I have a requirement where i need to check the virus of a file when uploading file to server. Actually we don't know what type of files user uploads, he may upload a word doc which has virus. So inorder to protect server i need to write a program which should in rejecting the file which has virus.
View 3 RepliesI have developed a web based application in ASP.NET and C# where users have the facility to upload files on the server through this application I want the application to Scan the uploaded files for viruses before saving on the server. Same like when we attach files with our email in Yahoo. Any API which can be integrated in ASP.NET application or any other way you can suggest. We can purchase the licensed version of a product which can achieve this.
View 3 RepliesI am wondering what the best strategy is for accepeting http uploaded files on a web server in a safe way? I have access to scanning software which will quarantine suspect files, but not really sure what the best practice is for this kind of thing?This is somewhat of a pest as the form data and the uploaded file form a logical unit - the fact the files must be scanned (pottentially quarantined) means I would need some kind of callback, post upload mechanism for handling this.
Is there a preferred way (or peice of software) for handling thsi kind of thing?Happy to elaborate of anyone wants to comment or assist? I'm aware I can limit file size, file extension etc, so really just concerned about stopping viruses entering the web server and/or network. And I guess to do so in awy that allows me to interact with scanning software such that I get feedback in relatively real time??
We are using HttpPostedFileBase to upload files to our asp.net mvc application. Is there some smart way of analyzing the contents of the file to determine the actual mime type by looking at the actual binary stream?
I want to make sure no .exe files or similar stuff are uploaded, just want to accept a number of files.
Something like a preflight on the file that is uploaded to extract information programmatically and determine the file type.
I am developeing a site, in that I need to give contact us page , I need to get details visitor input in the fields, comments then generate a email and sent it to admin of the website.
here i have a doubt if some body type any thing which can be run or harm to machine or server website runing on. what we can do in such case. how do we trace any thing harmful input streams ?
One our customer complaint about HYH virus storing form authentication user credentials in clear text in his local system. Customer is accessing website through internet explorer. Is any preventing measure we can take in website or Code level?More details on Website1) Hosted in IIS 6.02) Windows Server 2003 Operating System ) Written in ASP & ASP.net combination
View 1 Repliesapart from checking the file type and file size both server side how can i avoid security breach during uploading of file that may compromise my system (basically from the advance hacker) . is this enough? . i am not talking about any special scenario
just simple file upload. Well security is one of the major concern in my application.
I've a problem while using ASP.
My situation is I want to convert every documents' contained words into database and upload those document to server.
For example: MS word, MS Power Point, MS Front Page and PDF files.
Those words needed to store into database and let others to search by content.
We are going to start accepting resumes online but I need to know if the uploaded files will be virus scanned before I park them into the database. I thought this would be a server thing but the server admin and the security guy both said they didn't know. We already have a firewall and antivirus software, I just want to know how things work with native ASP.Net controls and not a product to try.
View 2 RepliesWith the ajax file uploader, would it be possible to check the size of the image before uploading?Currently, it uploads the file to the server and then lets me know that it's bigger than the limit size.
i am using a file uploader to upload files. Now when i am using this on a mobile emulator with default browser IE it is uploading only those files whose name is less than 6 character. the files with name more than 6 character is not uploading through mobile emulator or mobile phone (PDA). I need this solution very soon.
View 1 RepliesIn my asp.net project i have a folder (folder name "Data").
I upload .pdf file and save the .pdf file in My Data folder.
In same day if i upload same name file then the previous file is overwrite without any message.
So I would like to know, how can i show a message like ("same name file is exit ,Do u want to replace it").
I've dug around in the SDK and managed to connect to my instance of S3, go into my bucket and create an empty file, but can't figure out how to take a file from my computer and upload it. If I have dragged a file upload control onto the designer surface how do I set the properties for it in the code behind?(If I absolutely need to have a 3rd party uploader which should I use). Here is the code I have so far.
static string bucketName = "myBucket";
static string keyName = "sampleKey";
static AmazonS3 client;
protected void Page_Load(object sender, EventArgs e)
{
string accessKeyID = System.Configuration.ConfigurationManager.AppSettings["AWSAccessKey"];
string secretAccessKeyID = System.Configuration.ConfigurationManager.AppSettings["AWSSecretKey"];
using (client = Amazon.AWSClientFactory.CreateAmazonS3Client(accessKeyID, secretAccessKeyID))
{
// simple object put
PutObjectRequest request = new PutObjectRequest();
request.WithContentBody("this is a test")
.WithBucketName(bucketName)
.WithKey(keyName);
S3Response response = client.PutObject(request);
response.Dispose();
// put a more complex object with some metadata and http headers.
PutObjectRequest titledRequest = new PutObjectRequest();
titledRequest.WithMetaData("title", "the title")
.WithContentBody("this object has a title")
.WithBucketName(bucketName)
.WithKey(keyName);
using (S3Response responseWithMetadata = client.PutObject(request))
{
WebHeaderCollection headers = response.Headers;
foreach (string key in headers.Keys)
{
Console.WriteLine("Response Header: {0}, Value: {1}", key, headers.Get(key));
}
}
}
}
Just curious to know that if my pc is infected with trojan or any other virus, is it possible that my website will be infected along with that I have made up in asp.net with visual studio 2008.I am not sure that it is the right place to put this question or shall I have to put it to
http://stackapps.com/ or any other site linked to stackoverflow. But anyhow it is very important for me know the answer.Because one gentelman report me about the infection of Jquery-1.2.3.min.js which I have downloaded from jquery official website.
