|
How do I protect unauthorized calls through the API? I know I will have a login process, but do I login on each call to each method? Or do I pass some kind of token to each call?
If it's not broken, fix it until it is
|
|
|
|
|
You can pass the user credentials (login and password) in request header for the first time. Then, login for that client in the server. Then, other subsequent calls should not require authentication till session time-out (Or the way you implemented authentication/authorization).
Life is a computer program and everyone is the programmer of his own life.
|
|
|
|
|
may be you can use the ASP.NET session global variable. you can check it before you perform any following loading process.
|
|
|
|
|
One way to achieve this would be to have a cookie based authentication where when a user calls the login method a cookie is sent to the user and this cookie can be used to authenticate the user.
But the above mentioned approach is not recommended as the cookies don;t gel well with complete restful services. If we have a mix of website and rest api then it works well as we can ask the user to login from the web page and the api can simply check for authentication cookie.
So the recommended approach is to have a token based authentication. when a user logs in, generate a token for the user and send it back to the client. the client will then have to send this token back in the header with every request. following article shows how this can be done - http://www.asp.net/web-api/overview/security/individual-accounts-in-web-api[^]
|
|
|
|
|
I've been working with wordpress for awhile and know it fairly well. I HAVE used drupal, but not much. It's rare that I get a client that wants to spend the extra cash on a drupal website, because I generally have clients that don't have a need for the extra scalability or security. And the ones that DO want something other than wordpress usually want something custom from the ground up (which is always a lot more fun).
I have a job interview coming up for a position I'm very interested in, and it requires working with multiple drupal websites. While in the first interview I was told it's not important to know it thoroughly, since he knew I had a lot of experience with wordpress. But I'd love to spend some time learning as much about it as I can in a week or so, just to improve my chances a bit. The less I have to learn on the job, the better.
I'm pretty good with PHP programming, better with Javascript, HTML5 and CSS, and I've used Wordpress quite a bit. Though I'm a bit new at plugin development (not that it's challenging, I just haven't had much of a reason to learn it yet, so I've only looked at it when business is slow).
Given my current experience level and familiarity with similar CMS, does anybody know of a good tutorial or course that could get me familiar with the inner workings of drupal quickly? Books are a bit out of the question. I'll buy a couple if I get the job, but I'd rather not wait for them to be shipped and I always have a hard time finding good books in stores.
|
|
|
|
|
|
|
|
Problem Statement: Users are trying to edit the same application-page from multiple tabs; this is leading to data corruption. For example: Users edit some of the fields in Tab1 and edit rest of the details in Tab2. The issue is reproducible both in IE8 (AS-IS browser) and IE11 (TO-BE browser – in process of roll out). In IE8 browser, we have disabled the options of New Tab/Duplicate tab/new Window options. However this option is NOT available in IE11.
Target:
a) Explore solution where same page can be edited from multi-tabs without data corruption.
Solutions suggested so far and status:
Option1: the latest Tab2 would be successfully saved and user should refresh manually TAB1 to get refreshed the screen due to changes done on Tab2. Once refresh is completed then user can start editing the Tab1.
Reason: Client users are not comfortable with refresh option every time they edit the TAB1 screen.
Option2: Currently we are not allowing the application to use Multi session tab data for saving and warning the user when trying to save the data from TAB1. Only one session allowed per request.
Reason: Users require both the tab information to be saved rather than with only 1 tab.
Expected solution direction: User should able to edit the same screen in multiple tabs/Windows without any data corruption.
|
|
|
|
|
I am working on mvc5, visual studio 2013. Till 3 hours back, my application is working fine. All of a sudden, I'm getting below error
"HTTP Error 403.14 - Forbidden The Web server is configured to not list the contents of this directory. Most likely causes: A default document is not configured for the requested URL, and directory browsing is not enabled on the server."
Note: My application is running on IISExpress
I googled and tried the below solutions.Still not working. Please help me to fix this..
1. added system.webservices tag in web.config as shown in the below link. http://forums.asp.net/t/1897460.aspx?the+web+server+is+configured+to+not+list+the+contents+of+this+directory
2. Run the below command in Command prompt. It allowed me to browse the directories C:\Program Files\IIS Express>appcmd set config /section:system.webServer/directoryBrowse /enabled:true Still error exists.
3. executed below command in command prompt
%windir%\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe -ir
How to fix this..
|
|
|
|
|
Hi,
I am getting the following error:
Notice: Undefined index: ALL_HTTP in C:\xampp\htdocs\JassimRahma\app\detect.php on line 118
here is the code:
if(in_array($mobile_ua,$mobile_agents)){
$mobile_browser++;
}
if (strpos(strtolower($_SERVER['ALL_HTTP']),'OperaMini')>0) {
$mobile_browser++;
}
if (strpos(strtolower($_SERVER['HTTP_USER_AGENT']),'iemobile')>0) {
$mobile_browser++;
}
if (strpos(strtolower($_SERVER['HTTP_USER_AGENT']),'windows')>0) {
$mobile_browser=0;
}
Line 118 is:
if (strpos(strtolower($_SERVER['ALL_HTTP']),'OperaMini')>0) {
Kindly help...
