How To Prevent Changing State Of Controls On The Client
Jul 9, 2010
What I'm trying to achieve is basically to prevent client-side change of the state of my server controls.
For example, let's say that I have a business web applications, that shows some data in read-only fashion to the regular users, but allow the admin to edit the data. In such case I use regular ASP.NET server controls, but disable them for the regular user (enabled=false). The problem that I have is that any advanced user could change the disabled control on the client using short javascript code and check the supposedly disabled and unchecked checkbox.
what is the easiest way to prevent this client-side change. I thought that when the control is disabled before rendering the page, the following postback would not touch this control at all, no matter how you change it on the client. Did I get terribly wrong?
I have deployed a Web application on IIS 6. I want to prevent my server from setting cookie on the client browser. I am using the following setting on the web.config file.
However, it looks like its creating a default cookie named ".ASPXAUTH" in the client machine. I dont want my application to create any sort of cookie.Is there anything specific I need to do in web.config?
The problem is when am assigning my session table value to newly created table and if now am changing any coloumn name then the session table value also changing.
But my question is am assigning Session value to newly created table so how should session value should be affected?
I change the value of the boolean variable to true but then I have to refresh the page by clicking another button or two. Once the ASP.NET page refreshes, the value returns back to false when I want it to be true. How can I prevent it from changing the boolean variable to the original value and keep it as true. What would be the C# syntax for this.
public partial class _Default : System.Web.UI.Page { bool plus = false; bool minus = false; bool multiply = false; [code]...
I have some validation JS code on client, that must be executed befor PostBack.If this validation code return 'false', postback is needless.How it can be disabled?
Assuming that I can't modify the code-behind file for a site (it's a compiled site), I've encountered a bug of mine that can only be fully fixed with a complete recompile and redeployment. Unfortunately, we are on a strict release schedule and we can't deploy for another 11 days.
The bug is that I'm doing a check on a drop down to make sure that the value that is selected isn't "-1". However, I didn't use drp.SelectedItem.Value, I used drp.Items[0].Value. Total bonehead move on my part. The bottom line is that drp.Items[0].Value is ALWAYS -1, so they page gives an error to the user stating that they need to choose an option for that drop down. Which they really have, but my bug is not letting them continue in this process.
So, I'm trying to determine if I could, client-side, replace the value of the first drp item to the actually chosen value of that drop down.
I've gotten this all to work client-side, but when the form is posted back, the value is still the value that was populated from code, meaning "-1".
I'm sure this is because the drop down is loaded and all the values are held in ViewState.
In ASP .NET 2.0, I've created a user control which is meant to work as a dropdown or popup by using an <input type="button" id="btnTogglePopup" runat="server" style="display:inline"... /> and <div id="divPopup" runat="server" style="display:none" ... /> the rest of the controls are contained inside this div, and they do mantain their values between posts, etc. This button 'runs at server' but it's not intended to post back or submit.It just toggles the popup (div) visible/hidden using Javascript client code by setting the div's style display property to "none" or "block" The problem I'm having is that when a page containing this control posts back, the state visible/hidden of the div is not maintained. If the user had the popup open, after the postback, it will display closed.I've read a bunch by now about ViewState & ControlState, and have the save and load contol state methods working, but when I step thru them they load old values (setting the popup to hidden all the time),and the popup doesn't work! I've come to think that b/c when the button is clicked,the visible state of the div is changed in client code w/o a postback, maybe I have to maintain this state info in a hidden fiel or something like that?At the same time I don't want to have a hidden field if it's unnecessary,and I may just doing something wrong.
As you know viewstate can recognize as a vulnarable item if we do not encrype it I know how to encrype the viewstate that I define in a web page but my problem start from here I downloaded a software which help you to exract the unencrypted viewstate of every website the link of that software is as follow:
[URL]
but when I make even empty page without viewstate ,this program can extract the viewstae of my page but if check some website like google ,yahoo,amazoon
But my Website has one thing that still causing problems... the Website calls an ActiveX. Some time in the user navigation the user clicks in a button and a JavaScript loads an ActiveX with the code bellow.
var objDownload = new ActiveXObject('XXXXXX'); objDownload.ActiveXMethod();
This ActiveX makes a huge processing and this is why I'm want the trick to avoid the session expires. I tested the both above solutions but when the ActiveX is running no refresh happens. Can anyone help with this problem? How the ActiveX can be running and the IE makes the refresh?
