Web Development

Re: Restricting file access

13-Sep-02 6:07

Mark Nischalke wrote:
I'm looking for the best way to restrict access to files, such as word docs, pdf,

Best way is to do it per folder, not per file (so copy the PDFs and DOCs into the secured folder(s).)

In IIS go to the Directory Security tab of a virtual dir. properties. Then uncheck Anonymous access and check Basic Authentication. When you access that dir from an account not on the servers domain it will pop-up a dialog asking for a user name and password.

The problem with this though is you need a Windows account for users to use, though I think you can tap into it and link it through to a database rather than Active Directory.

Paul Watson
Bluegrass
Cape Town, South Africa

Not Active13-Sep-02 6:32

Not Active

13-Sep-02 6:32

I've used this in other projects but for this it won't work. These fles are in secured folders. The user had to pass through the forms authentication to view the aspx and html pages under it which contain links to the docs and pdfs. It is to much to ask (I have the scares) them to authenticate again to view a doc or pdf. As it is now navigating to the main page routes them through the authentication, just as it should. navigating the the doc directly does not. I want to check the authentication status, if not present redirect them tot he login page.

What is wrong?

Rickard Andersson²⁰13-Sep-02 4:02

13-Sep-02 4:02

This problem perhaps is an impossible-to-answer qustion!

Well, I've uploded my ASP.NET code on Brinkster to ty it.... but it doesn't work!

I get this error message when I enter the page:

<br />
Description: An error occurred during the processing of a configuration file required to service this request. Please review the specific error details below and modify your configuration file appropriately. <br />
<br />
Parser Error Message: It is an error to use a section registered as allowDefinition='MachineToApplication' beyond application level. This error can be caused by a virtual directory not being configured as an application in IIS.<br />
<br />
Source Error: <br />
<br />
<br />
Line 1:  [configuration]<br />
Line 2:  	[system.web]<br />
Line 3:  		[authentication mode="Forms"]<br />
Line 4:  			[forms loginUrl="LoginPage.aspx"]<br />
Line 5:  				[credentials passwordFormat="Clear"]<br />
 <br />

I've done a "Log in" test page with forms authentication, but it doesn't work for me on Brinkster. Can Brinkster's server be the leak?

PS. This is the address: http://www21.brinkster.com/suza/[^]

Rickard Andersson@Suza Computing
C# and C++ programmer from SWEDEN!
UIN: 50302279
E-Mail: nikado@pc.nu
Speciality: I love C#, ASP.NET and C++!

Paul Watson13-Sep-02 4:44

13-Sep-02 4:44

Rickard Andersson wrote:
This error can be caused by a virtual directory not being configured as an application in IIS.

Another irritating thing about ASP.NET. With ASP you just copied the file and it ran, with ASP.NET you have to maintain the integrity of the whole assembly and a whole lot of other setup tasks.

Basically this is what you need to do: You need to get Brinkster to make the IIS Virtual Directory in which your web.config file lies an Application. This can be done in IIS itself (right click virtual dir, click Create Application.)

If Brinkster won't do this for you (which they probably won't) then you need to locate your web.config file in an application folder, not just a normal folder. Bottom line is web.config must be in a virtual dir which is an IIS Application. Very bizarre but that is the deal unfortunatley.

Paul Watson
Bluegrass
Cape Town, South Africa

Paul Riley13-Sep-02 5:39

Paul Riley

13-Sep-02 5:39

Paul Watson wrote:
If Brinkster won't do this for you (which they probably won't)

Brinkster fixed this problem for me, about 15 minutes after I sent the mail. They're pretty damned approachable to be honest, don't underestimate them.

Paul

Paul Watson13-Sep-02 5:43

13-Sep-02 5:43

Paul Riley wrote:
don't underestimate them.

Well then I stand corrected, and pleased to be so. I really did not expect a free hosting service to be that responsive. GeoCities would just laugh at you and even some paid-for hosters would take days to do it and charge you for the work done (they charge by the hour of course, even though it takes only 5 minutes to do.)

