ASP.NET

[HttpPost]
        [AllowAnonymous]
        [ValidateAntiForgeryToken]
        public ActionResult Register(RegisterModel model)
        {
            if (ModelState.IsValid)
            {
                // Attempt to register the user
                try
                {
                    WebSecurity.CreateUserAndAccount(model.UserName, model.Password);
                    int userID = WebSecurity.GetUserId(model.UserName);
                    bool s = WebSecurityExtender.UpdateUserAndAccount(userID, model.Name, model.CompanyName, model.EmailAddress);

                    WebSecurity.Login(model.UserName, model.Password);
                    return RedirectToAction("Index", "Home");
                }
                catch (MembershipCreateUserException e)
                {
                    ModelState.AddModelError("", ErrorCodeToString(e.StatusCode));
                }
            }

            // If we got this far, something failed, redisplay form
            return View(model);
        }

using System.Web;
using System.Data;
using System.Data.SqlClient;
using System.Configuration;


namespace WebMatrix.WebData
{
    public class WebSecurityExtender
    {

        public static bool UpdateUserAndAccount(int userID, string name, string companyName, string emailAddress)
        {
            bool success = false;
            string connStr = ConfigurationManager.ConnectionStrings["DefaultConnection"].ConnectionString;
            SqlConnection conn = new SqlConnection(connStr);

            string query =
            "UPDATE " +
            " UserProfile " +
            "SET " +
            "  Name = @Name " +
            " ,CompanyName = @CompanyName " +
            " ,EmailAddress = @EmailAddress " +
            " WHERE UserID = @UserID ";

            SqlCommand cmd = new SqlCommand(query, conn);

            cmd.Parameters.Add(new SqlParameter("@UserID", userID));
            cmd.Parameters.Add(new SqlParameter("@Name", name));
            cmd.Parameters.Add(new SqlParameter("@CompanyName", companyName));
            cmd.Parameters.Add(new SqlParameter("@EmailAddress", emailAddress));     

            try
            {
                conn.Open();
                cmd.BeginExecuteNonQuery();                                

            }
            finally
            {
                conn.Close();

            }

            return success;
        }
    }
}

public ActionResult StreakwaveReseller2015_DownloadApp()
{
    return File("~/path/to/the/file.exe",
        System.Net.Mime.MediaTypeNames.Application.Octet,
        "TheDownloadFileName.exe");
}

public FileResult StreakwaveReseller2015_DownloadApp()
{

  string filePath = Server.MapPath("~/Downloads/Streakwave/streakwave_1.1.0.784.exe");
  byte[] fileBytes = System.IO.File.ReadAllBytes(filePath);
  return File(fileBytes, System.Net.Mime.MediaTypeNames.Application.Octet, "streakwave_1.1.0.784.exe");

}

<configuration>
    <system.webServer>
        <handlers accessPolicy="None" />
    </system.webServer>
</configuration>

RajeeshMenoth wrote:

so any one can hack immediately into the project