The Request.UrlReferrer doesn't always have a value and it's possible to populate it with some logic but there are third party tools out there that know what website the user visited before coming to my site. How are they getting this data? That's what I want to use to figure out what page my users are coming from -- whether internal page or external.
I am using Request.Browser.IsMobileDevice in conjunction with the MDBF file that goes in the App_Browsers/Devices folder [URL] Now using Sea Monkey browser (latest version 2.0.7) IsMobileDevice returns true. Why might this be the case as clearly Sea Monkey is not a mobile browser. In fact, I had the understanding it used a lot of the same core as FireFox (which does not return true)
I want to make my application XSS proof. It should able to resist all types of cross site scripting attack, javascript injection attack, attribute attack etc.
We are looking for very sound solution, not just Server.HTMlEncode(...).
Points:
1. All client side call should be enclosed in double quotes.We are really looking for strong remedation.
I am tinkering with Web Gardens in ASP.NET with IIS 6.0. Multiple sources (Source1 Source2) explain how InProc Session does not fly well with Web Gardens. I built a program to prove it, but the results are difficult to explain. I set the Maximum # of worker processes to 1000 in IIS.I create a web app that stores a string in Session and retrieves the value with a button click. Run web app in IE, FF, and Blackberry browsers.
Unfortunately, I get the following error message:Message="The ORDER BY clause is invalid in views, inline functions, derived tables, subqueries, and common table expressions, unless TOP or FOR XML is also specified."
I believe from reading various bits online that Application and Session data can be read from the page file, memory or crash dump. I'm not too concerned about that. My question is, can the values held be altered?Situation is licencing to a third party. They run the web app on their own servers. I have created a signed but unencrypted licence file that is readable but tamperproof. After checking that it hasn't been tampered with I want to read and save the licence information into the Application object. Could someone with server administrator permissions change the licence information held in the Application object?
I'm building a web page in Visual Studio 2005 with ASP.Net 2.0, and I'm using the 20229 version of the Ajax Control Toolkit. On the page, I have a bullet list with the displaymode set to LinkButton that is bound in the code behind with a list of names retrieved from a stored procedure. Then I have a PagingBulleted List extender so that you can click on a letter (A, B, C, etc.) and only names that begin with that letter will show. The issue I am having is when I first click on a name in the paged bullet list, the entire bullet list will flash on the screen really quickly then the paged bullet list will show again. This issue can easily be seen with the AjaxControlToolkit source code by editing the PagingBulletedList.aspx sample web page. When you add DisplayMode="LinkButton" to the bullet list in the PagingBulletedList.aspx page, then click on one of the items in the paged bullet list, the entire bullet list will show on screen before showing the paged bullet list.
Also, how can I run some code when a letter in the index of the paged bullet list is clicked? For example, If I return some names and I have A, C, G listed in the index of the paged list, I want to hide portions of the web page when A, C, or G is clicked. Is this possible?
In my JavaScript I'm trying to redirect to third party page. It can open a page either in a new window or inside a frame depends on a user settings. Something like this:
I googled this topic and I came across with three different ways to configure browser capabilities: browscap.ini, browserCaps element in web.config and .browser files in App_Browsers. I thought .browser files is the latest way, but I don't seem to find up-to-date files. But I found quite fresh browscap.ini from [URL]
My first priority is to exclude common crawlers from the visitor stats. The second priority is to detect browser and os with correct versions (e.g. Opera 11 / Win7). Are there any libraries I could use? Is browscap.ini still a valid way and is it possible to use it without access to system files? Where can I find up-to-date .browser files?
How would one go about detecting a page refresh / F5 key push on the controller handling the postback? I need to distinguish between the user pressing one of two buttons (e.g., Next, Previous) and when the F5 / page refresh occurs.My scenario is a single wizard page that has different content shown between each invocation of the user pressing the "Next" or "Previous" buttons. The error that I am running into is when the user refreshes the page / presses the F5 key, the browser re-sends the request back to the controller, which is handled as a post-back and the FormCollection type is used to look for the "submitButton" key and obtain its value (e.g., "Next," "Send"). This part was modeled after the post by Dylan Beattie at http://stackoverflow.com/questions/442704/how-do-you-handle-multiple-submit-buttons-in-asp-net-mvc-framework.Maybe I'm trying to bend MVC 2 to where it isn't meant to go but I'd like to stay with the current design in that the underlying database drives the content and order of what is shown. This allows us to add new content into the database without modifying the code the displays the content.
I want to capture user ip address but some reason i am getting different values:
method 1: Dim strHostName As String = System.Net.Dns.GetHostName() Dim clientIPAddress As String = System.Net.Dns.GetHostAddresses(strHostName).GetValue(0).ToString() method 2: Dim k As String = Request.ServerVariables("remote_addr")
I have an ASP.Net site on which we're using control adapters. We have the adapters mapped to a "refID" of "Default." These adapters are working fine on all browsers except Chrome and Safari. For those browsers, they do not execute. I've given up trying to figure out why -- I have a question here on SO that no one has been able to answer, and I've been researching it for days now. It's just inexplicable.
I have tested the same code in my local environment, and it works just fine. Additionally, no one else can replicate my problem on other servers. It seems to be somehow confined to the machines at my client's site. Could they be somehow out-of-date? If this is the case, is there some way to "update" the .browser files? I'm half-tempted to just copy the .browser files out of the Framework directory from my machine over to theirs, but I'm curious is there's something more formal than this? Is there some other source of data that ASP.Net uses for browser detection other than these files?
I used following methods HttpContext.Current.Request.ServerVariables["REMOTE_ADDR"] Request.ServerVariables["REMOTE_HOST"] Request.UserHostAddress Request.UserHostName
All the above are returning "127.0.0.1", not the actual IP.
I have some questions regarding the entities framework. Once you create your DataModel, if later you modify it such as removing fields adding tables it is possible for the EF to auto detect changes or you have to refresh it manually? If you have to refresh it.. how do you refresh it to reflect new changes? Also do it affect in any way the data in the database?
I have a data list on my page which shows a clients company, address and contact info. This information is stored in a sql database table. one of the columns is email address
Also on the page is a button and textbox set to multimode where the logged on client can send a message.
In the the button click event I want to send the message but capture the email address from the "Email" column and add this to the from part of the mail message as below
[Code]....
I just want to get the email address this way or get it from the membership system which ever is better.