Web Forms :: Preventing Post Request From Other Domains?
Nov 15, 2010
We have a flash site which uses POST requests to commumicate with the database, via .NET pages. There is no login, it's an open system. Since we are communicating with POST data we are using Request.Form to get the data posted from the flash. My issue is that anyone who can view that post request, in firebug for example, can then set up a post request from another server and this is not good as some of the actions are sending emails etc. Is there any standard way of preventing a POST request from another server when using Flash > .NET combo?
I created aMicrosoft.Reporting.WinForms.ReportViewer with a window application. It worked fine when I was in net A with domain A. My application is now moved to net B with domain B. However when I login to my computer I still login netA with domain A, userID and password for A. I then use a A/B switch to switch to net B to run my application running ReportViewer (no login directly to B). But when I run ReportViewer I got errors like below.
The request failed with HTTP status 401: Unauthorized.
When a user presses Button1 on the Webpage, I would like to copy slightly modified string from txt1 (Text) into txt2 (Text). The problem is sometimes I get an error "a potentially dangerous request.form value was detected from the client validaterequest". I get this error when special symbols llike "<" or ">" are in txt1.Text.I've read about that problem. That error is to prevent from hackers who can input scripts into the txt1.All I did is:
1) Put validateRequest="false" into <%@ Page Language="VB" validateRequest="false" at Default.aspx.
Now it works and allows to take any data from txt1, slightly modify it and put into txt2.So, my question is: Did a level of security was reduced after I wrote validateRequest="false" ? Any code should be added to keep the good level of security? Or, I'd better use another way to copy txt1 to txt2?
I have four textbox and a button in my page. After filling the textbox. When the user click save button. A loading image should be displayed. User should not feel that the page is postback to the server,Some thing like in facebook loading image.
I am confused about the new request of asp.net page and the Post back! what is the difference between them? when we click on any control like button the post-back is called for the same page! why it is no re-requested or so on.?
I want to make two request to submit a form of another web application. How can I create post and get request. And how can I use secure this. I don't want to create ajax request. Just httpwebrequest.
is it possible to debug an ASP.Net-Website with a post-request and post parameters? Visual Studio 2010 only debugs withGET and no parameters and I wasn't able to find any option about this.
How can i diagnose the 404 errors on my asp.net application.It seems in iis logs that GET request to my *.aspx page return success ( code 200)The POST request to same page returns a 404 error , not able to diagnose why.Is there a seperate setting to allow POST request to this page or some where in the application.
Edit #1 The Page has a grid ( ingragistics grid, third party control) that makes a xmlhttprequest to the page itself to load some data on the fly. It sometimes work but mostly give a 404.fidler also confrims the 404 error with the url & that url does exist and is correct. I also verified the logs in IIS it confirm the 404 error.
I developed a website in ASP.NET with huge Database, Now i have another website in HTML & PHP. I want to make user login authentication from HTML website which will authenticate the login details from the old website's Database.
Database used is SQL Server 2005.
I Created t HttpHandler to authenticate the user in old website.
I want to make a JQuery request from HTML website to old website which will authenticate login details and will redirect to the user to new page according to user type.
I am using an Zencoder API to transcode video files. Once the job is completed they will do a HTTP POST with XML or JSON data containing the Job ID and other info to the url we provide.
So if URL is www.abc.com/GetZencoderResponse.aspx or .ashx, how can I read the data they post?
excuse me for the underlines, i thought that would make my query stand out.
All I need is to send a http post request I pulled from fiddler.
I do not want to use HttpWebRequest class. It makes it hard to set up a request, does not allow to change host,
and when it does send it it looks nothing like the request I want. The server is very sensitive and unless I copy the request headers 100% it will return an empty page. Why can't I just type in the headers and send it that way? What would be 5 minutes of work in php is taking the whole evening in asp.net.
This is what I am trying to send, simple as it gets: ...
I am working on a page where we have a form that the user is filling some information in. When the form is submitted I want to process the information and then redirect to an external server. The catch is that I need post data to go to the external server so a redirect will not work.
Is there a way to programmatically submit a form request with post data?
For the sake of a ridiculous example let's say on http://A.com I have an asp.net page with two inputs that accept numbers and a submit button. When the button is clicked I want to send a post to http://B.com with a post data parameter "AdditionTotal" which contains the sum of the two numbers entered.
im working on a MVC 3 webapp where i want to post to a controller function using jQuery ajax. However, every time i post to the server i get a 400 Bad Request response and i can't figure out where this comes from as the site runs fine with the VS2010 devserver.
See the function im using to send the ajax post below:
I'm trying to allow a web form to use a PayPal buy it now. The relevant page is: [URL]
Based on which radio button a user selects, depends on which paypal button they are "redirected" to. The subscriptions are easy - they are just a simple redirect.
The last option, requires a user select a venue. For this, i require to use the form below:
I know how to retrieve a GET object with Request.Querystring("objname"), but how do I receive POST variables using the Request object, or somehow through the code?
I have several ASP.NET sites, hosted on the same domain (different subdomains) and working via HTTPS.I have WCF service, hosted on the same domain.I have a separate state server for sessions. why - i will reply later, but it's a 'must') On my sites, I use grid components from Telerik (but actually it does not matter) that ask for data from WCF service and must be filled with this data.I cannot manage to make POST request to WCF service from javascript: for some reason it's always either GET or OPTIONS (no matter if I use Sys.Net.WebServiceProxy invoke or just a plain jquery AJAX request). It happens even if I indicate COOKIE mode
I am trying to implement the webrequest get and post methods. I am accessing a secure site that requires login authentication and was told that instead of sending a login request all the time; login to the site and capture the cookie and use this to send it in the header to get results from the page. In other words let us use google for example. Lets say google required u to login before searching for something. Now I login through my browser and leave the site logged in. Now I send a httwebrequest from my program that includes the cookie authentication details in the request header and get results for say ?param=sports. Now when I increment the page number like &page=3, I am still only getting page 1 results.
Here is some code:
[Code]....
Now I am using the request method GET. This is in the actual request header from the original request.
I have an aspx page where I want to post values to a new page and then redirect to that new page. I don't get any errors and the redirection occurs but the AllKeys collection is always empty.
I am new to webmatix and I do not do much development. I was trying to get some values from a request object and it's probably something very stupid I am doing wrong but really I cannot see what it is. This is the code I am trying to use, but I get no value from any items from the form:
@{ Layout = "_SiteLayout.cshtml"; Page.Title = "test"; if (IsPost)
I am currently writing a C# web service which has several methods, one of which has to receive HTTP POST requests. The first thing i have done is alter the web.config file in the web service project as below.
[code]....
But when i run this i get "The remote server returned an error: (500) Internal Server Error". If i remove the parameter, by removing the stringbuilder and byte code, as well as having no parameter in the web service, it works. So it is obviously a problem with the parameters. I actually want to send more data, and was using a string[] parameter in the web service, but this also failed.