I am currently designing a multi-tenant website where many clients will share the same code base but have their own "look-and-feel" to the site when the are logged in. This is nothing new, but I am looking for ideas on the best way to implement the solution using ASP.NET and MVC3 (which looks awesome).
The main thing I am looking at now is how to change the CSS style-sheet and text for the labels and static portions of the pages per client. So this would be something like localization where I would want to just have a string in the Razor template, like @FirstNameLabel and then at runtime it would grab the specific value setup for the logged in client for that variable.
I know I could implement this with a database, but I am just making sure there isn't some clever way to do this in .NET (I have been in the Java world for several years now). It seems like I could possibly use a variation of localization or globalization with ResourceManager, but I haven't found any examples that were not based on cultures, which I do not want/need at this time.
Environment: IE7, ASP.NET 3.5 SP1, C#, IIS 7, intranet, SQL server 2008 R2 enterprise. I'm trying to implement a page with 3 pictures in it (each picture is up to 1MB, jpg format), and switch them with the next 3 each 250 milliseconds. I thought of several methods for implementation:
1. Store all the pictures in a virtual folder, then switching the src attribute of img html element by javascript, and manipulate caching by storing the next 9 pictures also as img element, but with display:none for css.
2. Store the images in a database table and than send it to the client using DIME (don't know how to do it yet).
3. Store the images in a database table and use custom http handler to retrieve the picture (don't know how to do it yet).
4. Client invocation of webservice? Which of the above results the best performance? Is there another method for caching pictures?
Is there a way to change the values for these two attributes on the client side and have it reflected on the server side after the postback. I tried it but it does not seem to work. I wanted to have one button on the page that I would delegate submits too, and assign these two arguments on the client side. Seems like not possible. Assuming there is a button named "cmd" in the form
How to prevent Session.Timeout extension on certain event from codebehind?
What I do - I have Session Timeout configured in Web.config file for 10 minutes. Also, I have in my webpage1.aspx, an ASP.NET AJAX control ModalPopup which shows into the page 9 minutes after the user stopped sending requests to webpage1.aspx. I did this with this code:
[Code]....
[Code]....
So, my initial calculations was that 1 minute before the session ends, i'll inform the user something with the ModalPopup. The problem is that when this Timer1_Tick event triggers, the session.timeout renew ( or extends ) and the session ends 10 minutes later (if user still don't send any request from his browser).
Can I write code in Timer1_Tick event which prevent session extension?
I'm using ASP.NET Session State to keep track of logged in users on my site. However, one problem I'm running into is that by default ASP.NET session cookies are set to expire when the browser closes. I've tried setting my own ASP.NET_SessionId cookie and modifying the cookie's expiry using something similar to the following code:
Let's say you had a page like an eBay auction, where some of the content (top bidder, bids, history, etc) needed to be up to date but other sections would likely never change, like the description. I'd like to know the "right" method for getting that static section cached.
The "cheezy" solution would be to code it up in a separate javascript .js file as a bunch of "document.writeln()" calls, but that's plain evil and ugly.
If I made it a Content section of a master page, that might get it cached at the server, but the client has no way to know that this particular section of the page will never change.
I could IFRAME it but I don't always know the dimensions.
I'm sure this has all been done before, and as much as I love my own wheels, I'd rather not reinvent this one :-)
I've been working on a task to add a validator to compare the values of two text fields in a ASP.NET 1.1 application.
It uses validators already, so the best approached seemed to involve a CustomValidator. I was inspired by the following example:
[URL]
I got the server side validation working - now I'm trying to add some client-side validation but I'm having a strange issue.
When I click in either of the two text fields, the value of the txtFinalGrade field is overridden to either "true" or "false". I've been having a tough time tracking down the code that's causing this. I tried using the IE Developer Toolbar to trace the script - as well as FireBug in Firefox (though this is an IE-only app) and I'm still trying to figure out what's causing this to happen.
