I use a jQuery script to load data for my website with a asmx file (json webservice). How can I make sure that the webservice only serves data to my script and is not accessible outsite my website?
View 3 RepliesSetting the .Net trust level to Medium on a site will ensure that no code can access files outside the application directory.
I have an ASP.Net site that must run in Full Trust. I have configured my website in IIS to use its own Application Pool Identity [URL].
Currently it is possible for scripts/code in this app to read files outside of the application directory. This occurs because by default, accounts that are a member of the BUILTINusers group are able to read most files on the system, including c: and c:windows. It appears that Applicaion Pool Identity accounts are also members of BUILTINusers.
Is it possible to prevent file access outside the website folder while keeping Full Trust?
I have an ASP .NET web application which on the backend is talking to an ASMX web service. We have counted and the average wait time for the initial request is 20s. I am wondering if there is a way I can send the web service up to the server precompiled, thus negating the need for compilation.We have also noticed that IIS tends to recycle its worker threads and this also causes a compilation. The process itself is not accessed terribly often, but it needs to be much quicker when it is
View 5 Replieshow to prevent exe file from being uploaded in a website , even if exe file is inside zip file( exe file in a new folder and new folder is then zipped and uploaded)?
View 2 RepliesWhen I move mouse over the container panel, the child panel is displayed but as soon as i move mouse over the child panel, the mouseout event is triggered and panel get hidden.
This is simplified version of my code because panels are located inside gridview and therefore i can't use document.getElementById("panelchild") as it is (the js will get the specific id latter), but for now i want to make it work for this simple case.
This is the partial script:
<script type="text/javascript">
function ShowPanel(e) {
// e = e || window.event;
// var evtSrc = e.target || e.srcElement;
[Code]....
suppose we have a example.exe file. we first put that file in a new folder and then zip that folder with any zipping software, Can we prevent that zipped folder upload in a website?
how can we do that?
The data that we display in gridview and details view can easily be scraped using automated tools. My question is if someone uses some automated tool and logs into the website and scraps data how can we find that? How can we detect whether a human is viewing the site or a tool? For example one way is by calculating the time up to which a user stays in page from which we can detect whether human intervention is involved. I do not know how to implement that but just thinking about this method. how to detect and prevent automated tools from scraping data from my website? I have used security image in login section, the user has to log in by entering username, password and security image displayed in the login section. Even then in home page a human may type security image and log in to the site and then use an automated tool to scrap data from the site!!When the recaptcha image appears after a period of time then that time alone the user may type the security image and again use automated tool to scrap data from the site. Actually, I have even developed a tool to scrap data from another site. So only i want to prevent this from happening in my site!
View 7 RepliesIn dropdown when i select value(not text) "0" it should not go for postback,
to do this i am using e.preventDefault();
if i select other than "0" it has to go postback.
but,it is always going for postback ,the e.preventDefault(); is not working.
How can i achieve this in jquery?
return false; is also not working.
i am sure that i am selecting the value "0", i checked it by using alert();
I am building a sort of administration control panel which is basically just giving the end user the ability to manage the database through my app rather than knowing Management Studio. Creating lists of users, creating events that the users can attend etc, nothing too complex. So I am basically building the whole thing using JQuery AJAX with ASP.Net to make the DB connection and what not. My Jquery code just calls a different static method in my pages code behind for each different task, passing JSON back and forth.
From what I've seen results-wise so far, my interfaces are much quicker (almost instant) and even tasks on the server take less time to return through JQuery. But if you looked at my javascript code, you can see the "Page.aspxMyMethod". That means that people can access my methods just by sending a request from anywhere? Will forms authentication prevent this because it goes through an aspx page or what?
Im using an aspx page as the srcl for an image in the host page to serve a dynamically generated image to the user based on parameters they supply
ie
<img alt="" src="generateimage.aspx" id="imagegen"/></div>
Id like for people only to access the content via default.aspx and not the dynamically generated content generateimage.aspx. Any attempt to browse here directly should be redirected to an error page
Page:
[code]....
This code opens me a dialog box with Ok and Cancel button but it do not wait for user activity and post the page immediately and the label gets populated. I need to call the c# function based on user activity. If user clicks "Ok" label should get populated and if user clicks "Cancel" it should not call the c# function. How do I achieve this?
I want to show a confirm dialog when the user selects an item in a DropDownList. If the user presses "Cancel", I want to stop the postback. Here is the function I add to the onchange event:
function imitateConfirmUnload(event) {
if (window.onbeforeunload = null)
return true;
return confirm("Are you sure you want to navigate away from this page?
