I have an app using iis7 and the urlrewrite module, it take friendly urls and converts them to queries like this: [URL]
and converts it to: [URL]
the question I have is that will looking through my server event logs I notice that some ips are calling the following:[URL]
do you think this is the urlrewrite module messing up or is somebody trying to hack my site.
I'm uploading xls file onto my server using ASP.NET VB. Should I take some precautions so that not one would upload some hacking script to hack my site using this upload?
View 14 RepliesI have one web application that manages 20-30 websites (one asp.net engine loading different templates based on httphost)Im redirecting non-www requests to its www equivalent in my web.config using UrlRewrite.
<rules>
<rule name="301 Example Lazy Domain" stopProcessing="true">
<match url=".*" />
<conditions>
<add input="{HTTP_HOST}" pattern="^example.com$" />
</conditions>
[code]...
There is a strange behaviour with my web app which resides on the deployment server. This problem does not appears on the production enviroment (using the VS build-in development web server)
I am using URLRewriter and forms authentication on my web app. URL rewriting is performed by an http module on AuthorizeRequest. Also, runAllManagedModulesForAllRequests is enabled.
When I am trying to access some specific pages (NOT ALL OF THEM) with a rewriten url, IIS 7 returns me an 404 error.
Here are some of the rewriting rules:
Can be accessed BOTH rewritten and original url:
<rewrite url="^/home.aspx" to="/ASPX_FILES/home.aspx" processing="stop" />
<rewrite url="^/product/(.*).aspx" to="/ASPX_FILES/item_details.aspx?id=$1" processing="stop" />
[Code]....
I am working at a site not orginally devleoped by me. The problem is that all the pages are working fine and have no problem at my local site. but the site is not showing any content at live site from database. Niether it shows an error for it. How can I find the problem?
View 7 RepliesI've got a DropDownList and I'm trying to prevent it from being used as an attack vector. Can I assume that the user is unable to actually change the values of the DDL and postback to the server? At the moment, I get this ASP.NET error message thrown if I try and change the packet after submission:For security purposes, this feature verifies that arguments to postback or callback events originate from the server control that originally rendered them.Am I right in thinking that this is due to the integrity being compromised in the viewstate hash?
View 2 RepliesI am neither a server administrator nor very knowledgable about how to configure IIS, so I have the following problem:
My client hosts their public website from their own internal server running Server 2003 with IIS 6. The current website is a .NET 1.1 application configured as a website in IIS. Within this site a separate virtual directory configured as an application runs a separate .NET 1.1 app that serves as their online webstore.
I've been tasked with upgrading the website (not the webstore) to .NET 4 and getting it installed and working on their server. My initial plan was to simply change the existing websites home directory to the new home directory from the IIS admin console and be done, but then I read that this would break the application directory that hosts their online store because .NET 1.1 applications cannot be nested within .NET 4 applications. Can anyone confirm this?
In quite some scenario's, placing app_offline.htm in the root is just right: you do some updates, the message appears while updating, and that's that. The idea is, as Microsoft puts it, that before anything is called, IIS first checks if app_offline.htm is there and if so, it cancels everything and displays it.
So for so good, but in many situations it doesn't work:
When you have a compile error in an ASPX page and a user links directly to it When you have conflicting assemblies When you have a parsing error in your web.config In the midst of removing / uploading the entire site.
A direct link to a static HTML page is still displayed as suchm File-not-founds, access-denieds are thrown before the message is shown Possibly more scenario's exist that fail. My point is: for any serious updating work, app_offline.htm is not suitable. I sometimes create a redirect in IIS, to another site, but another site may not always be available and it can confuse users.
Ideally, I'd want to keep the current location in the url location bar of the end-user, show the message, and have the page auto-refresh each minute to see whether the site is back, so that the user continues where he left of when the site comes back. While technically easy enough with a static page, it will fail for the above mentioned reasons the minute an error is thrown.
I'm using this way to rewrite my urls.
[URL]
rewrite url="^.*-n([0-9]+)/?$" to="~/News/ShowNews.aspx?NewsId=$1" processing="stop"/>
I want it to looks like I'm using subdomain. I don't want to use subdomains beacuse problem with paths.
Is there an auto hacking software that tries to hack my localhost asp website? I need this to know my weak points in my website.
View 1 RepliesI'm using Intelligencia.UrlRewrite in my code, I'm creating an e-commerce website. On the localhost all works well. This is how it works on the localhost "http://localhost/eish2o/Reverse-Osmosis-with-booster-pump-p116/" When the add to cart button is pressed it changes to "http://localhost/eish2o/Product.aspx?ProductID=116". On the server it changes to, "http://localhost/eish2o/Reverse-Osmosis-with-booster-pump-p116/ProductID=116" and then gives an error The page cannot be found. It is all the same code.
View 5 RepliesI am having serious issue running a MVC web site from IIS 6 especially with Windows authentication mode. I know its very simple but missing some ting between. Succeeded configuring MVC on IIS 6. Now Trying to enable Windows Authentication mode on MVC Web Site, Steps included in my configuration
- enabled windows authentication mode in web.config
- Enabled Integrated Windows Authentication on IIS web site under Directory Security.
- Given permissions to a Domain group (eg: asiaDomainGrp) [Read, Write] Do i need to add ASP.NET Machine accountIUSR_<machines name> under this?
