Web Forms :: Preventing Post Request From Other Domains?
Nov 15, 2010
We have a flash site which uses POST requests to commumicate with the database, via .NET pages. There is no login, it's an open system. Since we are communicating with POST data we are using Request.Form to get the data posted from the flash. My issue is that anyone who can view that post request, in firebug for example, can then set up a post request from another server and this is not good as some of the actions are sending emails etc. Is there any standard way of preventing a POST request from another server when using Flash > .NET combo?
View 2 Replies
Similar Messages:
Dec 10, 2010
I created aMicrosoft.Reporting.WinForms.ReportViewer with a window application. It worked fine when I was in net A with domain A. My application is now moved to net B with domain B. However when I login to my computer I still login netA with domain A, userID and password for A. I then use a A/B switch to switch to net B to run my application running ReportViewer (no login directly to B). But when I run ReportViewer I got errors like below.
The request failed with HTTP status 401: Unauthorized.
StackTrace:
[code]....
View 2 Replies
Jan 21, 2010
When a user presses Button1 on the Webpage, I would like to copy slightly modified string from txt1 (Text) into txt2 (Text).
The problem is sometimes I get an error "a potentially dangerous request.form value was detected from the client validaterequest". I get this error when special symbols llike "<" or ">" are in txt1.Text.I've read about that problem. That error is to prevent from hackers who can input scripts into the txt1.All I did is:
1) Put validateRequest="false" into <%@ Page Language="VB" validateRequest="false" at Default.aspx.
2) Default.aspx.vb contains now:
sHTMLEncodedString = Server.HtmlEncode(txt1.Text))
[code]....
Now it works and allows to take any data from txt1, slightly modify it and put into txt2.So, my question is: Did a level of security was reduced after I wrote validateRequest="false" ? Any code should be added to keep the good level of security? Or, I'd better use another way to copy txt1 to txt2?
View 7 Replies
Nov 30, 2010
I have four textbox and a button in my page. After filling the textbox. When the user click save button. A loading image should be displayed. User should not feel that the page is postback to the server,Some thing like in facebook loading image.
View 5 Replies
Apr 4, 2010
I am confused about the new request of asp.net page and the Post back! what is the difference between them? when we click on any control like button the post-back is called for the same page! why it is no re-requested or so on.?
View 6 Replies
Mar 24, 2011
I want to make two request to submit a form of another web application. How can I create post and get request. And how can I use secure this. I don't want to create ajax request. Just httpwebrequest.
View 1 Replies
Feb 11, 2010
is it possible to debug an ASP.Net-Website with a post-request and post parameters? Visual Studio 2010 only debugs withGET and no parameters and I wasn't able to find any option about this.
View 1 Replies
Jun 24, 2010
How can i diagnose the 404 errors on my asp.net application.It seems in iis logs that GET request to my *.aspx page return success ( code 200)The POST request to same page returns a 404 error , not able to diagnose why.Is there a seperate setting to allow POST request to this page or some where in the application.
Edit #1 The Page has a grid ( ingragistics grid, third party control) that makes a xmlhttprequest to the page itself to load some data on the fly. It sometimes work but mostly give a 404.fidler also confrims the 404 error with the url & that url does exist and is correct. I also verified the logs in IIS it confirm the 404 error.
View 1 Replies
Feb 8, 2011
I developed a website in ASP.NET with huge Database, Now i have another website in HTML & PHP. I want to make user login authentication from HTML website which will authenticate the login details from the old website's Database.
Database used is SQL Server 2005.
I Created t HttpHandler to authenticate the user in old website.
I want to make a JQuery request from HTML website to old website which will authenticate login details and will redirect to the user to new page according to user type.
View 3 Replies
Jul 15, 2010
Using the current HTTP Context, how can I see the content of the current POST request that has just been posted to the server?
View 3 Replies
Nov 9, 2010
I am using an Zencoder API to transcode video files. Once the job is completed they will do a HTTP POST with XML or JSON data containing the Job ID and other info to the url we provide.
So if URL is www.abc.com/GetZencoderResponse.aspx or .ashx, how can I read the data they post?
excuse me for the underlines, i thought that would make my query stand out.
View 6 Replies
Jan 29, 2010
All I need is to send a http post request I pulled from fiddler.
I do not want to use HttpWebRequest class. It makes it hard to set up a request, does not allow to change host,
and when it does send it it looks nothing like the request I want. The server is very sensitive and unless I copy the request headers 100% it will return an empty page. Why can't I just type in the headers and send it that way? What would be 5 minutes of
work in php is taking the whole evening in asp.net.
This is what I am trying to send, simple as it gets: ...
View 9 Replies
Jul 7, 2010
I am working on a page where we have a form that the user is filling some information in. When the form is submitted I want to process the information and then redirect to an external server. The catch is that I need post data to go to the external server so a redirect will not work.
Is there a way to programmatically submit a form request with post data?
For the sake of a ridiculous example let's say on http://A.com I have an asp.net page with two inputs that accept numbers and a submit button. When the button is clicked I want to send a post to http://B.com with a post data parameter "AdditionTotal" which contains the sum of the two numbers entered.
