Security :: Forms Authenication Prevent Word Docs Being Rendered
Nov 23, 2010
I have a .Net 4 web application which has a folder called "docs" which is full of Word docs on the root of the website. The words docs are linked with a gridview in my "admin" section
I only want Autheicated users to be able to renders the word docs in the doc folder. I am finding if the user logs out and they manually type in the url to the Word document it renders the file eg.
www.mydomain.com/docs/something.doc
i have tried putting this in my web.config but did not work for the Word docs. It stops the rendering of .aspx files but not .doc's
Is this because the .doc extension is not hadled by the .Net framework and that I need to do something to Handler Mapping in IIS7? I would prefer to put all my security setting in the web.config ideally
I'm trying to open Word & Excel docs in a new browser window. The windows opens and then closes straight away. I think I may need browser plugins. Can someone provide some advice on how I can achieve this?
I have an asp.net app that uses a SQL Server 2005 database to store word documents. One of the application requirements is that when a user clicks a button, the system retrieves some number of word documents from the db, zips them up in memory and allows the user to save the zip file to disk.
Is there a zip library that provides the ability to zip up files in memory? The few that I've seen read from the file system.
I have webpages that contain links to word documents and pdf files. For each link I want to display the file size and an icon showing what the file type is.
I'm thinking the best way to do this would be with CSS? Can anybody give me an example of how to do this?
The purpose is to generate proposal documents that can manually be edited in Word after the fact, but before sending them out to the customers.
Much proposal content would be drawn from existing HTML website content (backing CMS) and also some custom (non-HTML) injection for certain scenarios. Of course the conditional logic could go into server-side ASP.NET to vary the content appropriately.
I'm open to 3rd-party tools if raw manipulation of the Word API is arduous. In fact a good 3rd party tool might be the answer.
I have been presented with numerous word and excel docs. The goal is to put them online and bind to a database for the fields and also to store data for easy searching and reporting.
Has anyone done anything like this before?
I know the easy solution would be to create a database table for each particula form and also an ASP.net page for each form.
But then there are problems like printing and correct formating so it fits on the page, spaning multiple pages and so on.
And also is there any advice on how to write to PDF straight from the page?
I am developing a web site where there are two groups of users: sponsors and members. I would like each group member to login based on the group they belong to, but through a different login page. It turns out that I cannot add two separate 'loginUrl' elements to my web.config file, so how would I workaround this?
I wanted to use: loginUrl="Members_Login.aspx" and loginUrl="Sponsor_Login.aspx"...
The functionality works perfectly well in FireFox & IE when i checked in system testing envirenment(locally).However when in was moved on to hosting server(production environment) the functionality is not working in IE , however it is working perfectly in FireFox.
I am not sure on where to check the exact issue for.Will it be any caching related problem?.
In IE it is just not opening the download window which we will obtain when the rendered html content type is changed and response stream flushed.No exception is thrown.
I received the following response header :
HTTP/1.0 200 OK Cache-Control: private Content-Length: 15189 Content-Type: application/vnd.ms-word; charset=utf-8 Server: Microsoft-IIS/7.5 X-AspNet-Version: 2.0.50727 Content-Disposition: attachments;filename=NewAccountForm.doc X-Powered-By: ASP.NET Date: Fri, 18 Mar 2011 10:18:07 GMT X-Cache: MISS from Gateway X-Cache-Lookup: MISS from Gateway:808 Via: 1.0 Gateway (squid/3.0.STABLE10) Proxy-Connection: keep-alive
I have a web-report listing links to pdf documents. The pdf docs shows up in a new page based on frames in frames. I do not have control on the page showing pdfs.
In the web-report I want to let the user select multiple docs and then send them to print on the client.
I am using microsoft visual web developer 2010 to build and publish my website, I am facing a security problem. My website has authentication service for my clients, each one he has his own user name and password. After I introduced a new member, my database collapsed, may be this last member is a hacker. Is their a way to improve security vulnerabilities to prevent future attacks. May be through web.config, could be encrypted.
anyone have link or code to create image / word verification? i want to use this on my contact form to avoid spamming and better security. i've not found anything useful on net.
I have weird issue here, I have a method that takes a login Id and authenticates with LDAP active directory and returns the employee Id. It works great when I run the application in Visual studio 2008 ( it uses the default visual studio developement webserver). The code authenitcates the login id and returns emp Id perfectly. But the problem comes when I publish the code to the Local IIS in my developement PC.
I want create/show/edit a excel file from my asp.net application. All I want is like the working of Google docs. Is there a way I can implement it? Any dll or can i even use the google docs api for that?
I have a word document which opens in a web browser using ASP.NET 2.0 this is the code:
[Code]....
THIS WORKS, PROMPTING THE USER WITH "OPEN" "SAVE" "CANCEL" OR SOME USERS WITH "SAVE" "CANCEL" DEPENDING ON USER INTERNET SECURITY SETTING. BUT FOR SECURITY ISSUES, MY BOSS WANT THIS WORD DOCUMENT TO BE OPENED IN WORD PROGRAM. (MICROSOFT WORD 93,97 ETC) IS THIS POSSIBLE....? OFCOURSE SAVING THE FILE IS OKAY, JUST OPENING THE DOCUMENT SHOULD BE NOT BROWSER.
How can i use the google docs say like wen i display a excel sheet when the user wants to view that particular sheet or document It should open in google docs how can i do that?
I've set up a page where create logins with createuserwizard. I can login with created account but I get logged out after like 20min if I dont do anything (reload etc). How can I remove this timeframe? I dont want a timeframe at all, i want to stay logged in until i close the browser.
My requirement is : I have to open a word document in Microsoft word from my web application and the word document is stored in the server location.
In javascript i wrote a code to open the word document like below. var dsWordApp = new ActiveXObject("Word.Application"); var WordDoc = dsWordApp.Documents.Open(FileName)
Using above script i am able to open the local word doc files but i am unable to open the server side word doc file.
I have a ajaxPopupExtender in where I placed a login control. But when I login i get a full postback. I've tried to put it all in an updatepanel but that didnt help.
What I want is for the client to login from the popup Window, in case of login error I want to show that error message in popup (still visible). But if the login in successful I can in codebehind do a full postback.
As of now, even when error is presented the page is doing a full postback and the popupExtender with login control is collapsed.
User downloads a document from a specified site, saves to the local disk and fills in confidential details. When other users logs on to this computer and if they try to access the file, the document should not be accessible. Also consider that the document can be saved to a common server too, in which case, no one else other than the person who downloaded and filled the document should be able to open the document.