I have a webpage where by user can upload jpg file through browse control on my server. Functionality working fine.
I have concern that if any one create virus and assemble it in a form of jpg and upload it on my server which can crash the hard disk or any other disaster.
On a web page, I need to allow users to input the path to a file (on shares on servers) - which will be stored in a database so I can subsequently display 'a list of documents that apply to this project'.If I put an input type="file" on the page, it makes it easy for the user to browse to the document ... but, when the form is submitted, the document will be uploaded to the server. I don't want the document, I just want the path.
How would you provide the functionality to allow a user to browse to a file so that you could record the path to the file without actually uploading the file itself?I just want to end up showing, on a web page, a list of files like:
myserverfolder20somefoldersomefile.doc
myserver2folder50somefoldersomefile2.doc
I need to give users an easy way to locate those files in the first place - without having to laboriously open Windows Explorer, find the file, and copy and paste the path. A file upload control gives you access to the path - which is what I need - but I don't want the file uploadedIf I do end up using a file upload control - I don't want to save the file on server - how can I dispose of it so I don't end up with hundreds of temp files?
I have set up a simple bit of code to upload an image to the web server. It works offline without a hitch but online I get an error saying denied access.I am not overly surprised to be honest as I have not configured anything on the server (through my web host "Mochahost") to allow unknown users to upload files. I wonder if someone could point me in the right direction.
View 5 RepliesI'm rather new to the topic of designing web applications, and during my attempts to create something i stumbled upon a rather tricky question. For my application I want to do a user control with which user will be able to select a file from a hard drive and upload details about this file. I dont want the user to send the whole file, just the details about it. For example lets say user selects a mp3 file. I dont want the whole song to be uploaded but i want the details about that song like the Author, on Album etc. Is something like this possible without uploading the whole file?
I tried looking up that topic on the internet but i found nothing... though i dont believe I am the first one with such a dilema;]
I have this concern that I never found out an answer to. If people are on a page on the site that are processing something on that page and at the same time I upload class and/or aspx and .vb page to the server while they are still processing, what happens? Will their data get corrupt? will they be using whatever was there before the new upload until they refresh their page? how does it work?
View 6 RepliesI'm completely new to web design and am looking to add the programming functionality to back the form I've created for my website, so hopefully someone can point me in the right direction.
I have a form that has both data and file fields and I need to be able to have the form contents transferred to a file on my server. I want the contents of the form to be accessible only to me when I access my server.
I don't really understand how ASP.net works but was hoping someone could either offer me the proper script or point me to a novice-level tutorial that will explain what I need to do.
I have a file upload control and just in IE 6 I get the following error when I try to upload a file. My code is further below.
Exception Details: System.Web.HttpException: '/Members/path//C:UsersPublicPicturesPhotosSample AlbumPensive Parakeet.jpg' is not a valid virtual path
MembershipUser newUser =
Membership.GetUser(CreateUserWizard1.UserName);
HttpFileCollection uploadedFiles = Request.Files;.......
How to upload a file(any format) into DB columns by changing it into binary format??What data type should we use for it?
View 15 RepliesI am uploading files using HttpWebRequest to an ASP.Net MVC application but, for some reason unknown to me, it is failing to upload consistently.
I know the file is good since if you try enough times it does eventually upload and can be viewed on the server just fine. When it fails, neither the server nor client reports any errors directly related to the upload, the upload just stops partway through at a random location and time and my MVC action method is called without the file being loaded (Request.Files.Count == 0).
This only seems to be a problem in our production environment over DSL. The test and development environment works fine and the production environment works fine from in the office (really fast connection to servers) but fails when running it from home over DSL.
As you can see below, the point where it fails is basic.
[Authorize]
[AcceptVerbs(HttpVerbs.Put | HttpVerbs.Post)]
[ValidateInput(false)]
public int UploadScene(int sceneID, int tourID, string name, int number, PhotoType photoType)
{
SceneInfo scene;
if (Request.Files.Count < 1) throw new InvalidOperationException("Image file not uploaded.");
// process file...
}
I want to be able to upload file from my .aspx page to my web server so that it can be preocessed into a different format.e.g. user will upload a doc and in few seconds it would see a pdf version of the doc on the web page.I have web service available which can convert doc to pdf.now1- how do i automate upload + conversion process.2- how do i handle big files here.3- how not to make user wait for all this thing to happen.
View 1 Repliesi ve deployed many applications with file uploading feature on dedicated server and never got any issue. but it is not working on shared sever :( .. i think Server.MapPath("~") is not working on shared server. as in shared sever i am unable to find those directories which must for uploading.
m using following code for creating directories
string RootLocation = Server.MapPath("~") + "\";
string siteUploads = RootLocation + "uploads" + "\";
Directory.CreateDirectory(siteUploads );