[Release][C#] Beta Key Distribution

Re: [Release + Tutorial][C#] Beta Key Distribution

Updated with an admin zone, added features, and verification.
 
Re: [Release + Tutorial][C#] Beta Key Distribution

Stop using var unless you have to. Use the appropriate object. Using var limits readability and can cause a throwback to hungarian notation for variables, which leads to long, often pointless, variable names

Why use string.Format without using its major benefit?

Code: 
String.Format("INSERT INTO KeyStorage (Email, Hash, isUsed) VALUES ('" + @emailAddr + "', '" +
                                  @stringArray + "', 0)");
Click to expand...

Should be

Code: 
String.Format("INSERT INTO KeyStorage (Email, Hash, isUsed) VALUES ('{0}', '{1}', 0)", emailAddr, stringArray);

Although some would argue that using stringbuilder or plain concatenation would be the better (faster) route.


Then, you set up your command and execute it. Two things

#1:

Code: 
var sqlComm = new SqlCommand(sqlStr, DataConn.Connect());
Click to expand...
-- should have SqlCommand instead of var (as noted above) and then you should use paramaterized queries to run this.

Example: change your querystring into

"INSERT INTO KeyStorage (Email, Hash, isUsed) VALUES (@email, @hash, 0)"

And then, after you've initialized your command, add the following:

Code: 
cmd.Parameters.Add(new SqlParameter("@email", System.Data.SqlDbType.VarChar, 50)).Value = emailAddr;
cmd.Parameters.Add(new SqlParameter("@hash", System.Data.SqlDbType.VarChar, 50)).Value = stringArray;

note:** change the "varchar, 50" to whatever your datatype is.

This does two things: first, it stops any sql injection possibilities, which were a problem with your code above. Secondly, it checks the datatype being put into the database *before* the insert is done. This allows you to catch the error before your program crashed because of a database exception.

#2: Isn't necessary, but it is nice to do:

where you do:

Code: 
sqlComm.ExecuteNonQuery();
Click to expand...

Try switching it to

Code: 
if (sqlComm.ExecuteNonQuery() == 1)

ExecuteNonQuery returns the number of rows affected, so doing this allows you to verify that something was done before moving on.


It is also good to add more than just an SqlException to your try/catch. Obviously you want to cover the specific error, but catching just a general Exception means you can handle any exception, even ones you never thought of, somewhat gracefully. You should still try to make sure exceptions don't happen, and if they do, handle them with their specific exceptions first, otherwise troubleshooting can become a pain.

Then we move into your other class. Once again, you seem to misuse string.Format. There is no point in using it the way you do. I would recommend, once again, to switch it from:

Code: 
String.Format(@"Data Source=.\SQLEXPRESS;AttachDbFilename="+ HttpContext.Current.Server.MapPath("~") +@"\App_Data\Database.mdf;Integrated Security=True;User Instance=True");
Click to expand...

to:

Code: 
String.Format(@"Data Source=.\SQLEXPRESS;AttachDbFilename={0}\App_Data\Database.mdf;Integrated Security=True;User Instance=True", HttpContext.Current.Server.MapPath("~"));

It is also a good idea, when building a web app, to store your connection string in the web.config, so you don't have to re-compile code to change it.

There are plenty of other things, like your lack of try/catches or catching possible errors, but I think you get the gist. It is a good effort for a first attempt, but I definitely think you should go back and re-write some of the code. Never hurts to keep improving :)
 
Re: [Release + Tutorial][C#] Beta Key Distribution

(thumbsup), appreciate the advice man, I definitely need it!

I'm not going to argue with any point. I may have been doing this a while, but no matter what, I will always understand that there are people out there who will try help my progress, and I thank you for that.

I did do a lot of work on this, and it was more of a rush than anything else hey. Looking back (besides that var, as I was definitely in the wrong there - I thought it lead to less ambiguous coding), I can see where I went wrong :P

In the morrow, I will implement your code analogy.

I also want to put this up into an SVN, I believe this, combined with other things I'm working on, could lead to something awesome.

If you would like to help me, I could definitely do with a skilled hand such as yours.

Lastly, thanks again for the advice. I greatly appreciate it.

[EDIT]

Var is used when the object is is declared on both left and right-hand sides of the initialization statement. 'var' can be used on the left hand side, to remove implicid deceleration :)

[EDIT - 2]
sqlComm.Parameters.Add(new SqlParameter("@email", System.Data.SqlDbType.VarChar, 50)).Value = emailAddr;
sqlComm.Parameters.Add(new SqlParameter("@hash", System.Data.SqlDbType.VarChar, 50)).Value = stringArray;
Click to expand...

Puts @email, and @quote in the DB
 
Last edited:
Re: [Release + Tutorial][C#] Beta Key Distribution

Nemeses said:
Said (thumbsup), not (like).

Thas why.
Click to expand...

So what if I remove the thumbs-up part :

appreciate the advice man, I definitely need it
Click to expand...
= thanks

The like button is also used to say "THANK YOU".


I feel like the like button is not used anymore and I'm so saddddd about it. Good night.
 
Last edited:
Re: [Release + Tutorial][C#] Beta Key Distribution

So, gone are the days where a full length 'thank you' is accepted. No more can a person express their gratitude without someone getting up in arms.

Like != Thank you.

If there was a "I really appreciate this" button, I would of definitely clicked it.

Anyway, he got a thank you that I expressed, that is far greater than simply clicking a button. I feel sorry for you if you don't understand that concept.
 
Re: [Release + Tutorial][C#] Beta Key Distribution

Lapje said:
True, but that's not the point. He wanted to do it his way, which turned out to be with C#. Nothing wrong with that.
Click to expand...
Of course. Companies still pay a lot of money for people who can make ASP pages.

Its a pretty neat system regardless.
 
Re: [Release + Tutorial][C#] Beta Key Distribution

Ron said:
Of course. Companies still pay a lot of money for people who can make ASP pages.

Its a pretty neat system regardless.
Click to expand...

Appreciate it Ron. :) I know what you were trying to say, but on the vast amount, I actually needed this for myself, and seeing the call for it was my motivation :)
 
You must log in or register to reply here.

RaGEZONE Sponsor

    HyperFilter

About RaGEZONE

RaGEZONE® is a leading MMO and MMORPG development community offering source codes, server files, tutorials, tools, and private servers for developers and gamers.

Forum Statistics

Members online
2,966
Guests online
18,721
Total visitors
21,687
Totals may include hidden visitors.

RaGEZONE Partners

    non GamStop casinos
Back