Paul Watson
Bluegrass
Cape Town, South Africa

Rickard Andersson²⁰13-Sep-02 7:51

13-Sep-02 7:51

Wohoo!!
Then I just have to e-mail them right now and tell them!

Thank you!

Rickard Andersson@Suza Computing
C# and C++ programmer from SWEDEN!
UIN: 50302279
E-Mail: nikado@pc.nu
Speciality: I love C#, ASP.NET and C++!

Rickard Andersson²⁰13-Sep-02 8:23

13-Sep-02 8:23

This is my response from Brinkster:

<br />
Hello,<br />
Unfortunately, some of the General and General SE accounts have more difficulty than others.  There are differences in the way the General solutions are configured than the Premium X4, but no difference between the General and General SE.<br />
<br />
The Premium x4 accounts do not experience this difficulty.<br />
<br />
We have been working with Microsoft for a solution this, but this has not been <br />
resolved at this time.<br />
<br />
All we can recommend at this time is that you follow the FAQ's at http://www.brinkster.com/GeneraldotNETFAQs.asp as well as the following steps;<br />
<br />
VS.NET UPLOADS<br />
You can upload to your account via Visual Studio.Net by doing the following:<br />
 <br />
1- Load the Visual Studio start page (at Visual Studio start-up)<br />
2- In the menu to left, click "Web Hosting"<br />
3- Then, click the "Additional Providers" tab<br />
4- Then, click "Upload directly to your account"<br />
5- Finally, enter your Brinkster Account User Name and Account Password<br />
<br />
Note that if you are connecting to the Internet via a proxy server or firewall configuration, you may experience problems uploading via Visual Studio .Net.  This is beyond our control and you or your ISP will need to configure your firewall or proxy server settings appropriately in order for you to use the feature.<br />
<br />
<br />
VS .NET UPLOAD FILE STRUCTURE ISSUES:<br />
The upload feature from within Visual Studio uploads projects the way that Microsoft creates them (each in to it's own folder).  This is by default as Microsoft has set it up, and not able to be changed by us.<br />
 <br />
To remedy this issue you have two choices:<br />
1. You can use the Visual Studio .NET upload facility, then create a default.htm (or .aspx) file that simply redirects visitors who type in just your domain name to the exact file you want them to go to (www.YourDomain.com/YourProject/default.htm).<br />
 <br />
2. You can use FTP and put the files and folders in exactly the places you want them.<br />
<br />
<br />
Because the General and General SE accounts are free or low cost alternatives to Premium hosting, they are more restrictive.  Such programs could not exist for developers if there were fewer restriction due to the costs involved.<br />
<br />
If you are unable to connect to a General or General SE account with Visual Studio .NET; In the short term the only alternative is to open or upgrade to a Premium account where these issues do not exist.  In the long term it is an issue that we continue to work toward a solution, but at the moment remains unresolved.<br />

grrr!!!!
I have to find another FREE ASP.NET hosting somewhere I think!! Mad | :mad:

Rickard Andersson@Suza Computing
C# and C++ programmer from SWEDEN!
UIN: 50302279
E-Mail: nikado@pc.nu
Speciality: I love C#, ASP.NET and C++!

Rickard Andersson²⁰13-Sep-02 9:16

13-Sep-02 9:16

Wooooooohooooo!!!!!!!

I found a FREE .NET hosting site and my "Log in" ASP.NET code worked as it should do!!!!!!!!!!!!!!!!!!!!!!

I AM SOOOOO HAPPY NOW!!!

Brinkster you suck!!!! Poke tongue | ;-P

here is the URL to that HOSTING service: www.dotnetplayground.com[^]

Rickard Andersson@Suza Computing
C# and C++ programmer from SWEDEN!
UIN: 50302279
E-Mail: nikado@pc.nu
Speciality: I love C#, ASP.NET and C++!

Paul Riley13-Sep-02 9:57

Paul Riley

13-Sep-02 9:57

OUCH!

Really sorry about that Rickard. I've been using their Premium Accounts since way before .NET ever happened. It never occured to me that it might be different on a General Account. Blush | :O

I like Brinkster Premium accounts because they're incredibly cheap for a service with very few restrictions, very high responsiveness and a pretty damned solid service (largely because they charge for lots of extras that I don't need).

