Question

I have a query string called propID and I wanna check if the passed value in it is a legal integer or not to avoid throwing an error that might reveal info about my database, how can I do it?

In other words, I want something like -but in vb.net- :

IF QueryString("propID").Content.Type = "int32" Then Proceed

Answer 1

Dim result as boolean
result = integer.tryparse(QueryString("propID"), myintegervariable)

boolean will return true if it parsed correctly (putting the value into your myintegervariable) and will return false if the parsing failed.

You can also write is as

if integer.tryparse(QueryString("propID"), myintegervariable) then
    //continue going along with myintegervariable
else
   //parsing didn't work
end if