I have some images and text files that are used by web pages that are available to anonymous users and therefore those files can be viewed directly from a browser.
Is there a way to avoid this and allow the files to be viewed only when a page in the web site calls it ?
I have a directory that holds some images for my site. I have noticed that if i put in the my web sites address followed by "/directoryname/imagename.jpg"
it displays the image i have in that directory. Is there anyway to disable this or stop this from happening? so that the images can not be displayed like this
I work now in a huge project that we build all interface as Web User Controls .. every time I want to view & test one i should add it in web page and then view .. I think in a way to develop a visual studio extension that show "View in Temp Web Page" when I make right click on a user control to allow me view user control in a generated temp web page without needing to add it in a test page each time i want to test but i don't know is there any way to achieve that ... Is it possible to develop such a thing ?
View 1 RepliesI want to view the existing files in a directory which is "~/Images". Now the code below works fine and it shows the files (with its name and other details) in this directory very well in a data grid. The name is a hyperlink, but when I click on it, it tries to view the file in "~" (i.e current working directory) instead of "~/Images" and therefore reports the server error as - "file not found".
Also, how to implement if I want the save as option when I click on the file, so that I could save it directory locally instead of viewing it in browser?
VB Code-
Imports System.IO
Partial Class uploaddoc
Inherits System.Web.UI.Page
Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load
Dim dirInfo As New DirectoryInfo(Server.MapPath("~Images"))
articleList.DataSource = dirInfo.GetFiles("*.gif")
articleList.DataBind()
End Sub
End Class
HTML (ASP.NET) Code -
<%@ Page Language="VB" AutoEventWireup="false" CodeFile="uploaddoc.aspx.vb" Inherits="uploaddoc" %>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<%@ Import Namespace="System.IO" %>
<html xmlns="http://www.w3.org/1999/xhtml">
<head runat="server">
<title></title>
</head>
<body>
<form id="form1" runat="server">
<div>
<asp:DataGrid runat="server" id="articleList" Font-Name="Verdana"
AutoGenerateColumns="False" AlternatingItemStyle-BackColor="#eeeeee"
HeaderStyle-BackColor="Navy" HeaderStyle-ForeColor="White"
HeaderStyle-Font-Size="15pt" HeaderStyle-Font-Bold="True">
<Columns>
<asp:HyperLinkColumn DataNavigateUrlField="Name" DataTextField="Name"
HeaderText="File Name" />
<asp:BoundColumn DataField="LastWriteTime" HeaderText="Last Write Time"
ItemStyle-HorizontalAlign="Center" DataFormatString="{0:d}" />
<asp:BoundColumn DataField="Length" HeaderText="File Size"
ItemStyle-HorizontalAlign="Right"
DataFormatString="{0:#,### bytes}" />
</Columns>
</asp:DataGrid>
</div>
</form>
</body>
</html>
I will have my asp.net site on a shared hoster. Whats the best way to prevent others hacking and viewing my code? The code I most want to secure is in usercontrols and some more code is in class modules. vb.net/MSVS2005/Ajax) Or do I secure the whole site? I also here some encypting code tools cant handle sophisticted code. Also does encryption slow down code and make the site harder to manage...
View 4 Repliesam trying to get URL of the page that referred the request to my page, i tried the "
[Code]....
[Code]....
[Code]....
[Code]....
I was following the tutorials from this two sites:
http://www.15seconds.com/issue/070104.htm
http://aspnet.4guysfromrolla.com/articles/020404-1.aspx
Following the first site, it had worked but when I´ve moved the pages and files to other folders and set the web.config file on this folder, now it won´t work at all!!!
The file is an *.swf object. I did put the asapi.dll to map the extension on the website root, I´ve put the
[Code]....
on the web.config new folder and on the web.config website´s root.
It won´t work!!! I can access the file directly!!! on the web.config of the folder that contains the file, there is a <deny users="*" /> line.
We use the MojoPortal to a website and have some problems to upload files that is around 100 MB with the upload module. (Pleas note that this has probably nothing to do with MojoPortal but with the ASP.NET and the IIS)
The MojoPortal is set to use regular file Upload(not Neat Uploader) and to be able to upload big files we have set the following :
<httpRuntime maxRequestLength="2097151" executionTimeout="18000" requestValidationMode="2.0"/>
And :
<compilation debug="false" defaultLanguage="C#" targetFramework="4.0">
The problem is that the upload will cacel after a couple of minuts (Aborted).
Is there any other values that I need to set to make this possible? The MojoPortal itself should not have any settings for this as far as I know so its regular ASP.NET 4.0.
I want to display a pdf (or .doc) file inside my webpage. How can I do this? Also, Is it possible to display a website inside my webpage.
View 2 RepliesI have been trying to add media files such as audios and vedios to my web pages in visual studio (asp.net) but i seem to be lost about the whole thing.
View 2 RepliesWe are storing the WAV file into a database table as VARBINARY(MAX). We want to play the WAV file directly in a web page. We want to use PLAY, PAUSE and STOP for these WAV files.
We want the user to have a Control on the page to play the WAV file.
Here we DO NOT want to store the FILE in the Web Server's file structure. It is againt the SECURITY policy.
