how to prevent exe file from being uploaded in a website , even if exe file is inside zip file( exe file in a new folder and new folder is then zipped and uploaded)?
View 2 RepliesI have a website that occasionally needs to have a handful of the tables in its database updated. The updates come from another system that exports to comma delimited text files. I can then either FTP the text files to the web server, send them in through an admin upload page, or manually log in to Remote Desktop to download the text files. I have all my C# code written to parse the files, check the database contents, and decide what to do.
Should I code the sync logic to be part of a file upload page, protected in the admin section of the site or should I create a Windows Service that constantly looks for files to process in a particular directory that I can drop files in through FTP?
I have used Windows Services in the past and they have worked great, but if I ever have to make a change to the code it can take longer than it would if I just had to modify an ASPX.
Are their security benefits one way or another?
Performance benefits?
ASPX page wins the "ease of maintenance" category.
suppose we have a example.exe file. we first put that file in a new folder and then zip that folder with any zipping software, Can we prevent that zipped folder upload in a website?
how can we do that?
Setting the .Net trust level to Medium on a site will ensure that no code can access files outside the application directory.
I have an ASP.Net site that must run in Full Trust. I have configured my website in IIS to use its own Application Pool Identity [URL].
Currently it is possible for scripts/code in this app to read files outside of the application directory. This occurs because by default, accounts that are a member of the BUILTINusers group are able to read most files on the system, including c: and c:windows. It appears that Applicaion Pool Identity accounts are also members of BUILTINusers.
Is it possible to prevent file access outside the website folder while keeping Full Trust?
How to get the full path of the file that is selected using the fileuploader.
View 1 RepliesI created a Website and i upload it using the asp.net development server.
So on the explorer the address is something like this http://localhost:port
The problem is that i can't access the Website(while its uploaded) using my internal IP from within the network.
So if i type http://10.0.0.180:port i get an error "Internet explorer cannot display the webpage".
I disabled my firewall(windows 7).
I would like to use HTML input file type in my aspx page to allow user to browse for a excel file and then read the content of the excel sheet programmatically.If I want to read the excel sheet I need the full path of the file to connect to the excel sheet using asp.net.I do not understand how can I get the full path of the file.I know I can get the filename using postedFile.FileName property.But I need the full path of the file.
View 2 Repliesi am uploading a file through file upload control , file size has greater then 4 MB, I have to give the proper alert msg to the user that file size exceeding the limit.how to do it , because at server side it is crashed on the IIS and not return to the server to check the file size validation.that how it is possible to validate the file size and give the proper alert messege
View 3 Repliesi've tried searching the net for this but really can't find much at all. i have created a website in visual web 2005 with sql express 2005. i have uploaded the website and altered the connection string and can connect to the database on the server, but now users can't log in The login control tells me when I've entered the wrong details, so it's doing something right, but if I enter the right credentials it eventually just throws back an error (Server Error in '/' Application.). I'm guessing it's something to do with the membership section in the web.config but can't quite work out where. I've altered the connectionstringname to the one that points to the database on the server and the application name in the table on the db is "/" so now I'm at a loss.
View 14 RepliesI do my new website in Sqlserver2005,But when i upload it at that time DataBase Related page display Database error. In this site without Database page open. So give me reply I also add my database in hosting side How to attach my database in my asp.net website , when i upload this.
View 1 RepliesI need to calculate the file size of uploaded file in order to catch System.Web.HttpException: Maximum request length exceeded.
This is my code
[code]....
I changed the file size in web.config.
<system.web>
<httpRuntime maxRequestLength="10240" />
I want to keep the uploaded file name to make it possible to users to download the file under the same name. But how can I implement it? The one option I see is to store each file to folder with unique name (GUID, for example).
View 2 Replieshow to download the uploaded file
I have used this in .aspx page...
I have a web form that uploads files by <asp:FileUpload> control. It uploads files to any folder on the disk (path to uploads can change in web.config, for example "c:UploadedFiles"). After file has been uploaded I need to show a link on the WebPage to download this file.
How it's possible create a link to this file (or what is another solution) on the web page if my website is in completely different place!?
Can anybody gives me the codes to get the date for upload file in asp.net(vb)
View 5 RepliesI need to create a custom web control which will be a part of a class library. This custom web control implements the upload functionality. I have implemented this with a web user control where I have a fixed path to a page in the web project where the upload of files take place and it works just fine.
The created control in this class library is used in the web project. How do I post the uploaded file to a page, say SomeClass.cs, in the class library.
Actually i am trying to storing the uploaded file into database but when i run this codes:
[Code]....
I got this error: " Incorrect syntax near the keyword 'File'.Incorrect syntax near the keyword 'File'. " can anybody tell me why this error came out?I tried toi change my connection string in web config,but it still showing the same error each time i run it in my local.
I have an ASP .NET web application which on the backend is talking to an ASMX web service. We have counted and the average wait time for the initial request is 20s. I am wondering if there is a way I can send the web service up to the server precompiled, thus negating the need for compilation.We have also noticed that IIS tends to recycle its worker threads and this also causes a compilation. The process itself is not accessed terribly often, but it needs to be much quicker when it is
View 5 Repliesi'me developing an ASP.NET application and it includes a FileUpload control, an object to show content of a format and a button to do functions. I want that when I upload the file, it will be shown in the object and for this reason i want to know the method to get the URL of the uploaded file.
This is the code:
[Code]....
is there any method on showing the image for the uploaded video files which are in flv format? i saw all the video in youtube got show the image of the video. how to do it?
View 4 RepliesI was trying to copy file to ftp via in my asp.net application... I did it successfully, however; when I open the copied file it is empty, I checked the properties aswell and its showing 0kb.
View 1 Replies[Code]....
Linking to Uploaded File with Spaces
I want to upload csv file and import the data into sql. but I cant do the import thing. The file is uploaded but it cannot be imported into sql. This is my code. Hope that someone can tell me what is the problem.
[Code]....
I wanted to customize/Restrict the File Uploader control as follows:
1. To restrict Users to not to upload some type of file like.exe
2. To restrict the user to a specific size limit.
I also wanted to be able to display appropriate messages to the user if the abover restrictions are violated.
Can I use the validations control to achieve the above goals. As I am already using these controls to display appropriate messages to the user in case of wrong/invalid data.
I am using ASP.NET and C#.
I have made a document uploading page, In which use can upload their document. I am saving three fields in the database,
Document Name [NVarchar]
File [Image]
DocumentType [NVarchar]
Now, I am able to add records in the database, successfully. Now I want to show it in the gridview, like DocumentName, DocumentType and a link to download the file.
I have tried by retrieving the records and assigning them to the gridview but I am getting only two columns.