ASP.NET

Some Basic ASP .Net Security Questions

8-Jul-09 22:39

Hi Done abit of testing and can replicate this.

Have you though of using something firefox addins afew that may suit your needs include

http://www.addictivetips.com/internet-tips/openedit-any-document-or-image-online-with-openit-add-on/[^]

This allows you to open the document in online document programs i.e. google

or maybe a better option would be

[IEView]

which allows you to open the existing html document or a link in IE, so therefore persumable it would open in writable mode.

Phil

swjam8-Jul-09 18:20

swjam

8-Jul-09 18:20

would someone be kind enough to shed me some light on the following concepts? these aren't assignment or exam questions, just things i couldn't find in the book i am reading and unbingable.

* how would forms authentication be made to work if cookies aren't enabled?

* session state can be stored in a cookie or within a munged url. if latter, then for a 'busy' website, there would be a higher likelyhood that a naughty user can replace the session state portion of the url with some random value and 'steal' someone else's session?

* once a user has been authenticated (either via forms or windows), can session state be used from then onwards as a mechanism to identify if a user is who he says he is? at least until the session expires (is made to expire) and then the user has to login again?

* as I understand it, IIS and ASP.Net are both services running in a web server OS. As such they need a logon account to run as. For IIS it is IUSR_[ComputerName] while for ASP.NET (IIS7) it is 'whomever' is entered in the sites application pool. If impersonation is enabled, then it uses the said account to run the .Net codes behind the page. is this correct?

* where do I find it in MMC where to set the account to run IIS under? I couldn't even find the entry for the IIS service in administrative tools, services

muchos gracias

----------------------------------------------------------
Lorem ipsum dolor sit amet.

Crystal Reports 2008 (12) Error when running on server

Battlehammer8-Jul-09 7:32

Battlehammer

8-Jul-09 7:32

I have a web application developed in Visual Studio 2008 with Crystal Reports 2008. When I run it locally everything works fine. However, on the server I get the following error...

Webpage error details

User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; InfoPath.2; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
Timestamp: Wed, 8 Jul 2009 17:13:38 UTC

Message: 'bobj' is undefined
Line: 62
Char: 3
Code: 0
URI: http://10.255.14.20/CustInfo/(X(1)S(xymqr1z51hhhyo55gpvftk55))/Pages/LookUpPages/DisplayCompany.aspx

Message: 'bobj' is undefined
Line: 71
Char: 24
Code: 0
URI: http://10.255.14.20/CustInfo/(X(1)S(xymqr1z51hhhyo55gpvftk55))/Pages/LookUpPages/DisplayCompany.aspx

I created the crystalreportviewers12 virtual directory in the IIS and I still get the same error.

Any ideas?

Bill

Re: Crystal Reports 2008 (12) Error when running on server

Battlehammer8-Jul-09 8:06

Battlehammer

8-Jul-09 8:06

Never mind all. It's working now.

Re: Crystal Reports 2008 (12) Error when running on server

Abhijit Jana8-Jul-09 8:53

Abhijit Jana

8-Jul-09 8:53

One Request. Please provide the solution over here. So that, if some on face the same problem can resolved quickly.

cheers,
Abhijit
CodeProject MVP
Web Site:abhijitjana.net
View My Recent Article

Re: Crystal Reports 2008 (12) Error when running on server

Battlehammer8-Jul-09 9:48

Battlehammer

8-Jul-09 9:48

I first had the problem yesterday I did the following...

http://blog.dragonsoft.us/2008/10/29/how-to-deploy-crystal-reports-2008-project-part-2/[^]

It worked fine but when I came in today it wasn't working again. I wound up deleting the virtual directory and recreated it and now it works again. I am keeping my fingers crossed that it still works tomorrow.

Confused but happy that it is working,
Bill

ASP.net Ajax Server Control

PJWindsor8-Jul-09 4:04

Re: ASP.net Ajax Server Control

8-Jul-09 4:04

Hi all,

I have a composite ASP.NET server control includes a HTML button that shows a div which allows searching capacities, the Search capacities are implimented using AJAX, im inheriting from WebControl and impliementing INamingContainer and ICallbackEventHandler.

