apart from checking the file type and file size both server side how can i avoid security breach during uploading of file that may compromise my system (basically from the advance hacker) . is this enough? . i am not talking about any special scenario
just simple file upload. Well security is one of the major concern in my application.
I have a requirement where i need to check the virus of a file when uploading file to server. Actually we don't know what type of files user uploads, he may upload a word doc which has virus. So inorder to protect server i need to write a program which should in rejecting the file which has virus.
View 3 RepliesWith the ajax file uploader, would it be possible to check the size of the image before uploading?Currently, it uploads the file to the server and then lets me know that it's bigger than the limit size.
i am using a file uploader to upload files. Now when i am using this on a mobile emulator with default browser IE it is uploading only those files whose name is less than 6 character. the files with name more than 6 character is not uploading through mobile emulator or mobile phone (PDA). I need this solution very soon.
View 1 RepliesIn my asp.net project i have a folder (folder name "Data").
I upload .pdf file and save the .pdf file in My Data folder.
In same day if i upload same name file then the previous file is overwrite without any message.
So I would like to know, how can i show a message like ("same name file is exit ,Do u want to replace it").
I've dug around in the SDK and managed to connect to my instance of S3, go into my bucket and create an empty file, but can't figure out how to take a file from my computer and upload it. If I have dragged a file upload control onto the designer surface how do I set the properties for it in the code behind?(If I absolutely need to have a 3rd party uploader which should I use). Here is the code I have so far.
static string bucketName = "myBucket";
static string keyName = "sampleKey";
static AmazonS3 client;
protected void Page_Load(object sender, EventArgs e)
{
string accessKeyID = System.Configuration.ConfigurationManager.AppSettings["AWSAccessKey"];
string secretAccessKeyID = System.Configuration.ConfigurationManager.AppSettings["AWSSecretKey"];
using (client = Amazon.AWSClientFactory.CreateAmazonS3Client(accessKeyID, secretAccessKeyID))
{
// simple object put
PutObjectRequest request = new PutObjectRequest();
request.WithContentBody("this is a test")
.WithBucketName(bucketName)
.WithKey(keyName);
S3Response response = client.PutObject(request);
response.Dispose();
// put a more complex object with some metadata and http headers.
PutObjectRequest titledRequest = new PutObjectRequest();
titledRequest.WithMetaData("title", "the title")
.WithContentBody("this object has a title")
.WithBucketName(bucketName)
.WithKey(keyName);
using (S3Response responseWithMetadata = client.PutObject(request))
{
WebHeaderCollection headers = response.Headers;
foreach (string key in headers.Keys)
{
Console.WriteLine("Response Header: {0}, Value: {1}", key, headers.Get(key));
}
}
}
}
in my web application, what i did is when the user login, i check the username and password to the database, if user name and password match then allow to visit next pages and store the user name on Session, now my doubt is more then one user can use the same username and password(if they are friends then they shared their uname and pwd) so, how to avoid multiple use login?
View 2 RepliesI have a java application that send to a aspx page the user name and password in a Query String. How can I authenticate the user in this aspx web page, and how can I avoid that a user copy the link in the internet explore and acces to the page.
View 1 Repliesi have probleM to check the login ,but i found one solution in this site.. AVOID MULTIPLE USER LOGIN, ...IS THER ANY OTHER METHOD TO SOLVE THIS PROBLEM.....
View 1 RepliesI am using ASP.NET 3.5 with iTextSharp and I have the following code:
var templatePath = Server.MapPath(@"~/Templates/template1.pdf");
var newFilePath = Server.MapPath(@"~/TempFiles/new.pdf");
PdfReader pdfReader = new PdfReader(templatePath);
PdfStamper pdfStamper = new PdfStamper(pdfReader, new FileStream(newFilePath, FileMode.Create));
AcroFields pdfFormFields = pdfStamper.AcroFields;
pdfFormFields.SetField("Box1", "007");
pdfFormFields.SetField("Box2", "123456");
pdfStamper.FormFlattening = false;
pdfStamper.Close();
Response.ClearContent();
Response.Buffer = true;
Response.ContentType = "application/pdf";
Response.AddHeader("Content-Disposition", "attachment;filename=new.pdf"));
Response.WriteFile(newFilePath);
Response.End();
The above code fills out a pdf file and saves the new file to the TempFiles folder. It then prompts the user to either save or open the file. Can I achieve the same functionality without saving the file to the TempFiles location?
When we use IIS for our aspnet 3.5 web application, it seems like each computer that wants access to this file needs to add the IP Address to the host file before we can navigate to the site. Is there a way to avoid using the host file. When this application goes to production, it should be able to be acesses by hundreds of computers and I really don't think forcing each computer to modify the host file is a good solution at all.
View 6 RepliesOn a web page, I need to allow users to input the path to a file (on shares on servers) - which will be stored in a database so I can subsequently display 'a list of documents that apply to this project'.If I put an input type="file" on the page, it makes it easy for the user to browse to the document ... but, when the form is submitted, the document will be uploaded to the server. I don't want the document, I just want the path.
How would you provide the functionality to allow a user to browse to a file so that you could record the path to the file without actually uploading the file itself?I just want to end up showing, on a web page, a list of files like:
myserverfolder20somefoldersomefile.doc
myserver2folder50somefoldersomefile2.doc
I need to give users an easy way to locate those files in the first place - without having to laboriously open Windows Explorer, find the file, and copy and paste the path. A file upload control gives you access to the path - which is what I need - but I don't want the file uploadedIf I do end up using a file upload control - I don't want to save the file on server - how can I dispose of it so I don't end up with hundreds of temp files?
