We have some review coming up and my boss gave me a list of web page security vulnerabilities to look through and consider for our public site. I really don't understand the Get versus Post:
8Misusing HTTP POST and GET
Use POST to submit forms
Use GET to access resources
–NEVER use GET to authenticate users as it leaves a residual trace of all users in the web server access logs (not to mention web application proxy tools)
I am using microsoft visual web developer 2010 to build and publish my website, I am facing a security problem. My website has authentication service for my clients, each one he has his own user name and password. After I introduced a new member, my database collapsed, may be this last member is a hacker. Is their a way to improve security vulnerabilities to prevent future attacks. May be through web.config, could be encrypted.
I am working on a application which will accept the data in the post request.I will surely implement the data encryption to make sure that communication is secured. But my concern is, any body who knows the URL will be able to send the POST data request to my application, can I restrict the request from once specific IP address/URL.From a Request object can I find out which application/HOSTname/URL has sent this request. I looked at RefererURL but it can be populated and cannot be used. Is there any other field/properly which will tell me about the party who has sent this request.I want to make sure that I process request received from one specific URL/IP and want to ignore all others.
I have created login for site. I am using "UserLogin.ascx" which is placed in masterpage. Now I have to create the Login system so that the users from other sites login to my site through Http post or Get. I have created the page for sending "HTTP Post" to my site and it also login to my site, but when I click on any link it logs out also in the browser's address bar the URL of the previous site is shown.
I am trying to add Canada Post shipping information to my website. Canada Post has this link to a sample site showing what to send. [URL] I have worked with Canada Post support and they have no sample code for C# or Visual Studio. Can some get me started on how to send the above information from a button click event?
have a web service that I'm trying to consume from a console app through http post. I receive a 500 exception error from the xmlstring parm being passed to the web service. Add the following to web.config of the web service. Although it is not working in debug in vs 2008 as well.
[Code]....
[Code]....
[Code]....
the host file is setup for the web service as well.
I have a web application. I am using C#. I have existing methods in my API for various things but all only submit and return bool/int/strings.
All of my API methods have the directive System.ServiceModel.OperationContract
All the parameters are of System.Runtime.Serialization.DataMember
I would like to be able to receive a posted file over HTTP. All I've been finding is people attempting to save a HttpPostedFile after submitting it in a form.
EDIT: this will be called from an iPhone application. Not via the browser on the iPhone Basically, I would like to do this: [URL]
I want to do some processing on a attribute before returning the view. If I set the appModel.Markup returned in the HttpPost ActionResult method below to "modified" it still says "original" on the form. Why cant I modify my attribute in a HttpGet ActionResult method?
I'm somewhere between a beginner and intermediate asp.net and c# user who is looking to receive a message/variable and then URL decode it. The message is being sent via HTTP post. I'm not sure exactly how to get started, and am looking for a tutorial but haven't been able to find one.
I need to offer a way for a client to send me XML (list of contacts). I'd like to do this using HTTP post. The page needs to capture that XML and place the data into my database (FirstName, LastName, Address...).
Is there a way to force a non-secure form post to be secure? I understand there are ways to automatically resolve an http URL as an https URL but with form posts, is this type of redirection too late? Will the posted data have already gone through the wire as plain text?
I am using an Zencoder API to transcode video files. Once the job is completed they will do a HTTP POST with XML or JSON data containing the Job ID and other info to the url we provide.
So if URL is www.abc.com/GetZencoderResponse.aspx or .ashx, how can I read the data they post?
excuse me for the underlines, i thought that would make my query stand out.
All I need is to send a http post request I pulled from fiddler.
I do not want to use HttpWebRequest class. It makes it hard to set up a request, does not allow to change host,
and when it does send it it looks nothing like the request I want. The server is very sensitive and unless I copy the request headers 100% it will return an empty page. Why can't I just type in the headers and send it that way? What would be 5 minutes of work in php is taking the whole evening in asp.net.
This is what I am trying to send, simple as it gets: ...
I'm trying to upload a file to an ASP 2.0 web service through HTTP 1.1 POST from a client-side application. If my web service function is declared as
<WebMethod()> Public Function UploadFile(ByVal file as Byte(), ByVal fileName as String) as String ...
The test form says the request should take this form:
POST address_of_service HTTP/1.1 Host: <host> Content-Type: application/x-www-form-urlencoded Content-Length: length file=string&file=string&fileName=string
How do I get my binary file data into that form? I've tried just converting the file data to a string and putting it in the body (file=<string_data_here>) but I get HTTP 500 errors back, complaining about not being able to convert it to System.Byte. I've got HTTP POST working fine elsewhere in my application with plain string parameters. Also, out of curiosity, why is it showing the file parameter twice?
I'm currently developing a website using ASP.NET MVC.I need this website to communicate with an external API using HTTP Post.
I'm unsure whether I should be coding this up in ASP.NET to perform the http post requet and read the response, or whether I should be coding this up in a c# class.It seems when developing a site, you have the option to chose either for many scenarios.
public class UserModel { public Guid Id { get; set; } public string EmailAddress { get; set; } public string LoginName { get; set; } public string Password { get; set; } } public class GroupModel { public Guid Id { get; set; } public string Name { get; set; } public List<UserModel> Users { get; set; } }
I created a View (Create.Aspx) by inheriting GroupModel class.
It is generating only two fields (Id, Name) in my aspx view. Also I am able to get the form data in the Model class object in Ń‘[HttpPost]Ń‘ request which contains the data for ID and NAME field in controller.
How can I get the data in List<UserModel> object? I am thinking to Put a List control with checkboxes containing Users. Then catch them using FormCollection object in controller.
My web service uses .Net Framework 2.0. An e-learning application reads and updates an Access database in the web service via Http Post commands. I test the e-learning application and the web service using the version of IIS 7 that came with Windows Vista. I run IIS using localhost in my browser.
All works well. But a friend is having trouble running the same test with my files on her IIS 6 server. So I'm developing a checklist of issues in setting up an IIS 6 server to run a web service. I plan to include all possible causes of problems including permissions, accounts that are needed, etc. Are there resources to which I can go for this checklist?
I have a remote website form which sends variables to a page of my asp website. This is a standard form with http post. How do I access the url which sent the request to the page? Is this an environment variable? Http_referrer?
