How to hide the SqlDataSource coding?

Question

I had used the SqlDataSource to retrieve data from database to gridview.

<asp:SqlDataSource ID="SqlDataSource1" runat="server" ConnectionString="<%$ ConnectionStrings:HRMS_DBConnectionString1 %>"
        DeleteCommand="DELETE FROM [tblEmployeeDetail] WHERE [EmpId] = @EmpId" InsertCommand="INSERT INTO [tblEmployeeDetail] ([EmpId], [Name], [UserName], [Password], [Gender], [Age], [Address], [IdentityCardNo], [Race], [Position], [Section], [Department], [JoinDate], [ResignDate], [HodId], [Email]) VALUES (@EmpId, @Name, @UserName, @Password, @Gender, @Age, @Address, @IdentityCardNo, @Race, @Position, @Section, @Department, @JoinDate, @ResignDate, @HodId, @Email)"
        ProviderName="<%$ ConnectionStrings:HRMS_DBConnectionString1.ProviderName %>"
        SelectCommand="SELECT [EmpId], [Name], [UserName], [Password], [Gender], [Age], [Address], [IdentityCardNo], [Race], [Position], [Section], [Department], [JoinDate], [ResignDate], [HodId], [Email] FROM [tblEmployeeDetail] WHERE ([Name] IS NULL)"

For security purpose is there any ways so I can hide this coding. It obviously showing the table name and its entities all. I wish to use this function as its easier to manage data in gridview with direct auto edit and delete function but at sametime the presentation layer suppose not reveal the database content in coding. Is there anyway?

Hide it from whom? These controls don't render to the client (unless your server is mis-configured and not actually processing the ASP.NET code). — David
– David, Commented Dec 13, 2011 at 18:40
"the presentation layer suppose not reveal the database content in coding" - you don't have a presentation layer in this monolithic architecture. You can only keep database-specific stuff out of the presentation layer if you have another layer to put it into. — to StackOverflow
– to StackOverflow, Commented Dec 13, 2011 at 18:47
Let say a mistakes has been happened and the code cant find the specific entity from database. Isn't later will comes out an error message at aspx stating obviously that this entity from this table cud not be found, appearing in client side.. — Memoc
– Memoc, Commented Dec 13, 2011 at 18:51
@Memoc Properly handle errors? Sounds like a classic XY question to me. — Michael Jasper
– Michael Jasper, Commented Dec 13, 2011 at 18:53

Michael Jasper · Accepted Answer · 2011-12-13 18:39:58Z

1

Are you under the impression that your code example will be present in the HTML and publicly view-able? It will not be. The SQLDataSource is compiled and generates data that is inserted into the various HTML elements before the page is ever served to the client.

http://msdn.microsoft.com/en-us/library/ms178472.aspx#lifecycle_events

answered Dec 13, 2011 at 18:39

Michael Jasper

8,0984 gold badges43 silver badges60 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

McKay · Accepted Answer · 2011-12-13 18:39:04Z

0

You can set those properties in the .cs file if that's what you wish. But maybe that's not deep enough for you, i.e. that is still the presentation layer?

answered Dec 13, 2011 at 18:39

McKay

12.7k7 gold badges58 silver badges81 bronze badges

Collectives™ on Stack Overflow

How to hide the SqlDataSource coding?

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related