in Request.Cookies)
      CheckInput(Request.Cookies[key].Value);
    }

    //The utility method that performs the blacklist comparisons
    //You can change the error handling, and error redirect location to whatever makes sense for your site.
    private void CheckInput(string parameter) {
      for (int i = 0; i < blackList.Length; i++) {
        if ((parameter.IndexOf(blackList[i], StringComparison.OrdinalIgnoreCase) >= 0)) {
          //
          //Handle the discovery of suspicious Sql characters here
          //
          HttpContext.Current.Response.Redirect("~/Error.aspx"); //generic error page on your site
        }
      }
    }
  }
}

using System;

using System.Data;

using System.Configuration;

using System.Linq;

using System.Web;

using System.Web.Security;

using System.Web.UI;

using System.Web.UI.HtmlControls;

using System.Web.UI.WebControls;

using System.Web.UI.WebControls.WebParts;

using System.Xml.Linq;

namespace Sample {

public class SampleSqlInjectionScreeningModuleCS: IHttpModule {

//Defines the set of characters that will be checked.

//You can add to this list, or remove items from this list, as appropriate for your site

public static string[] blackList = {

"--",

";--",

";",

"/*",

"*/",

"@@",

"@",

"char",

"nchar",

"varchar",

"nvarchar",

"alter",

"begin",

"cast",

"create",

"cursor",

"declare",

"delete",

"drop",

"end",

"exec",

"execute",

"fetch",

"insert",

"kill",

"open",

"select",

"sys",

"sysobjects",

"syscolumns",

"table",

"update"

};

public void Dispose() {

//no-op

}

//Tells ASP.NET that there is code to run during BeginRequest

public void Init(HttpApplication app) {

app.BeginRequest += new EventHandler(app_BeginRequest);

}

//For each incoming request, check the query-string, form and cookie values for suspicious values.

void app_BeginRequest(object sender, EventArgs e) {

HttpRequest Request = (sender as HttpApplication).Context.Request;

foreach(string key in Request.QueryString)

CheckInput(Request.QueryString[key]);

foreach(string key in Request.Form)

CheckInput(Request.Form[key]);

foreach(string key in Request.Cookies)

CheckInput(Request.Cookies[key].Value);

}

//The utility method that performs the blacklist comparisons

//You can change the error handling, and error redirect location to whatever makes sense for your site.

private void CheckInput(string parameter) {

for (int i = 0; i < blackList.Length; i++) {

if ((parameter.IndexOf(blackList[i], StringComparison.OrdinalIgnoreCase) >= 0)) {

//Handle the discovery of suspicious Sql characters here

HttpContext.Current.Response.Redirect("~/Error.aspx"); //generic error page on your site

}

※ 주의 블랙리스트 방식은 우회가 쉽고 “end”, “open”, “table” 같은 정상 단어도 막는다. SQL Injection […]

anydragon

참고자료

최신 글

보관함

outlook내 icloud내 연락처의 표시방법 변경

trac 내 graphviz Sample

SQL Injection 방어

태그

링크

메타