View 1 Replies
Feb 7, 2011
im working on a MVC 3 webapp where i want to post to a controller function using jQuery ajax. However, every time i post to the server i get a 400 Bad Request response and i can't figure out where this comes from as the site runs fine with the VS2010 devserver.
See the function im using to send the ajax post below:
[Code]....
View 3 Replies
Jan 5, 2010
I'm trying to allow a web form to use a PayPal buy it now. The relevant page is: [URL]
Based on which radio button a user selects, depends on which paypal button they are "redirected" to.
The subscriptions are easy - they are just a simple redirect.
The last option, requires a user select a venue. For this, i require to use the form below:
<form action="https://www.paypal.com/cgi-bin/webscr" method="post">
<input type="hidden" name="cmd" value="_s-xclick">
<input type="hidden" name="hosted_button_id" value="10956105">
<table>
<tr><td><input type="hidden" name="on0" value="Venue">Venue</td></tr><tr><td>
<input type="text" name="os0" maxlength="60"></td></tr>
</table>
<input type="image" src="https://www.paypal.com/en_US/GB/i/btn/btn_buynowCC_LG.gif" border="0" name="submit" alt="PayPal - The safer, easier way to pay online.">
<img alt="" border="0" src="https://www.paypal.com/en_GB/i/scr/pixel.gif" width="1" height="1">
</form>
But of course, I want to do it without using that form.
What I have so far is:
if (singleOneOff.Checked)
{
paypalForm.Text = getPaypalForm(venueSelect.SelectedItem.Text);
var strJS = getPayPalPostJS("_xclick");
paypalJs.Text = strJS;
var xxx = "dd";
}
This determines if that particular radio button was ticked.
getPaypalForm
private String getPaypalForm(string venue)
{
StringBuilder strForm = new StringBuilder();
strForm.Append(@"<form action=""https://www.paypal.com/cgi-bin/webscr"" name=""_xclick""
[Code]....
However, if i select the radio button, and a venue, and press the button, nothing happens....
I followed this guide: [URL]
View 3 Replies
Nov 25, 2010
I need to post a request to aspx page within dos command line.. How can I do that ?
View 3 Replies
Oct 12, 2010
I need to pass variables from a script to another with POST , Not GET , and without a form ( i must do it literally )
there is the Response.AddHeader(name,value) function
then the response.redirect
But then i think the variable field has no name ( after the content lenght header ).
View 1 Replies
Aug 18, 2010
I know how to retrieve a GET object with Request.Querystring("objname"), but how do I receive POST variables using the Request object, or somehow through the code?
View 2 Replies
Dec 11, 2010
I have several ASP.NET sites, hosted on the same domain (different subdomains) and working via HTTPS.I have WCF service, hosted on the same domain.I have a separate state server for sessions. why - i will reply later, but it's a 'must') On my sites, I use grid components from Telerik (but actually it does not matter) that ask for data from WCF service and must be filled with this data.I cannot manage to make POST request to WCF service from javascript: for some reason it's always either GET or OPTIONS (no matter if I use Sys.Net.WebServiceProxy invoke or just a plain jquery AJAX request). It happens even if I indicate COOKIE mode
View 3 Replies
Mar 22, 2010
I need to have a gif loading image on every request/postback/button click/crystal report loading , and when getting result from database.
View 7 Replies
Jul 19, 2010
I am trying to implement the webrequest get and post methods. I am accessing a secure site that requires login authentication and was told that instead of sending a login request all the time; login to the site and capture the cookie and use this to send it in the header to get results from the page. In other words let us use google for example. Lets say google required u to login before searching for something. Now I login through my browser and leave the site logged in. Now I send a httwebrequest from my program that includes the cookie authentication details in the request header and get results for say ?param=sports. Now when I increment the page number like &page=3, I am still only getting page 1 results.
Here is some code:
[Code]....
Now I am using the request method GET. This is in the actual request header from the original request.
[Code]....
View 1 Replies
Jan 14, 2011
I have an aspx page where I want to post values to a new page and then redirect to that new page. I don't get any errors and the redirection occurs but the AllKeys collection is always empty.
Here's an example of my code:
[code]...
View 3 Replies
Mar 23, 2011
I am new to webmatix and I do not do much development. I was trying to get some values from a request object and it's probably something very stupid I am doing wrong but really I cannot see what it is. This is the code I am trying to use, but I get no value from any items from the form:
@{
Layout = "_SiteLayout.cshtml";
Page.Title = "test";
if (IsPost)
[Code]....
View 3 Replies
Nov 15, 2010
I am currently writing a C# web service which has several methods, one of which has to receive HTTP POST requests. The first thing i have done is alter the web.config file in the web service project as below.
[code]....
But when i run this i get "The remote server returned an error: (500) Internal Server Error". If i remove the parameter, by removing the stringbuilder and byte code, as well as having no parameter in the web service, it works. So it is obviously a problem with the parameters. I actually want to send more data, and was using a string[] parameter in the web service, but this also failed.
View 1 Replies
Apr 5, 2010
I would like to know how a browser based POST request is converted to server side event like button_click.
View 3 Replies