I have three accounts at the moment Big Grin | :-D

, but of course they're not for everybody. I'm glad you found a good free service.

Apologies again.

Paul

Rickard Andersson²⁰13-Sep-02 23:42

13-Sep-02 23:42

Well I think I'm sorry too...

But I've found my free .NET hosting account now and my forms auth... works for me!

Rickard Andersson@Suza Computing
C# and C++ programmer from SWEDEN!
UIN: 50302279
E-Mail: nikado@pc.nu
Speciality: I love C#, ASP.NET and C++!

Andy Smith13-Sep-02 8:32

Andy Smith

13-Sep-02 8:32

this is NOT a limitation of asp.net, but a limitation of visual studio.
asp.net supports two models. the all-in-one-page model which asp uses, and the new code-behind model.
asp.net allows you to choose this on a per-file basis.

however, visual studio is designed ONLY for the code behind model, and there's no way around it.

Microsoft Asp.net Web Matrix, on the other hand, supports the all-in-one model, and still has a great page designer. It doesn't have intellisense on your code tho. It's available free on www.asp.net

Paul Watson14-Sep-02 0:25

.aspx files won't work on my server!!! Why?

14-Sep-02 0:25

Andy Smith wrote:
however, visual studio is designed ONLY for the code behind model, and there's no way around it.

I have to disagree. Just the other day I was teaching an ASP developer the basics of ASP.NET and created an ASPX page without a codebehind file. VS.NET did not complain and nor did ASP.NET running on IIS. You don't have to use codebehind, it is just recommended.

Andy Smith wrote:
It doesn't have intellisense on your code tho.

Ouch, I have to say that damns the Web Matrix in my eyes. Intellisense is a great invention.

Paul Watson
Bluegrass
Cape Town, South Africa

LukeV13-Sep-02 3:01

13-Sep-02 3:01

I installed VS .Net and I, while the installation occured, remember reading that it was updating IIS and FrontPage. Now, I tried to test ASP.Net by creating a small project and when I try to run the .aspx file (localhost/somefile.aspx) it won't recognize the code and the page will be blank! A view source shows me that the code is actually there. ASP does work however.

Is there something that went wrong with the installation or I just need to set something up to enable ASP.Net???

Thanks!

---------------
http://www.edovia.com

LukeV13-Sep-02 4:50

13-Sep-02 4:50

Come on! Somebody knows this!!! Roll eyes | :rolleyes:

---------------
http://www.edovia.com

Paul Watson13-Sep-02 5:58

13-Sep-02 5:58

LukeV wrote:
Come on! Somebody knows this!!!

Get back to me on the following:
- Open IIS
- Go to the default web site
- Right click on it
- Click properties
- Click the Home Directory tab
- Click the Configuration button
- Check in the list for .aspx

If it is there then I do not know why your system is not working. If it is not there, then you need to re-install ASP.NET onto your system (or alternatively you can re-map all the configurations but there is about 50 and they are a pain to do.)

Paul Watson
Bluegrass
Cape Town, South Africa

LukeV13-Sep-02 6:13

13-Sep-02 6:13

running C:\WINNT\Microsoft.NET\Framework\v1.0.3705\aspnet_regiis.exe -i fixed my problem... Smile | :)

But thanks for your reply!

---------------
http://www.edovia.com

Paul Watson13-Sep-02 6:33

13-Sep-02 6:33

LukeV wrote:
running C:\WINNT\Microsoft.NET\Framework\v1.0.3705\aspnet_regiis.exe -i fixed my problem

Blush | :O

forgot about that little utility, very handy (and I only found out about it AFTER having re-configged my IIS box, which was very annoying lol.)

Paul Watson
Bluegrass
Cape Town, South Africa

LukeV13-Sep-02 6:37

13-Sep-02 6:37

Sure Paul, you just wanted me to enter all 50 entries manually! Poke tongue | ;-P

What I don't understand is why this isn't automatically done during VS.Net's installation!?

---------------
http://www.edovia.com

Paul Watson13-Sep-02 6:40