Cat.net is nabbing the following code, but I tried to use UrlEncode, but I am getting a http 400 bad requestencodedLink = Default2.aspx%3freturnURL%3d~%2fDefault.aspx
[Code]....
I would like to use Server.UrlEncode in .ashx.
I try with the following code.
HttpServerUtility ser = new HttpServerUtility();
ser.UrlEncode(pfile.FileName);
That's wrong but however I would like to use Server.UrlEncode so let know the way.
i have a requirement to encode the url in javascript and in redirected page i can't use javascript so i must decode the url back in code. so i needs a javascript encode method which encodes url like URLEncode method of asp.net so that i can decode it in code with UrlDecode method
View 3 RepliesIn ASP:
Server.URLEncode("+&(). -*<>/|")
' returns %2B%26%28%29%2E+%2D%2A%3C%3E%2F%5C%7C
In ASP.NET
Uri.EscapeDataString("+&(). -*<>/|")
// returns %2B%26().%20-*%3C%3E%2F%5C%7C
HttpUtility.UrlEncode("+&(). -*<>/|")
// returns %2b%26().+-*%3c%3e%2f%5c%7c
Is there any elegant way how to mimic old ASP behavior in ASP.NET?
I have spent quite a bit of time researching this here on Asp.Net's Forums, but also on the web in general, and I am still drawing a blank.
The problem: I am trying pass a values such as ... "Jacob's Carpentry" as a query string to another page. However, the other pages keeps seeing "Jacob\s Carpentry".
What I have tried: I have tried using both the Server.UrlEncode and HttpUtility.UrlEncode, and neither have worked. I have also tried using them twice as was suggested in this article, but still with no luck. Finally, I went so far as to try and encode the string, but then do a String.Replace on the " ' " apostrophe and substitute with a "%27". This also did not work, as it appeared that the String.Replace wiped out the encoding.
So I am stuck/lost. It appears the standard PHP functions easily encode the apostrophe, but for some reason the .Net function isn't working.
Here is the code I am using ...
[Code]....
I notice, however, then if I put a breakpoint where the PostBackUrl is set, the encoded string is still only showing "Jacob's+Carpentry", no %27.
So I have a Hyperlink called lnkTwitter:And I'm trying to set the url in the code behind:lnkTwitter.NavigateUrl = string.Format("http://www.twitter.com/home?status={0}", Server.UrlEncode("I'm Steven"));When I do that and hover over the link, the url displays correctly in the status bar as "http://www.twitter.com/home?status=I'm+Steven", but the actual url, if I click on the link or look at the link's properties, is "http://www.twitter.com/home?status=I%27m+Steven".For some reason, this only happens in Firefox; in IE, I am taken to the correct url.
View 3 RepliesWhat is the best way to encode the url in Hyperlink without writing code behind. I have many uses and I would like to do it in the Hyperlink statemeent if possible. Some thing such as the following would be great:
(This does not work)
<asp:HyperLink
ID="HyperLink1"
NavigateUrl=
"<%=UrlEncode(~/All_Videos.aspx?tag=full length movie&title=The Movie)%>"runat="server">Movies</asp:HyperLink>
For protect against XSS we should make all input from textboxes thoht Server.Htmlencode function.
1) If i let a input go thorgh Server.Htmlencode and save it in database. But what happen if i letter show this input data from database on browerser ...if database input data have <script> it will then make Xss!!!!.
2) I use Server.Htmlencode.. and the user write <b>ss<b>... (label.text = userinput.text;) and i WANT to show ss in browser. What shuld i do for make this happen ??
I have two page
1-index.aspx
protected void ImageButton3_Click(object sender, ImageClickEventArgs e) {
string data = Server.UrlEncode(txtNumeric.Text);
SqlCommand _cmd = new SqlCommand("traidname", _cn);
_cmd.CommandType = CommandType.StoredProcedure;
_cmd.Parameters.Add("@BehCode", data);
[Code] ....
Here I use textbox .text for server.urlEncode according to this code it go to tName + "?BehCode=" that
SP
ALTER procedure [dbo].[traidname]
@Behcode nvarchar(30)
as
begin
select T_name
from House_Info
where Behcode=@Behcode
end
And this is code in my destination(depending to tname column in house_info tabel) page
I use below code to bind data from database in destination pages
string data = Server.UrlDecode(Request.QueryString["BehCode"]); _cmd.Parameters.AddWithValue("@behcode", data);
Now in index.aspx page i have linkbutton that i want when users click on it, it do something like
ImageButton3_Click event
This is my datalist code that linkbutton is in this datalist
<asp:DataList ID="DDLstore" runat="server" RepeatColumns="3" RepeatDirection="Horizontal" "> <ItemTemplate> <table class="DDL2h"> <tr> <td style="height: 35px"> <asp:Label ID="Label3" runat="server" Text='<%# Eval("Name") %>' CssClass="TDnameH"></asp:Label> </td> <tr> <td> <asp:LinkButton ID="LinkButton2" runat="server" CssClass="LBP2" onclick="LinkButton2_Click">see all product</asp:LinkButton> </td> </tr> </table> </ItemTemplate> </asp:DataList>
Now how I can write code for linkbutton event that do same thing like ImageButton3_Click event?
and notice that both linkbutton and imagebutton are in index.aspx page ...