During the intial loading, I am trying to query Active Directory to get authenticated user's full name to display on default page, this is not success full due to some issue, later I changed to "HttpContext.User.Identity.Name". Now I could able to access Default page from the web server, but real heck is here. For some reason IIS is using NT AUTHORITYANONYMOUS LOGON.
[Code]....
I have separated two servers as Web server/Database server.
Situation:In Web.Config we have CustomErrors turned on with redirectMode="ResponseRewrite".In Page_Load of our MasterPage we access the Session property of the Page.
Problem:When an Error occurs on any page the user gets redirected (via Rewrite) to our Error.aspx Page. There in the Page_Load of the MasterPage we access the Session and get an HttpException telling us to enable SessionState. But we have the SessionState enabled, definitly.
Question:How can we access the session after a UrlRewrite in the Page_Load Event of our MasterPage?
I am using IIS7's URLRewrite feature to hide the .aspx extension in my ASP.NET WebForms application's URLs.
I'm using the following configuration:
[code]....
I can now browse to:
[URL]
and this is rewritten to:
[URL]
This preserves the "pretty" url in the browser address bar. I have also updated all my links on the site to use the extensionless URLs.
The problem is that the underlying .aspx pages can still be accessed directly and I'd like to prevent this.
If a user browses to [URL] I'd like it to either redirect/rewrite to [URL], or at the very least just return a "Page not found".
Update:
I managed to get this working by redirecting all .aspx pages to the home directory. This isn't ideal as I'd prefer to send them to the non-.aspx version, but it will do for now.
<rule name="Block .aspx" stopProcessing="true">
<match url=".aspx" />
<action type="Redirect" url="/" />
</rule>`
How do I rewrite and redirect URLs that directly address .aspx pages to my friendly URL format?
I have created a site, now I want to upload it on the server. I do not have the experience of uploading the site on server, I am using ASP.NET C# MySQL.
View 3 RepliesI am using WIX 3.6 for VS2010 to create our MSI's for our web application setups. This is all working fine and all in terms of deployment and uninstall.
I recently allowed the user to specify the virtual directory and application pool names to support side by side installs. This is all fine as I have created my own setup bootstrapper.
The issue is with uninstallation.
If the user does not specify the names and leaves the default values, it will install successfully.
The minute the user updates the names from the defaults, the install process will not remove the app-pool and virtual directory. This is what I have found consistently with my testing.
i am facing very unique problem.i have one site ,i am hosting it on two different server.but on one server look and feel of html,css proper while on another server html ,css ,menu,javascript not working properly...html and css get distorted..i am not able to find wht reason behind this..
View 3 Repliessteps for using IIS to host a website I created in visual studio? I have the files in a folder called HelpDesk under inetpub and have the path correctly specified in IIS, but IE is stating it cannot display this webpage.
View 2 RepliesIs there a way to use the ASP.NET Configuration to configure a site once it is hosted? Or can I manually enter data into the tables it creates? Anybody have any useful links on this?
View 3 RepliesI had first build an database and populated it with various information, set some properties related to FTS and other things.
Now, in the asp.net MVC application, I am able to add the database ServerExplorer->Connect To Database-> Data Source= MS SQL SERVER->Server name->OpAmp-pc. Now, I was unable to add the database by copying the file in app data folder.
My doubt it how can I share the website+ database with my fellow batchmate or put the whole website online.
Build->Publish Sirte, didn't solved the pupose.
I've created a site using Visual Web Developer 2008 Express Edition (ASP.NET 3.5) but the server hosting it runs ASP.NET 2.0. I'm getting some odd errors running the live site. Is there anything I need to be aware of? Do I need to make any changes to the web.config file (that was generated in VWD) or anything else?
View 2 Replieslooking for a better way to manage a web site project with a hundreds pages and controls. ¿Is it possible to put pages in separate .dll's? ¿Subdivide the project somehow? ¿Can IIS help in this purpose? ¿Is it possible to update part of the project without install the whole package?
View 2 Replieshow can i upload my asp.net site to godaddy i tried but showing custom error
i don't know how to set iis in godaddy
I am using the Standard edition of VS2008 to develop a website locally. Now, I am ready to upload the website to a remote server, but I cannot find any output to transfer. I clicked on the "Build Web Site" option of the "Build" drop-down list and got a "Build Succeeded" message, but nothing else.
I only found a file of type "Visual Studio Solution user Options". It was in a folder under a "Projects" folder within the "Visual Studio 2008" subdirectory. Does that one file contain everything needed for the website to function on the remote server?
I also found another folder along with the file named "PrecompiledWeb". This folder contained web page files and related static files of a previous precompile operation, but no newer files. There was also a "bin" folder with old compiled files and application extension files. I cannot find newly compiled files anywhere. What am I doing wrong?
I am making an ASP site useing Visual Webdeveloper 2008 express edition. When I have it display my site it works fine. When I try to move it over to my server I get ...The XML page cannot be displayedCannot view XML input using XSL style sheet. Please correct the error and then click the Refresh button, or try again later.
A name was started with an invalid character. Error processing resource 'file://cybrary-s5/Business/IRIS/Businesssystems/Ke...
<%@ Page Language="VB" AutoEventWireup="false" CodeFile="Default.aspx.vb" Inherits="_Default" %>
-^
Can anybody tell my why this is happening and what I can do to correct it.