The Control that works fine if you have just one control on the an ASP.NET page.

If you add further controls onto the page the first control still works fully but all contols after that allow the show/hide behaviour but the Ajax bits dont work. There are no errors, the data area just stays blank.

I think i have a problem with the way im registering the callback function. this is the code im using which is in the overridded OnPreRender Method of the Server Control.

string sref = Page.ClientScript.GetCallbackEventReference(this, "arg", "display","", true);

string Callback = "function GetData(arg, context){" + sref + ";}";

Page.ClientScript.RegisterClientScriptBlock(this.GetType(), "CallBack", Callback, true);

This outputs the following section of html

<script type="text/javascript">
//<![CDATA[
function GetData(arg, context){WebForm_DoCallback('LookupBox23123',arg,display,"",null,true);}//]]>
</script>

As you can see the first parameter of the callback contains the ID of the first control added (I know the ID is abit weird). I Think that is why the first control continues to work with Ajax but the rest don't.

Is there a way i can pass in the control name to the callback method so i can use multiple controls, or can i amend the script Reference to allow this functionality.

Many thanks Phil

PJWindsor8-Jul-09 5:59

Need to capture data of currently displayed webpage

8-Jul-09 5:59

Please ignore this now i've worked it out, although if anyone has a better way let me know.

I've used the context to pass the control name through.

string sref = Page.ClientScript.GetCallbackEventReference("context", "arg", "display","context","display_Error", true);

            string Callback = "function GetData(arg, context){" + sref + ";}";

            Page.ClientScript.RegisterClientScriptBlock(this.GetType(), "CallBack", Callback, true);

this means that in my javascript i've got calls like

GetData(Value,"Lookup1");

Cheers Phil

Antone Eason8-Jul-09 3:41

8-Jul-09 3:41

Greetings,

I would like to know if anyone has any code ASP.NET or even VB script, Perl etc that can simply be run from a command line to download whatever page is on a browser and write the raw HTML to a file, it can also be MHT for that matter.

I know about using - Navigate etc for a specific web page. This is different. The page I go to require authentication with word art and user name and password etc. Then once there you must click a few times to get where you are going for the data. Therefore running a script to direct me to a certain webpage will not work. The page has to be displayed first and then downloaded.

So, I just want to take whatever is currently on the browser, mainly due to catch refreshes of new data. Understand the page I am getting data from is generated as from a database so I can not simply run a script file to download that page. The program must be able to simple be activated and write to disk what ever is displayed on the browser at the time the program is run.

I have a seperate data extractor to run against the new file to find the data I need. This file can always have the same name as well and be overwritten.

Thanks,

Antone

Ignore repost [modified]

Manas Bhardwaj8-Jul-09 4:02

Manas Bhardwaj

8-Jul-09 4:02

This is considered as rude.
You already asked this question in C# forum.

Manas Bhardwaj
Please remember to rate helpful or unhelpful answers, it lets us and people reading the forums know if our answers are any good.

modified on Wednesday, July 8, 2009 10:08 AM

Antone Eason8-Jul-09 4:07

8-Jul-09 4:07

Not clear why it is rude??? I am asking different forums and those that do not necessary see my question from other forums. So, if my question maybe answered in Perl and not in C# then the Perl guys will never see my question.

If this is not correct let me know. I have not been on here in many years.

Thanks,

Antone

N a v a n e e t h8-Jul-09 4:45

N a v a n e e t h

8-Jul-09 4:45

Antone Eason wrote:
Not clear why it is rude??? I am asking different forums and those that do not necessary see my question from other forums

Well, in such cases, you can post the question in most appropriate forum and link to it while posting in the other forums. Putting the same text in all places is considered to be rude.

To answer your question,

You have said the page you want to download requires authentication and some word art. Do you mean a CAPTCHA[^] ? If yes, getting the authentication pass is tough as you can't predict the value of CAPTCHA.

Smile | :)

Navaneeth

How to use google | Ask smart questions

Antone Eason8-Jul-09 4:52

8-Jul-09 4:52

OK thanks I will look into linking for future posts. As far as my question I do not need to authenticate or worry about login credentials. I am already in fine, the page just changes every few minutes.

Think of it as simply being able to click the [view source] button on any web page that happens to be on the browser and then the source e.g. raw HTML is written to a text file.

That is what I need a script or program to be the view source button that I can invoke inside a batch file that is called by the scheduler every 5 minutes or so to check for the latest update.

Thanks,

Antone

N a v a n e e t h8-Jul-09 17:21

N a v a n e e t h

8-Jul-09 17:21

Look at the WebClient class and work with DownloadString[^] method. It does exactly what you are looking for. Try to follow the below steps

1 - Create a console application which quits automatically once the job is done.
2 - Inside this, use WebClient class and request to the web page. This will give you raw HTML.
3 - Schedule this exe to run every 5 minutes for getting the latest updates.

Hope that helps Smile | :)

Navaneeth

How to use google | Ask smart questions

Antone Eason8-Jul-09 18:46

8-Jul-09 18:46

Hi - yes that sounds like an excellent solution. I will try just a little short on time.

Thanks again!

Antone

Antone Eason8-Jul-09 9:44

Re: Need to capture data of currently displayed webpage

8-Jul-09 9:44

Hi - Yes that is security used. Thanks for your input and quick response.

Thanks,

Antone

PJWindsor8-Jul-09 4:17

Re: Need to capture data of currently displayed webpage

8-Jul-09 4:17

Hi, have you tried Fiddler its a HTTP Debugging tool and logs whats going on as your are browsing, you can see html, js files downloaded and alot more, might help.

If that doesnt do the trick then look at the WebRequest object this can be used to get the HTTP response, as you said there is a log screen it maybe harder, but you can do your own POST by changing the username, password, and wordart answer into a Byte array and then sending this with your request to whatever page the form points too.

try here http://msdn.microsoft.com/en-us/library/system.net.webrequest.aspx[^]

Phil

Antone Eason8-Jul-09 4:27

Re: Need to capture data of currently displayed webpage

8-Jul-09 4:27

Hi Phil,

Thanks for the quick reply! I will take a look at fiddler. I am an assembly language programmer mainly, so I do not know so much about script languages. If fiddler can write the webpage to a file then it should work!

Please understand the login is not an issue anymore I can login fine and leave the opera browser on with refresh set to 30 seconds. Then as the page refreshes with new data I want to write it to a file. Next my program runs and check the raw data to see if what I am looking for is there, if it is then the bell will ring, if not then it ends and waits for the next html file to check.

Thanks,

Antone

Antone Eason8-Jul-09 4:32

Re: Need to capture data of currently displayed webpage

8-Jul-09 4:32

Hi Phil,

Sorry Fiddler is a no go. It does not write data to a file.

Thanks,

Antone

PJWindsor8-Jul-09 5:03

Re: Need to capture data of currently displayed webpage

8-Jul-09 5:03

How about if you use the WebBrowser Control on a windows form? Im not sure but it think you should beable to browse to the page you want and then write some code to get the HTML of the current page on the WebBrowser control.

If that doesnt work then you can look at using Automating IE directly i forget the dll name its something like SHDocVW and this contains the Interfaces for automating IE Directly.

From here you can get the current document.

Antone Eason8-Jul-09 5:10

Re: Need to capture data of currently displayed webpage

8-Jul-09 5:10

Thanks for the input, but I do not believe I have the knowledge to do that. I was hoping that this has been done before. The IE automation sounds interesting.

Thanks,

Antone

PJWindsor8-Jul-09 5:20

Re: Need to capture data of currently displayed webpage

8-Jul-09 5:20

If you want it learn its Called Platform Invoke in .NET its all about using the existing Windows dll's from .NET

here is a good artical to get started its shows you how to use some of the functions in the User32.dll

[PInoke on CodeProject]

this website list alot of the windows functions with code to automate them

http://www.pinvoke.net/[www.pinvoke.net]

Phil

Antone Eason8-Jul-09 9:39