Microsoft Sharepoint Products and Technologies Resource Kit eBook

The SPProperty Bag Class
Chapter 33: The Windows SharePoint Services Object Model 935
The SPPropertyBag class of the Microsoft.SharePoint.Utilities namespace stores arbitrary
key-and-value pairs that contain custom property settings. First you have to make
an instance of the SPGlobalAdmin class in the Microsoft.SharePoint.Administration
namespace. Next the Config property of the SPGlobalAdmin class gets a global configuration
object, SPGlobalConfig. The Properties property of the SPGlobalConfig class
will contain global configuration settings that are used in the Windows SharePoint Services
deployment. In the following code example, we will add a key-and-value pair to
our property bag by using the Add method. Modifications to the property bag will not
be saved until we call the Update method of the SPPropertyBag class.
string strReturn = "";
SPGlobalAdmin myGlobalAdmin = new SPGlobalAdmin();
myGlobalAdmin.AllowUnsafeUpdates = true;
SPGlobalConfig myGlobalConfig = myGlobalAdmin.Config;
SPPropertyBag myBag = myGlobalConfig.Properties;
int myValue;
try
{
myValue = Int32.Parse(myBag["mykey"]);
myValue++;
myBag["mykey"] = myValue.ToString();
}
catch (Exception err)
{
myValue = 1;
myBag.Add("mykey", myValue.ToString());
strReturn += err.Message;
}
myBag.Update();
strReturn = myValue.ToString();
output.Write(strReturn);
The SPEncode Class
The SPEncode class from the Microsoft.SharePoint.Utilities namespace provide static
methods so you do not need to instantiate the class before using them. You may use
the methods of the SPEncode class to help prevent malicious script blocks from
being able to execute in applications that execute across sites. In code that calls
members within the Windows SharePoint Services assembly, the encoding methods
of the SPEncode class are more effective than methods of the System.Web.HttpUtility
and System.Web.HttpServerUtility classes. The SPEncode methods for encoding URLs
and HTML can be used to encode a larger set of characters than the methods of the
HttpUtility and HttpServerUtility classes.
The following code example makes use of the ScriptEncode method to escape
characters that would otherwise conflict with the script. For example, a quotation
mark (“) is replaced with \”.
strReturn = SPEncode.ScriptEncode("alert(\"hi\")");