We tried different ways. Nothing is working. We used SoundPlayer class. Using this, we can only PLAY and STOP but can not PAUSE the WAV file.
I want to play video / audio files on asp .net page.
client has following requirements
1) It can play all the popular formats
2) It can use installed player (if windows media player or any other) or it can run inside browser (i.e. Flash player)
I have already explored different options i.e. silverlight, Windows media services & flash player Among these three silverlight is discarded as there very few browsers having that plug in.
I have this following code for bringing page attachments to the user:
[code]...
The problem is that all supported files works properly (jpg, gif, png, pdf, doc, etc), but .docx files, when downloaded, are corrupted and they need to be fixed by Office in order to be opened.
At first I didn't know if the problem was at uncompressing the zip file that contained the .docx, so instead of putting the output file only in the response, I saved it first, and the file opened successfully, so I know the problem should be at response writing.
How to play audio and video files...
View 1 RepliesI am trying to put together a page where files uploaded by a specific users would be listed in a bulletedlist and I am stuck. Here's the rundown:
Users login, they upload files which are saved to disk in the user's own directory. All the file's information, including the path, is stored in a SQL database.
The user has also its own page, where there is a bulletedlist (set as a hyperlink) that gets the filename from the SQL. However, the path to the file is incomplete.
The file is saved to the site's directory structure: C:WebsitesSiteUploadsUserFile.pdf. However, the hyperlink shows[URL]
Can anyone point me to the right direction? Below is a snippet of the upload method and the retrieval to build the bulletedlist.
[Code]....
[Code]....
We have a MS Access 2007 database that has a hyperlink column in one of the tables. I'm using Visual Studio 2008. I need to have the same column display in a gridview in ASP.net and have it function just like in access. In access, the user clicks the link and either the file or the wepage opens just fine. In the gridview in asp.net, if we click on the link it does "nothing". The links are to files on our network and to files on other people's websites and the paths are tested and work properly. The name of the column that holds the hyperlink is named MSDSLinke. Here is the code I am using:
<asp:TemplateField
HeaderText="MSDS"
SortExpression="MSDSLinke">
[code]...
I am new to this so forgive my lack of techical jargon/understanding.
We have and active directory setup in our dmz for 'external' user authentication to our web sites. This works fine...
We also have 'internal' users who have been authenticated to our 'internal' active directory. That works fine.
The problem is that we would like the internal users to be able to access the web sites on the web server in the dmz without getting prompted for authentication a second time...the user has already logged into the AD internally. Is there a way for this to happen? Currently they are being prompted for their credentials any time they go to login to a web site that is located in the dmz.
I currently have a website which I want everyone to be able to view, authenticated or not. But if someone does sign in, I want different controls and different C# code to be run on the page.
At the moment I have not put any asp security in. I just have two text boxes that check against the database then keep the user logged in using a session variable. Each page then checks to see if the logged in session variable has a user in it and runs the code.
I'm assuming this is not the most secure way, is there a way to do this correctly?
I do have a question with respect to cell phone locations.
f.i. how does google maps know my current position when using a cell-phone?
How can i make use of the current position of my cell phone. (How can i read that info and make use of it on a aspx webpage f.i.)
Ok this seems to be a tough one.
Example. when i use my iphone and start to use google. it automatically detects i have a mobile-phone (easy).
But then it request if it may use my gps locations. (if i then accept it reads my current locations).
My question is how can i do this myself using an asp.net webpage f.i.
im doing a webpage, and i have to login with the user from active directory users.
and things are so complicated, im getting lost!
im so confused by AD LDS, LDAP, ADSI,, are these all the same thing or?
if i use the same user who log onto the server computer, to login the webpage,
and i have the user ready in the Active Directory Users and Computers, do i have to configure the lightweight thing so that it can get users from the Active Directory Users and Computers?? and after that do i have to connect the lightweight with ActiveDirectoryMemebershipProvider, so that it can get the user and password?
i want to protect webpage from saving from browser file->save as. i found some sites did it(facebook,orkut). when i try to save pages on that sites only home page saved. how to do this in c#
View 2 RepliesI have a WebApplication1 running in a port (let's say 4000) and I'm trying to build a website (WebSite1), running on IIS, that is running on the same server. I have no control over the WebApplication1, it's a packaged software, WebSite1 is built by me.
The WebSite1 will do a custom user validation and then will let the user access the WebApplication1:4000 under the impersonated user under which the website is running, not the user in the client machine. Sort of like changing the user in the session.
There is a possibility that the web server computer (host) resets and there is nobody that can log in to system after reseting . I dont want my webpage stop working at this state until the Admin login to the server. so I want my webpage do its main job at logoff state of the server.
how can I create this webpage? what technology can I use to do this?
I would like to create a category page in the admin section where the admin can create/add category from the webpage , he/she don't have to go to database to create it how to make this possible by sourcecode in webpage and in database?
View 12 RepliesI am using a thrid party website for a service. I transfer control and data to an external URL provided by the service provided. Once the service provider processes the data, it transfers the results and control back to a page in my website. I would like to allow only the service provided URL/page to redirect to my website. Is there any way to do this?
I am using hidden variables on a form and a button control with the PostBackUrl attribute set to the service provier URL, to submit the data and control to the external webpage.Will Service Variables help me achieve the above objective?