I have set up a simple bit of code to upload an image to the web server. It works offline without a hitch but online I get an error saying denied access.I am not overly surprised to be honest as I have not configured anything on the server (through my web host "Mochahost") to allow unknown users to upload files. I wonder if someone could point me in the right direction.
View 5 RepliesI'm developing two applications. One is server application and one more is client application and i'm implementing Localization in both the applications. I have used 7 language resource files in both the application. I need to add the reference of server application in my client application to access some global methods and all. After i'm adding the resource file in the application if i build the application it creates folder for each resource file with language culture code (Spanish -> es-ES, French -> fr-FR) under Bin directory.
Similarly if i add the reference of server application into client application then the resource file dll of server application will be added under corresponding langauge culture folder(es-ES,fr-FR) in the Bin directory. But i don't want to create any resource file dll for the application under Bin directory and aslo i need to put all the resource files inside the application only.
I'm rather new to the topic of designing web applications, and during my attempts to create something i stumbled upon a rather tricky question. For my application I want to do a user control with which user will be able to select a file from a hard drive and upload details about this file. I dont want the user to send the whole file, just the details about it. For example lets say user selects a mp3 file. I dont want the whole song to be uploaded but i want the details about that song like the Author, on Album etc. Is something like this possible without uploading the whole file?
I tried looking up that topic on the internet but i found nothing... though i dont believe I am the first one with such a dilema;]
I have this concern that I never found out an answer to. If people are on a page on the site that are processing something on that page and at the same time I upload class and/or aspx and .vb page to the server while they are still processing, what happens? Will their data get corrupt? will they be using whatever was there before the new upload until they refresh their page? how does it work?
View 6 RepliesI'm completely new to web design and am looking to add the programming functionality to back the form I've created for my website, so hopefully someone can point me in the right direction.
I have a form that has both data and file fields and I need to be able to have the form contents transferred to a file on my server. I want the contents of the form to be accessible only to me when I access my server.
I don't really understand how ASP.net works but was hoping someone could either offer me the proper script or point me to a novice-level tutorial that will explain what I need to do.
I have a file upload control and just in IE 6 I get the following error when I try to upload a file. My code is further below.
Exception Details: System.Web.HttpException: '/Members/path//C:UsersPublicPicturesPhotosSample AlbumPensive Parakeet.jpg' is not a valid virtual path
MembershipUser newUser =
Membership.GetUser(CreateUserWizard1.UserName);
HttpFileCollection uploadedFiles = Request.Files;.......
How to upload a file(any format) into DB columns by changing it into binary format??What data type should we use for it?
View 15 RepliesI am uploading files using HttpWebRequest to an ASP.Net MVC application but, for some reason unknown to me, it is failing to upload consistently.
I know the file is good since if you try enough times it does eventually upload and can be viewed on the server just fine. When it fails, neither the server nor client reports any errors directly related to the upload, the upload just stops partway through at a random location and time and my MVC action method is called without the file being loaded (Request.Files.Count == 0).
This only seems to be a problem in our production environment over DSL. The test and development environment works fine and the production environment works fine from in the office (really fast connection to servers) but fails when running it from home over DSL.
As you can see below, the point where it fails is basic.
[Authorize]
[AcceptVerbs(HttpVerbs.Put | HttpVerbs.Post)]
[ValidateInput(false)]
public int UploadScene(int sceneID, int tourID, string name, int number, PhotoType photoType)
{
SceneInfo scene;
if (Request.Files.Count < 1) throw new InvalidOperationException("Image file not uploaded.");
// process file...
}
I want to be able to upload file from my .aspx page to my web server so that it can be preocessed into a different format.e.g. user will upload a doc and in few seconds it would see a pdf version of the doc on the web page.I have web service available which can convert doc to pdf.now1- how do i automate upload + conversion process.2- how do i handle big files here.3- how not to make user wait for all this thing to happen.
View 1 RepliesWe have a link in our site that pin points to sharepoint documents and we are retreiving some documents files (*.doc). Our sharepoint uses IWA (integrated windows authentication) which is prompted if we're trying to access that documents, unfortunately we don't want to prompt that window to authenticate the user. We need is to create a username and password and authenticate it. how can we do that.
Note* we have 2 server one for our application and the other one is for sharepoint.
i ve deployed many applications with file uploading feature on dedicated server and never got any issue. but it is not working on shared sever :( .. i think Server.MapPath("~") is not working on shared server. as in shared sever i am unable to find those directories which must for uploading.
m using following code for creating directories
string RootLocation = Server.MapPath("~") + "\";
string siteUploads = RootLocation + "uploads" + "\";
Directory.CreateDirectory(siteUploads );
i am working on a project in which I want user to upload files on to my website so for that i created a folder in which i'll store all those stuffs.now the thing is that it is all working fine on localhost but when i use it on server ,,it provides an error which is
Access to the path 'C:inetpubvhostsebas.co.inhttpdocsuploadsfile.exe' is denied.
i think this probably has something to do with the access permission for the folder...So could you tell me what are the permissions required to be set for this job to be done on server.
while uploading the file on the local host it works fine.but the same coding does not work on the webserver. is there anything to do with the foldr read and write permissions.i m using the server.map for finding the path of the browsed file.
protected void btnLogin_Click(object sender, EventArgs e)
{
try
{
string fold = "images";
string Name = FileUpload1.FileName;
sring path = Server.MapPath("~" + "/" + fold + "/" + Name);
[code]...
i hv not used any database for storing the path of the image.