[ASP.NET 3.5, FormsAuthentication, SQL Server]
In the Roles table there is Role, and RoleType.
I have 3different roles, 2 of which have sub-roles.
Example
Role----------------------Type
Adminstrator
Subscriber---Basic
Subscriber---Business
I need to implement Code Access Security, and URL based security using the roles & types...
For instance, the (Subscriber/Basic) would need to view a different set of pages, and have different access to things then a (Subscriber/Business).
I think I can handle the Code Access security with a custom attribute, but I am unsure to how enforce a User be apart of 2 roles in the URL Authorization.
I am currently using the web.config to deny/allow access to the directories/pages.
e.g.
/Areas/Admin/web.config
[Code]....
Is it possible to force the user to be apart of 2 roles with this technique?
According to old AntiXss article on MSDN AntiXss.UrlEncode is used to encode link href (Untrusted-input in the following example):[URL]My understanding was, that UrlEncode should be used only when setting something to URL, like when setting document.location with JS. So why don't I use HtmlAttributeEncode in the previous example to encode [Untrusted-input]? On the other hand is there a security flaw if I use UrlEncode to encode HTML attributes like in the above sample?
View 1 RepliesHow to integrate security code when registering?
Example: When do I enter data complete it 4 digit random number.
Server.UrlEncode("2*")return 2*while it should return 2%2Aas tested on this demo site
View 2 RepliesI am having an algorithm for validating my license file, i need to encrypt the license file validation code in my project, So that even the hacker decompile the dll, he could not decrypt the license validating code, is it possible?
View 1 RepliesHow can i restrict sql injection in my code. How can i test that one whether SQL injections are applicable or not
View 4 RepliesI am looking for some suggestions for an application I am writing. Here is a brief description of the application:The application is written in C# ASP.NET version 4.0 and is to be hosted on an IIS6 web server. The purpose of the application is to serve as a download page for sensitive documents. There will be several levels of access which will be granted according to user credentials stored in a SQL table. I don't want the application to check the user's NT ID and either allow or disallow access to the application depending on whether they are authorized or not, I want it to filter on data i.e. everyone can view the application, it will just limit the data they can view depending on their access.
point me in the direction of some source code that can check the NT ID of user's local machines and compare it to a table in SQL?
How to send a digitally signed through C# code.i apply the no of ways but still not able to perform.
View 6 RepliesI have a CreateUserWizard with three Wizard steps and one CreateUserWizardStep. The first two are accessible from the code behind by ID. The third and fourth are not! If I comment out the references to these two steps in the code behind the page runs fine. I have triple checked the variable names and everything is fine. Everything that should have a runat="server" does, everything is enabled, all of that good stuff.
why some steps in the same CreateUserWizard may not be visible from the code behind and others are?
Code in DLL can only be obfuscated. IN my DLL how can I import a third party DLL into my DLL? Can I obfuscated the code but not the functions and sub header names?
View 3 RepliesI have a WCF service which accepts X.509 certificate signed incoming messages. As per my understanding the client will send the message with signature encrypted using his private key and web services will decrypt the signature with client's public key. This ensures that the sender of the message is holder of the private key and that he is certified by the server trusted CA as "He is what he claims to be".
It's being a highly secure application I need to give access to only certain clients regardless of whether they are trusted or not. (This is to take care of good turned bad scenario :-)) How do I achieve this? Is there any way to get the client information as subject name etc from his certificate in C# code? Is there any example of this usage?
I use some basic code to create userid (emailaddress) and assign the id to a role:
[Code]....
But I don't find how to automatically login the created userid and redirect him to page.asp
i want to access loginname of login view control for some other reason also i tried something like this but not working
My design time code is
[Code]....
and at code behind i tried this normally by string nm= LoginName1.Text ; LoginView1.Findcontrols("LoginName1"), using the LoginView1.Controls[0]. controls collection... (this get only controls from the anonymoustemplate)LoginView1_ViewChanged also doesent work because since the change in 2005 (or sth) logging in doesn't trigger this event (didn't try it, just read that it doesn't :)) but not able to access the value of loginname1.
I am obviously missing something here and it is driving me batty. I am trying to implement a custom role provider so that I can add some of my own custom code to it. I have created my CustomRoleProvider class, I have inherited the RoleProvider base class and implemented its members. I have made the required changes to my web.config so that my CustomRoleProvider is used. This is all working great.
All of this is wrapped up in a wrapper class as provided by the MVC Membership Starter Kit that I am using and wish to extend.
Now I want to add my own custom functionality.
When I add a function to my CustomRoleProvider I cannot see it or access it.
How do I add functionality to my CustomRoleProvider so that I can use it?
I know how to impersonate a user for the entire site but how best to impersonate for a block of code; WindowsImpersonationContext or NetworkCredential?
And how would this code look like?
I'ver got a login view and in the logged in template I have a few controls like labels and checkboxes. The problem is i cant access them in th code behind. When I place a control out of the logged in template i can access it no problem Is there anything I need to do get the code behind to have access to these controls in the logged in template?
View 1 Replies