Archive | Consuming and Creating Server Controls RSS for this section

Create and Consume Custom Controls

ASP.NET ships with a lot of controls, but sometimes, they aren’t enough for specific needs. Luckily, the ASP.NET control model is easily extendible. You can create your own controls in two ways:

  1. Create a Custom Control
  2. Create a User Control.

In this post (and in the exam, hopefully) you will need to be familiar only with the latter. A User Control is much like a standard aspx page. You use existing controls to build up your user interface, then write the code behind classes.

However, there are some differences as well:

  • The file name extension is .ascx
  • There is no @Page directive, but a @Control
  • They cannot be run by themselves, only within an aspx page
  • Html, body, head and form tags are forbidden in User controls

You can add a User control to your page two ways: register it, or set a reference on it. It is a better approach to use the register method. If you just set a reference on a User control, you’ll only be able to dynamically add it in your code-behind file. But let’s see how to do it:
Read More…

User Input Validation in ASP.NET

HTML forms exist to collect data from the user. And this data, like every piece of user input, needs to be checked first for both security and logical reasons (what could we do with irrelevant data). There are two ways of checking the validity of user input: on the client side, and on the server side. Client side validation is swifter and more elegant, then posting back the data to the server, and the send back and error message. But we must implement both validation techniques, because a crafty attacker can bypass our client-validating methods, and send for example scripts or SQL commands back to our page to process them.

Implementing these two different approaches is quite tedious by hand, because client-side validation usually takes place in javascript, while server-side logic could be PHP, or in our case C#, and they are very different by their nature. And there come the ASP.NET validation controls in the picture.
Read More…

Load User Controls Dynamically

In order to understand the process of loading user controls in a dynamic manner, we should inspect the ASP.NET page life cycle. ASP.NET pages have a very short lifespan, due to their stateless HTML-based nature. Their life begins when somebody makes a request for them to the server. Then the page goes through the following stages:

  1. Request stage: compile page (if not precompiled), or pull from cache (if available)
  2. Start stage: set Response and Request, determine IsPostBack
  3. page_init: initialize page controls (without the associated properties), set page theme
  4. page_load: if the request is a PostBack, loads the control properties from the ViewState
  5. Validation: determines the validity of the page and its controls
  6. PostBack event handling stage: call event handlers
  7. page_render: saves the values to the ViewState, renders the controls and the output
  8. page_unload: cleanup stage, then discard

If you want to memorize this, use SILVER: Start Init Load Validate Events Render.

So far for the page life cycle, but when should we load dynamic controls? The answer hides in the page life cycle events. Table:

Read More…

Implement Data-Bound Controls

There are a bunch of controls that can be bound to a data source in ASP.NET. In this section, we’ll cover the ones that sit in the Data tab in the toolbox, and are regarded as composite controls (e.g. not the DropDownList). I won’t explain every aspect and the usability of these controls, just the main differences between them. For a detailed tutorial of how to use them, visit the ASP.NET Data Access Tutorial site.

DataGrid: DataGrid is a good solution to show data in a tabular fashion, whit paging capabilities and a controllable layout with command fields, etc. However, if you are using ASP.NET 3.5 or later, you should consider using the GridView control, because it is regarded as the successor of the DataGrid.

GridView: same as the DataGrid control, it renders records from a data source, every record a row in a table. It supports massive layout personalization, like BoundField, CommandField, TemplateField, ButtonField, etc. It also supports selecting, editing and sorting data. It can be a good choice as a master table when implementing master-details scenarios. You can implement custom scenarios with a TemplateField. You can also assign templates to the GridView.

Read More…