You have unsaved changes
Press OK to continue or Cancel to stay on the current page.");
}
And this is the relevant bit of code in my startup script to add the handler to the event:
[code]...
The problem is that the postback occurs even if the user selects "Cancel". If I move the handler on to the click event, it works. But it feels clunky to me.
Edit
Correction: it doesn't work onclick, because the dialog prevents selection, so when the user selects OK, no change has taken place, and no postback when you want it!
Edit 2
The DropDownList is inside an UpdatePanel so that may affect behavior.
i have some jquery code that I use to toggle a panel (pnlAddBuilding)
In this panel there is a dropdownlist that does an autopostback. When the postback occurs the panel closes.
How do I keep it open?
[Code]....
How to Access 2007 data driven website SELECT Article, ArticleContent, Category
View 3 RepliesI want to implement Login session , in which one user can login from one device only ..and if on other device try to login with same ID the First Device get an Alert..
View 1 Repliessuppose we've created a web app for our customers.
how to prevent to access web page code (aspx code or behind code) for our customers ?
how to implement security and licensing information for web apps ?
This is really a couple of questions about preventing unauthorized attempts to access a specific file type. Here go the questions:How do I prevent users from directly requesting a type of file? Do I write an HTTP handler?After preventing a direct download, can my app still explicitly serve that file type? How?
View 1 RepliesI have TextBox which
id="test" AutoPostBack="true" OnTextChanged="server event"...
On Client Side I write logic if fail prevent Server Event fire.
I try
[code]....
I can see the alert fire, but can not prevent the server side event fire.
i have a dropdownlist whose autopostback = true , but for some selected text i do want tht the autopostback really shouldnt fire .. using jquery...
however i hav really tried out using removeAttr() to remove attribute and then evt.preventDefault() which ofcourse should prevent the postback...
also tried to set the evt.returnValue = false so that the value returned by the dropdownlist change event is false ...
d code snippet i tried out is like :
[Code]....
none of the above resulted in stopping the postback..
I am creating my application in asp.net 3.5. I have to make my Data Access layer, in which I am doing the traditional method of fetching/updating the data. Which is SqlConnection than SQLCommand, than SQLadapter. Will there be any other way I can create my DAL layer easily.
Specification.
My website is small. Approx 7-10 pages. Database has around 80 tables.
What I know:
Linq to SQL - I don't want to use it because I am not fully aware about the LINQ statement and I need to develop the application really fast. [3 days :-( ]. Also, there are 100% chances that the table structure will be altered in future. Enterprise Library: It will take too much time for me to integrate to my application.
since a have an app, that makes heavy use of AJAX (jQuery), I faced a problem of session timeout.
After a little bit of googling I found something like :
[Code]....
In the refresh page I have just this code :
[code]....
jQuery indeed calls refresh page, writes "success", however- session times out.
Am I doing wrong something? Is there a better way to prevent session time out?
If my application URL is this:
http://localhost:51422/MyApp/Pages/FormView.aspx
I want 2 things:
1- I don't want any people to delete "...../FormView.aspx" and go to this[URL] and browse the directory pages and folders names.
2- If anybody tired that, the application should redirect him to login page or home page.
I want to have a PHP login form on my website. When the user enters a username and password and clicks submit, they should be directed to a remote website logged in (therefore skipping the login form on the remote site).
As mentioned in the title, the remote site is built using ASP.NET.
I've tried to search for a solution this but really not finding.
I have a table for labels in SQL server, in this table i hold all the text for all the labels i use in my website. The reason i am doing this is because i creating a bilingual site, which will display two languages on one page at the same time. The other language being arabic.
So what this means is that whenever a page loads, it needs to go and fetch the text of the labels from the database to display them on the page.
the way i have done this is that i have created a class called labels, and in this class i have created two methods, one called GetEnglishLabel(ID) and the Other Called GetArabicLabel(ID). Both methods take an ID, which corresponds to the id in the sql server database. Each of these functions is using LinqToSql to get the text for the label for the given ID.
My problem is that for every label i need to call this function, so as you might imagine on one page i might have over a hundred calls to these functions on page_load.
I am trying to use confirmation dialog from jQuery UI.
I ran into this problem: how to trigger correctly the dialog and at the same time prevent trigger OnClick event specified at button until user click on Yes or No buttons at dialog?
In the example below are two ways how to popup confirmation. Lower one works well. It's a classic JavaScript confirm dialog. When I try to use the jQuery UI dialog, it displays a dialog but allows it to run the event assigned at OnClick (here by using Command, but I suppose there is no difference. Hope I am not wrong.). The piece is taken from the ASP.NET Repeater control btw.
[code].....