Since I think this is a JavaScript issue, I'm posting that part of my code:
[Code]....
Anyone have ideas of things to try? Anyone have similar issues with textboxes being set to true/false when working with custom validators?
i am using a multi selecting file upload control which is postBack free.
I am using session timeout.
My problem is that during files uploading my session got expired. Bcoz my uploader not being postback so i can't enhance session timeout. and while uploading my session got expired and process was not ompleted, causes some imp files could not uploaded.
I in page load i change the checkstate of checkbox false to true or true to false, in turn which i expect to fire the check_change state but seems not firing the event
protected void Page_Load(object sender, EventArgs e) { chkDegisim.Checked = true; chkDegisim.Checked = false; } protected void chkDegisim_CheckedChanged(object sender, EventArgs e) { int a = 1; } when i put a breakpoint to chkDegisim_CheckedChanged, it does not fall into the event chkDegisim_CheckedChanged. chkDegisim's autopostback is true and i have declered chkDegisim_CheckedChanged event in aspx.
why it does not fire chkDegisim_CheckedChanged event?
I have a list of items on an ASP.net page. That list is selectable in that whenever the user clicks on one, the page does a postback and the server code stores the index or some unique identifier of the picture in a ViewState property indicating that it is currently selected.
I would like to minimize the load on the server and therefore I would like to store the index or unique identifier representing the image in some way on the client side. The best way I can think to do this is to store said information in a hidden field ), however I had two questions about this before I go crazy:
Is this a security risk in any way, shape or form (i.e., exposing implementation details of the page)? Is there a better/best way to do this that is more industry-standard? Does ASP.net provide a framework to do this that is cleaner than my idea? Seems like this would be a fairly common requirement to me...
I have an application whereby a user browses to an Ajax enabled page, sets up some filters, and then clicks on download report. When the user clicks on this button, they are redirected to a Download.aspx page, which builds up the report and appends it to the response as binary (the file may either be zip/pdf or excel). The issue I am having is that everytime the user goes to the page and hits the download button the warning message from IE pops up "To help protect your security internet explorer has blocked this site from download files to your computer". This is not a huge issue, but the problem is that when the user clicks this warning to accept the file, it reloads the page, and all my filters are lost, so the user has to set up all the filters to filter out the data they dont want and then re-download the file.
The interesting thing is that I thought I could track the filters using session variables, so that when the page reloads after accepting the warning message it could be restored, but IE for some reason is not loading the page in the way it should, and so the Page_Load method is never fired when IE reloads it after the user accepting the warning, so I cannot restore the filter settings on the page because I have no event to do it from!
I have searched and searched for a solution.. I have tried changing the mime headers - I am using content-disposition tag set to "attachment; filename=report.zip", I have tried changing the mime type descriptions to different things to see if I can avoid the warning but to no avail. I have tried using an iframe but couldnt quite get it to do what I want it to do, the page was still being refreshed..
I'm wondering what the best practice is in reporting back to the browser about application or model state errors that would be displayed to the user. Can you throw an exception and handle it in the error handler of the jquery post? For example, consider this method:
[HandlerErrorWithAjaxFilter, HttpPost] public ActionResult RetrievePassword(string email) { User user = _userRepository.GetByEmail(email); if (user == null) throw new ClientException("The email you entered does not exist in our system. Please enter the email address you used to sign up."); string randomString = SecurityHelper.GenerateRandomString(); user.Password = SecurityHelper.GetMD5Bytes(randomString); _userRepository.Save(); EmailHelper.SendPasswordByEmail(randomString); if (Request.IsAjaxRequest()) return Json(new JsonAuth { Success = true, Message = "Your password was reset successfully. We've emailed you your new password.", ReturnUrl = "/Home/" }); else return View(); }
Is it correct to throw an exception in this case when the user is null? Or should I instead do this and handle it in the success handler of the jquery post: return Json(new JsonAuth { Success = false, Message = "The email you entered does not exist in our system. Please enter the email address you used to sign up.", ReturnUrl = "/Home/" });
