SqlDataSourceView.Filtering Event
Assembly: System.Web (in system.web.dll)
public: event SqlDataSourceFilteringEventHandler^ Filtering { void add (SqlDataSourceFilteringEventHandler^ value); void remove (SqlDataSourceFilteringEventHandler^ value); }
/** @event */ public void add_Filtering (SqlDataSourceFilteringEventHandler value) /** @event */ public void remove_Filtering (SqlDataSourceFilteringEventHandler value)
In JScript, you can handle the events defined by a class, but you cannot define your own.
Not applicable.
Handle the Filtering event to perform validation operations on filter parameter values before the SqlDataSourceView object performs a filter operation. You can cancel the Select method by setting the Cancel property of the SqlDataSourceFilteringEventArgs object to true. The event is raised only if the FilterExpression property is set.
Security Note: |
|---|
| You should validate any filter parameter value that you receive from the client. The runtime simply substitutes the parameter value into the filter expression and applies it to the DataView object that is returned by the Select method. If you are using the FilterExpression property as a security measure to limit the number of items that are returned, you must validate the parameter values before the filtering occurs. |
For more information about handling events, see Consuming Events.
Security Note: