Click here to Skip to main content
15,918,050 members
Home / Discussions / ASP.NET
   

ASP.NET

 
AnswerRe: How to drop/discard a Request in ASP.NET [modified] Pin
m-khansari1-Nov-08 1:20
m-khansari1-Nov-08 1:20 
GeneralRe: How to drop/discard a Request in ASP.NET Pin
Waleed Eissa1-Nov-08 15:55
Waleed Eissa1-Nov-08 15:55 
GeneralRe: How to drop/discard a Request in ASP.NET Pin
m-khansari2-Nov-08 3:07
m-khansari2-Nov-08 3:07 
QuestionCMS products Pin
Member 391904931-Oct-08 9:54
Member 391904931-Oct-08 9:54 
AnswerRe: CMS products Pin
Waleed Eissa1-Nov-08 16:28
Waleed Eissa1-Nov-08 16:28 
QuestionApp_code classes Pin
reogeo200831-Oct-08 8:03
reogeo200831-Oct-08 8:03 
AnswerRe: App_code classes Pin
Parwej Ahamad31-Oct-08 8:22
professionalParwej Ahamad31-Oct-08 8:22 
GeneralRe: App_code classes Pin
reogeo200831-Oct-08 18:01
reogeo200831-Oct-08 18:01 
GeneralRe: App_code classes Pin
kandalu31-Oct-08 21:36
kandalu31-Oct-08 21:36 
Questionsession extend on multi pages Pin
amit201131-Oct-08 7:38
amit201131-Oct-08 7:38 
AnswerRe: session extend on multi pages [modified] Pin
Parwej Ahamad31-Oct-08 7:40
professionalParwej Ahamad31-Oct-08 7:40 
GeneralRe: session extend on multi pages Pin
amit201131-Oct-08 7:56
amit201131-Oct-08 7:56 
GeneralRe: session extend on multi pages Pin
Parwej Ahamad31-Oct-08 7:58
professionalParwej Ahamad31-Oct-08 7:58 
QuestionSecurity Exception Pin
reogeo200831-Oct-08 6:46
reogeo200831-Oct-08 6:46 
AnswerRe: Security Exception Pin
Guffa31-Oct-08 7:14
Guffa31-Oct-08 7:14 
QuestionLogin skipped for Flash object Pin
Talal Sultan31-Oct-08 4:07
Talal Sultan31-Oct-08 4:07 
hi,

I have a flash object on the root directory of my website. I use it to do multiple uploads on one of my site pages. The site is protected with forms authentication but I just found out that if a user (not logged) enters the complete path of the flash object i.e. http://someserver/myflashobject.swf, he will be able to see the object and use it! in my case it's not a big deal since the page that usually displays the object also sets some javascript event handlers and uses some session parameters, which won't be available here, so no file will actually be uploaded but I was quite astonished that the user wasn't requested to login to access the flash object.

does anybody know why the flash is accessible directly without reverting to the login page?

is there a special configuration for the web site in web.config to stop people accessing the flash object directly?

Thanks

-- If this is a post that has been helpful to you, please vote for it. Thank you!

"Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning." --Rich Cook

AnswerRe: Login skipped for Flash object Pin
NeverHeardOfMe31-Oct-08 4:22
NeverHeardOfMe31-Oct-08 4:22 
Questioncopy-paste errors Pin
TerRO_GirL31-Oct-08 3:54
TerRO_GirL31-Oct-08 3:54 
AnswerRe: copy-paste errors Pin
NeverHeardOfMe31-Oct-08 4:04
NeverHeardOfMe31-Oct-08 4:04 
GeneralRe: copy-paste errors Pin
TerRO_GirL31-Oct-08 5:56
TerRO_GirL31-Oct-08 5:56 
GeneralRe: copy-paste errors Pin
Ashfield31-Oct-08 6:03
Ashfield31-Oct-08 6:03 
GeneralRe: copy-paste errors Pin
TerRO_GirL31-Oct-08 6:46
TerRO_GirL31-Oct-08 6:46 
GeneralRe: copy-paste errors Pin
Ashfield31-Oct-08 10:08
Ashfield31-Oct-08 10:08 
GeneralRe: copy-paste errors Pin
TerRO_GirL1-Nov-08 1:31
TerRO_GirL1-Nov-08 1:31 
GeneralRe: copy-paste errors Pin
Ashfield2-Nov-08 19:58
Ashfield2-Nov-08 19:58 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.