Microsoft c# ASPX code example webpage catalog.
<%@ Page Title="SANS Secure Code Exercise" Debug="true" Language="C#" AutoEventWireup="true" CodeFile="catalog.aspx.cs" Inherits="catalog" MasterPageFile="~/sans.master" %><%@ MasterType virtualPath="~/sans.master"%>
<script runat="server">
void OnSelectedIndexChanged(object sender, EventArgs e)
{
OnSelectedIndexChanged();
}
</script>
<asp:Content ID="Content1" runat="server" contentplaceholderid="MainContent">
<asp:GridView ID="GridView1" runat="server" AutoGenerateColumns="False" OnSelectedIndexChanged="OnSelectedIndexChanged"
DataSourceID="SqlDataSource1" DataKeyNames="itemid">
<Columns>
<asp:CommandField ButtonType="Button" SelectText="Buy"
ShowSelectButton="True" />
<asp:BoundField DataField="name" HeaderText="name" SortExpression="name" />
<asp:BoundField DataField="description" HeaderText="description"
SortExpression="description" />
<asp:BoundField DataField="price" HeaderText="price" SortExpression="price" />
<asp:BoundField DataField="itemid" HeaderText="itemid" InsertVisible="False"
ReadOnly="True" SortExpression="itemid" Visible="False" />
</Columns>
</asp:GridView>
<asp:SqlDataSource ID="SqlDataSource1" runat="server"
ConnectionString="<%$ ConnectionStrings:TestConnectionString %>"
SelectCommand="SELECT [name], [description], [price], [itemid] FROM [items]">
</asp:SqlDataSource>
</asp:Content>