Technology News @ www.JassimRahma.com
|
|
|
|
|
|
Hi,
I would like to ask about Google Analytics.. I have seen many different ways to implement the tracking code, the standard way, the ga.js, the analytics.js..
what are the difference between these ways and what's best?
Thanks,
Jassim
Technology News @ www.JassimRahma.com
|
|
|
|
|
In my opinion Google analytic code should be on the top of the page, just before the . There is no need to put it in an individual JS file until and unless you are loading that file asynchronously. It would be a little bit pointless to put it in a separate JS file. 
|
|
|
|
|
I always put it in my 'footer.php' file, right before the tag, where I put most of my scripts. Putting it at the end let's you load scripts after everything else, instead of holding up the rendering of the rest of the page. Though I know that's not really necessary thanks to some great HTML5 attributes for script tags, I am still in the habit.
I see no reason to include it as an external file. And I include my footer.php file in every page on most sites, anyway. But if I wasn't building a website in pieces like that, and each page had it's own footer, I guess I would consider an external file to make it easier than pasting it on every page.
|
|
|
|
|
|
Hi,
I have just configured the google analytics for my website and I am getting some visit data there but why when I go to the Tracking Code page it says:
Status: Tracking Not Installed
here is the page to check the source of it:
http://www.block338.com/[^]
Technology News @ www.JassimRahma.com
|
|
|
|
|
Hello,
I am working in .NET and PHP.
For .NET I am using Visual Studio 20012
For PHP I am using NetBeans 8
Both are great editors, but I found .NET studio is more powerful.
Do you know any editor for PHP which is equivalent powerful to Visual Studio.
Please answer only if you are working with .NET and PHP both.
Thanks
Kartik
|
|
|
|
|
I found Eclipse very good to me...
Skipper: We'll fix it.
Alex: Fix it? How you gonna fix this?
Skipper: Grit, spit and a whole lotta duct tape.
|
|
|
|
|
I would recommend you to go( or give a try) with Zend studio http://www.zend.com/en[^]. Zend-studio 12 is great for PHP, you will find all the required features and good in performance.
In compare to .Net Visual studio, Zend studio is not equivalent powerful to Visual Studio. However, in my experience, Zend studio is more suitable PHP IDE I worked. Hope this helps.
|
|
|
|
|
Thanks for the suggestion, I am using NetBeans (free open source) and its very similar to Zend Studio. But I need similar as Visual Studio. May be in future someone community will come-up with strong IDE.
|
|
|
|
|
Hello,
I am working on PHP and In my opinion dreamweaver editor is the best one according to my experience.
|
|
|
|
|
Hello,
Here I am going to share my experience and base on that I have a questions.
<b>History</b>
I have started working on ASP in 2001 and on PHP 2004, since then I am working on both languages but more & more on PHP. Since last 2 year (2012) I am working only and only on .NET
<b>Experience To Share</b>
PHP: I have build an application in core PHP, which is hosted on shared server, using by 50 users constantly from 8 am to 7 pm. Couple of scheduler does run. Application code size is 30 MB and Database size till date in 200 MB
.NET: I have build an application in .NET, hosted on VPS, using by hardly 15 users. No scheduler is running, Application Code size is 25 MB and Database size till date is 2 MB for each user.
Please Note: both application are normal applications which keep data records into database.
<b>Unknown Things</b>
PHP: I don't know what memory needs by application to run with 50 users
.NET: I have seen in Task Manager, its going around 70 MB.
<b>Issues </b>
PHP: Application is running fine without any issues, event its running on shared server.
.NET: I have couple of issues here, I am using VPS (2GB Ram, 40GB Space, 1 Core CPU)
1) Session end for no reason.. someone told me that POOL gets recycle, now here I have implemented a setting to recycle at midnight, but sometime I can see it's still getting recycle in between.
2) Pool Stop and shutdown abnormally. I have seen event logs .. but they are far from my understanding.
<b>Questions</b>
1) what configuration we should required on server for .NET application in my case where 1 application is using 70mb memory and I have only 15 users at this stage
2) Due to abnormal shutdown of POOL I am getting 503 error. .. question is:
2.1) Is there any way to get notification on it ?
2.2) Is there any way to restart POOL automatically ?
3) If Microsoft says, they are dam GOOD then why we are facing these type of issues, can't they provide best configured server. Or is this related to service provider, they want charge us for their help & Support..may be here I sound like foolish, but just read my scenario ask yourself.. I am not in favor/against of anyone.
Thanks
Kartik
|
|
|
|
|
Hi,
I am having WCF service with BasicHttpBinding returns data with the connection.
Also in my requirement, we are calling another WCF service url(https://TestServer/ProcessValues.svc) to get some data to process my output with the exising data.
So i have to call this as SSL, while trying to connect, i am getting error like "Argument exception unhandled" The provided URI scheme is "https" is invalid, expected "http" parameter name "via".
This is the error i am getting.
I need to do any webconfig tweaks...?
Appreciated your help!!!
Thanks
Prabakar.
|
|
|
|
|
On the security tag try setting mode="transport
<security mode="Transport">
"There are two ways of constructing a software design: One way is to make it so simple that there are obviously no deficiencies, and the other way is to make it so complicated that there are no obvious deficiencies. The first method is far more difficult." - C.A.R. Hoare
Home | LinkedIn | Google+ | Twitter
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
