HttpHandlers / Modules :: Securing A HTTP Handler That Returns Xml?
Apr 6, 2010
I have a HTTP handler that returns a GeoRSS feed (type of XML) when called. This handler is called from a javascript and the returning xml is consumed directly by a Virtual Earth (bing) map control on the same page. I am Encrypting/Decrypting URL parameters but any one can see the source html, copy the url and get access to the xml feed.Since the call is from javascript how can I prevent unauthorized access to the HTTP handler?
i redirect a page from http to https using http module begin request handler .i am calling webservice using ajax but it is saying webserice not defined .which otherwise works fineits work fine when rediect page in page_load instead .but i need to add function for https to http in every page. i still not know why ajax is not working when i use http module for redirect
It is working absolutely fine with this root folder('myroot'). When we change root foldername to "myroot.net" handler not responding.I have checked it by RouteDebugger and it shows thatRoute: NO MATCH!Matches Current Request: True
When I have a HttpHandler class in C#/ASP.NET mapped to a file extension in IIS any file with that extension fails to download/display in web browsers (it's downloaded as a 0-byte file in some browsers and nothing at all in other browsers). After removing the application mapping for the HttpHandler in IIS so it doesn't call the IHttpHandler class in C#, the web browser downloads the file successfully.
This was tested with an IHttpHandler class in C# that has an empty ProcessRequest method.
This is kind of cross-post; however, can a custom http handler be automated to run either using a timer or a filesystemwatcher to post an xml document to another server (with no human interaction)?
I have a form with a server side button, clicking on which session variable is added Session.Add("ABC","123")After this (in same postback event), I redirect user to a site, which returns user back to my site. And I still have session "abc" available to me.NOW, In another scenario I am trying to do the same thing but in a handler. I.e.User clicks a clinet side button which redirects users to sameSite.xyz. Handler of xyz adds session variable like above and redirects user to the other site. But, this time when user returns back from other site, my session is lost. How can I imitate scenario 1 with handlers?
How do we findout the whether the application is using any HTTPModules and httphandler in the applicaion?Is there anyway to findout from the url without checking the web.config file?
I have 50 sites for 50 states. When a company uploads their contact info their image is stored in a folder relative to the site they are uploading from. When you view this company on the other sites the image is not present. So, I was thinking I would store the path of where the file is originally and then access it through the handler, but I can't seem to get the handler to recognize locations other than virtual directories.
a silverlight app sends an image to a webservice which store the image in a database and then a handler retrieves the image from the db to display it... quite common so far.
Everything is working absolutely fine on my test server (IIS on my development machine) but, as soon as i try it on the production server : no way, the image is never displaying (in any browser). Firefox says that it cannot display it because it contains error...
I tried to download the database from the production server just after saving an image to the db and, locally, the image is displaying...
I have a gridview and in it is code to display an image
[Code]....
This works fine for pass one variable. but I need to send two variables 'ImageNum' and 'refID' to the Handler.ashx page, any ideas how, tried a few things in last few hours and as yet no joy!
Is it possible to add a messagebox to an ASHX Handler? I used a handler to pass data from a Web Service to an internal system and need a messagebox to pop up to ask the user to choose from one option or another.
It is good experience by reading posts/discussions so im asp.net programmer i need the knowledge of how to work with http handlers? Where can we use them and what are exact scenarios in our requirement?
I have created a dynamic signature for our members in Asp.net 2.0 with VB code behind that they can use as a signature in various message boards using an http handler.This is the first time I have evered used a http handler and I am probably missing a step on how to use it.The direct url to the signature is: [URL]where the ID is a particular member. This works fine on most message boards and if you copy the link directly in a browser window, but not in other message boards.In order for this signature to work on all message boards, the url syntax would need to be as follows:[URL] or something similar where the URL does not have question marks, equal signs and the file name ends in .png .How can I go about doing this where the link will go to my http handler and overlay text, etc.
I am having an Asp.net Web application in .Net 3.5 Framework, deployed on IIS 6.0. Obviously we have used Http Modules in our application. The problem is that we are having many entries specifying the message "Http Module is getting Initialized" Now, I would like to know when does an Http Module get initialized? I mean is there any specific reason? Also, is there any case of recycling of http module?
i have a application which use to store video in sql databasei want to have a function which should have return type of video so that i can pass it to player in next page, for that i have retrived it as byte stream but dont know how to return it as video file.if i am going wrong then suggest me some other way.Note video are based on authentication so no way to switch to file system
i have a custom handler which captures user's book mark entry. To debug this handler, i have created a file "test1.txt" in code behind which saves the user entry. After the debug, i removed the text file (test1.txt) then re-complied the web app and deployed new DLLs for the site. But, the site is still looking for test1.txt file. i dont know how to confirm if the handler is really removed from the new DLL. Also, looked at the handler code behind file and didn't find any entry with test1.txt. So,
I have an Handler.ashx file and on .aspx page load it calles the .ashx file for image reading. I am attempting to pass a session from the .aspx file to the .ashx file in order to make my query of grabing the image secure. The problem is that everytime I call a session: HttpContext.Current.Session["ID"], the value is returning null or errors saying the o so commong "Object reference not set to an instance of the object". I have tried a couple ways of grabing the session:
none of them are giving me the ID session set in the .aspx page. should i be using Server.Transfer instead? is there a way to grab a session variable set in a .aspx page and called in a .ashx page?
