At the moment in my ASP.NET webApp I have some resources such as some .pdf files or pictures in specific folder in the host . If any user know the URL of those files can access them from the browser , How can i manage access or ban anonymous user from those files ?
View 2 RepliesThis is really a couple of questions about preventing unauthorized attempts to access a specific file type. Here go the questions:How do I prevent users from directly requesting a type of file? Do I write an HTTP handler?After preventing a direct download, can my app still explicitly serve that file type? How?
View 1 RepliesI have an asp.net 4.0 site. I have CAS turned on for legacy support. But in CAS, is there a way to prevent a runtime loaded assembly from accessing the web.config file? I don't see a permission set that denies access to configuration information.
View 1 RepliesFor a church website I'm managing, there is a need to place audio files (sermons) on the website. There will be two categories of audio files; one will be a sample size of the audio file, around 5 minutes in length. The other will be the full-length of the sermon (30-50 +/- minutes).
I have decided the best setup would be to place the audio files on the server. I would then store the audio information, as well as the path to the audio file, in a database. I had thought about placing the audio files in the database as a BLOB, but it seemed inefficient. My concern, is with tools like Mozillza plug-in "Download Helper" , it is so easy to simply grab the media files off the server. This would not be a big deal, except we want to sell the full-length audio files. I am running ASP.NET 3.5 on IIS 7.
I have a class library and was to add a resource file to it to support both English and Spanish. Any tips as how I can do this? The language will be dictated by the user visiting the site. Would like to have to only load each resource file once and cache or set in static variable and avoid any overheads.
View 2 RepliesHow can I use an image or icon resource from global resource file in an asp:Image control to set the ImageUrl attribute?
View 1 RepliesIn our web application we need to keep various company's settings. For eg "DiamondProdRefIDCaption","Shippingpickup","ZipCodeCaption","DefaultCountry","AllowToEditInvoice", etcThese settings are different for various companies and are placed in web.config as key-value pair.Initially, we have tried do simplify this process by adding a company_settings table in the DB so as to allow us to add companies on the fly. However, this method makes it very difficult to add a new setting
<%$Resources:DiamondProdRefIDCaption%>
I'm using resources like this; " runat="server" />
Resources are maintained in a database and resourcefiles are generated when new translations are added. Sometimes bad references to keys happens. This results in error on the whole page.
How can I prevent the whole page from crashing when a resource does not exist? I just want a tiny error message where the resource lacks, like "Not found: Users.DetailsUserHeadline".
I also want to dynamically retrieve resources from code behind, by defining the key as a string "Users.DetailsUserHeadline" without any erros.
I am a newbie and trying to develop a Yellow-Pages like portal using ASP.NET MVC. I am wondering there will be some bad visitors who excessively request the portal pages to slow down my portal and to block request from other legitimate visitors. My current idea is put a nugget (an embedded code block) in master page to check the interval between two consecutive request. If the interval is less than 5 seconds (for example), I will reject/terminate to render the request.
My question:
What is the best way to handle this issue? If my idea above is applicable to solve this issue, what function must I call to terminate the rendering process (before doing resource-intensive job)?
EDIT 1:
Can we set this on server (IIS settings) globally instead of per application basis?
My Composite control implements IScriptControl interface.
ScriptReferences java script file does the client-side work, there I want to load a html file inside iFrame.
The Html file is an embedded resource:
([assembly: System.Web.UI.WebResource("Control.Resources.list.htm", "text/html")])
I pass the path of the html to the javascript file via descriptor property:
IEnumerable<ScriptDescriptor> IScriptControl.GetScriptDescriptors()
{
descriptor.AddProperty("iframe", iframe);
return new ScriptDescriptor[] { descriptor };
}
Where iframe is a string that contains the path from the webresource.
Now, in this html file I want to display few images that must be also loaded from resource.
The Question is how to access the resources from this html file?
Do I have to pass every image path as descriptor property?
I have Following code in Master Page:
with 5 pages in it.
(with 4th and 5th page is inside Admin folder)
No <authorization> are given. all are open to every user.
<%@ Master Language="C#" AutoEventWireup="true" CodeFile="MasterPage.master.cs" Inherits="MasterPage" %>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head runat="server">
[Code].....
When I run the application, 1st page, second page, 3rd page I get Url on page as:
localhost:2069/TestPage/FirstPage.aspx
localhost:2069/TestPage/SecondPage.aspx
localhost:2069/TestPage/ThirdPage.aspx
theycan be accessible.
also when i click on 4th Page, I get url as:
localhost:2069/TestPage/Admin/FourthPage.aspx
and 4th page will get displayed.But..When i go back to any other page, it will throw an error
"Resource cannot be found"
with URL as:
localhost:2069/TestPage/Admin/ThirdPage.aspx
How to avoid this Error?
