<script>alert(1)</script>

Question

<script>alert(1)</script>

Answer 1

You'd need to replace "\\" with @"\" :

ConfigurationSettings.AppSettings["Location"] + @"\" + Format_Date + @"\" + custName + "(" + pId + ")" + @"\";

Not really worth doing.

Answer 2

You are saying to have the value as: C:\ntemp\ntestt1\ncustomer? This will cause my value to

be C:\temp\testt1\customer in the database?

Answer 3

How would a verbatim work for the following: ConfigurationSettings.AppSettings["Location"] + "\\" + Format_Date + "\\" + custName + "(" + pId + ")" + "\\";

Answer 4

No. I'm saying to pass this C# string:

    "C:\\temp\\testt1\\customer"

to the database i.e. with doubled backslashes.

You could also use a 'verbatim' string (preceded by @) with single backslashes:

    @"C:\temp\testt1\customer"

Both of these represent the same string in C#.

 

Answer 5

Just save the string inclusive of the doubled backslashes which are needed in C# to distinguish the use of the backslash in escape sequences (such as \n, \t etc).

It should then save in the database as a path with single backslashes