I have a machine in MyDomain on which i have deployed the website and file server as virtual directory. For file server i have created an application pool with identity as UserName and Password. And file server directory setting as Integrated Windows Authentication instead of Anonymous Access. When i am accessing file server from outside the domain then it is asking for user name password. After providing the credentials it open the file. Now i am trying to access the file server from wbsite using the machine outside the domain.Before accessing i am impersonating the current user with user which is present in identity. But after redirecting to the file server url it is again asking the credntial. why it is asking the credential if i have already impersonated the user.
View 4 RepliesI have myown login page.If any user access any page directly(without login),i want to redirect unauthorized user to login page....How it possible.....Using Generic Handler is there any chance? or how can i do it ?
View 2 RepliesI am using VSTS 2008 + C# + .Net 3.5 + Silverlight 3.0 + ASP.Net to develop a Silverlight application (a video media player) in browser and the function is simple, just use MediaElement to play a remote video file.The remote server is Windows Server 2008 + IIS 7.0 + IIS Media Bit Rate Throttling Control.Since the request media URL can be discovered (e.g. from traffic sniffer), and I want to know how to prevent from download directly from the Url? i.e. I want end user to use my Silverlight media player application in browser to play the file, prevent them from download to local directly. Any easy and quick solution or reference code/documents?
View 5 Repliesi am using windows server 2003 and 2008 am about to install a web application on a server that is connected to other computers using simple wired network i.e. no active directory, no domain controller etc..
my question is:
is there a way to prevent mac addresses outside my specified list from accessing my application ? should it be through IIS or Web.config or should i put certain code in the page load events.another concern: if i use an SSL to secure my application, is it enough along with a reputable anti virus to prevent a virus to access my server through any network computer using my web application
The data that we display in gridview and details view can easily be scraped using automated tools. My question is if someone uses some automated tool and logs into the website and scraps data how can we find that? How can we detect whether a human is viewing the site or a tool? For example one way is by calculating the time up to which a user stays in page from which we can detect whether human intervention is involved. I do not know how to implement that but just thinking about this method. how to detect and prevent automated tools from scraping data from my website? I have used security image in login section, the user has to log in by entering username, password and security image displayed in the login section. Even then in home page a human may type security image and log in to the site and then use an automated tool to scrap data from the site!!When the recaptcha image appears after a period of time then that time alone the user may type the security image and again use automated tool to scrap data from the site. Actually, I have even developed a tool to scrap data from another site. So only i want to prevent this from happening in my site!
View 7 Repliesi have create web application for school management system...bt when i run my webside...(my welcome page is defaul.aspx bt if i want to acces studentdetail.aspx then i only enter url and i get studentdetail.aspx)
View 1 RepliesI have implemented a custom ErrorController with NoAccess Action returning the View "~/Error/NoAccess" (not inside the Shared folder).
I have also modified the web.config file and add a custom error "<error statusCode="403" redirect="~/Error/NoAccess" />" node.
Each time i enter to an anauthorized page, i get redirected to the logon page (even though i am already logged on). I would to modify the default asp.net mvc authorization functionality and each time a user tries to enter a page that is not authorized to get an "NoAccess" page instead of redirecting to the login page.
I have 2 master pages Default.aspx is from Site.Master and some more pages that are from Admin.Master, I have used the code that to prevent the user from going back to previous pages after logout.
Here is my code
function preventBack()
{
window.history.forward();
}
setTimeout("preventBack()", 0);
window.onunload = function () { null };
The problem I am facing Admin.
Master page i.e I have Home.aspx, AboutUs.aspx,Admin.aspx,AddItem.aspx I was unable to navigate between those pages also. how to solve this. I have tried other methods also, but still facing same problem.
I have a login page and a dashboard page. Now user first login and then redirect to dashboard page. User press browser Back navigate button and now it's again on login page.
View 1 RepliesThis is a small intranet site.
I am using Windown Authentication.
Using Role based (Active directory groups) authorization, I am able to control the access to various web pages. If an unauthorized user reaches a web page, a small popup comes up (as shown in the attached bit map) asking for credentials. If the user clicks on "Cancel" button on the popup, it shows "Access denied" error.
Instead of showing the standard "Access denied" error, I want to redirect to another .aspx page with a more meaningful message.
I have a signup page and Main page in my web site. i want to prevent an user to type directly the Main page URL, user should have access after signup/login.
View 1 RepliesHow to prevent multiple user to be logged in at a time using a user id ?
After login in to website, the same user id not login in any other system it gives alert msg User Alrdy Login.. and also i have another query If user do not click logout and directly close browser..
When I click signout I am redirecting to home page but when I click browser back button it is redirecting to previous page how to eliminate this......
View 1 Replieswant to create and use resource file in my application (VB.NET 2008). Can i use .resx file or should i convert it into .resources file? please tel me the steps to create and use resource file in VB.NET with sample code.
View 1 Replies