|
Honestly? If you're going to be storing people's financial information (credit card details etc) and you have to ask, then... don't. Or find someone with experience to work with on this project - do not try to wing it yourself. This is other people's money and livelihoods you're playing with. But do you really need to store sensitive data yourself?
You will need to use https / SSL.
You will need to encrypt data securely.
You will need to work with someone who knows what they are doing.
or
You will need a good lawyer.
|
|
|
|
|
Yeah I will use all the above and except Lawyer, but just in case I will keep the Lawyer also in mind. But sure thanks and I will never go live until we are sure we have all the Data secured etc. Not only that I will get more and more suggestions even meet with more number of people. Thanks my friend.
Even-though I work with others but still I want to have more information even to know and understand if the person I am working with is doing right or not?
Can you please elaborate about the following two things you mentioned above my friend?
You will need to use https / SSL.
You will need to encrypt data securely.
- I am planning to deploy the site on GoDaddy, is it better approach for SSL and is it safe if I do it or should I have dedicated Servers for my website? Having dedicated Servers initially would be more expensive but eventually we can do it but does GoDaddy work or do I need to go for Azure? Which is the best and price-wise reasonable for us, because its a startup so want to go one step at a time, not planning to spend all at the same time and be in loss - please understand it my friend.
- Can you please suggest me better things for the Data encryption as well? What are the best possible options available I am not saying I am going straightly into it, but I am just starting to learn more and more.
Thanks,
Abdul Aleem
"There is already enough hatred in the world lets spread love, compassion and affection."
|
|
|
|
|
I am reluctant to start giving advice on this topic as I don’t regard myself as an expert in it. All I need to secure is user logins for sites hosted on my Cloud server and running under https. I use a third-party tool (well, class) for hashing the passwords, and 2-factor authorisation for logins. So far so good (not that anyone would be terribly interested in hacking these sites anyway – the reward would hardly justify the effort!)
I don’t know about Godaddy – I expect they can offer you SSL certificates for your site, but personally if I was going to be holding really sensitive information I’d prefer to host it on a server I had full control over rather than a shared platform. A shared platform also means a shared database…. I would also employ someone who is an expert in I.T./data security. Examine their CV and follow-up references to assure yourself that they are genuine and up to the task.
IF I am not mistaken many, if not most, Cloud server services have a free tier, which will likely offer enough features to get your startup started, and cheaper than Godaddy. Hunt around.
|
|
|
|
|
That's great advice my friend - thank you very much. I will I am also scared little bit to hold sensitive information by myself, but surely definitely try my best to have an expert in security etc.
Thanks,
Abdul Aleem
"There is already enough hatred in the world lets spread love, compassion and affection."
|
|
|
|
|
Hello Friends,
When I Upload file over live I got error on other pages "directory name invalid error in asp.net"
then I have to reset pool.
Please help me out
|
|
|
|
|
If you want help to fix your code, then you need to show us the relevant parts of your code, and the full details of the error you're getting.
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
Hello,
I am just uploading a file using FTP, and error giving on other pages
|
|
|
|
|
If you don't show us the relevant parts of your code, and provide the full details of the error message, then we can't help you.
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
Hello friends,
I have 5 lac (or more in future) Data to access in my asp.net webform.
Currently using GridView with Custom Paging with repeater control.
Note : my codes are based on this :-
[^]
private void BindPager(int totalRecordCount, int currentPageIndex, int pageSize)
{
double getPageCount = (double)((decimal)totalRecordCount / (decimal)pageSize);
int pageCount = (int)Math.Ceiling(getPageCount);
List<ListItem> pages = new List<ListItem>();
if (pageCount > 1)
{
pages.Add(new ListItem("FIRST", "1", currentPageIndex > 1));
for (int i = 1; i <= pageCount; i++)
{
if (i == 1)
{
pages.Add(new ListItem(i.ToString(), i.ToString(), i != currentPageIndex ));
}
else
{
pages.Add(new ListItem(i.ToString(), i.ToString(), i != currentPageIndex + 1));
}
}
pages.Add(new ListItem("LAST", pageCount.ToString(), currentPageIndex < pageCount - 1));
}
rptPager.DataSource = pages;
rptPager.DataBind();
}
But this
=>code is not functioning well for page no "1" and "First" option.
=>It generates around 10,000 (Page No) links if my page size is 50 records/page, which is look too odd.
=>facing sorting issue with this.
Can anyone tell me solution for the above or give me some alternative.
|
|
|
|
|
|
Hi guys.
I have a question regarding the learning path for ASP.net. I have a fundamentals of C# and basic experience with creating apps for windows 8 and UWP apps. I know some basics of java-script and can create static websites. Now I want to start creating web sites including back-end. I want create something where a user can register, login, have a profile, make a payment and so on.
The thing is that I am quite confused about this topic and cannot find a clear answer.
I hear the terms like ASP.NET, ASP.NET 5, ASP.NET MVC, ASP.NET CORE, ASP.NET MVC CORE etc.
So now, when I am trying to find and online course I don't know what to learn first and what not to learn because its old and not worth it.
If you could guys point me in the right direction on what to learn and what order to be atcheive my goal would be great. Any suggestions about any specific course would be appreciated.
Tanks in advance.
|
|
|
|
|
ASP.NET Core is the "new shiny", which is getting almost all of Microsoft's love these days.
ASP.NET MVC Core doesn't exist as a separate thing; it's just a part of ASP.NET Core.
Anything that isn't "Core" typically comes under the ASP.NET umbrella. "Web Forms" is the oldest ASP.NET technology, and should generally be avoided for new development wherever possible. MVC and WebAPI were bolted on later; they generally result in much cleaner code, and were the starting point for ASP.NET Core.
ASP.NET Documentation | Microsoft Docs[^]
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
I have a Tablix, and you go to Tablix properties and choose Sorting,
And of course you can add Field values to the sort order.
On the 2nd Sort Order, I need a custom expression, which sorts by Company Name or Sales Totals based on a Parameter;
"N" stands for Company Name, "T" stands for Sales Total
thus
=iif(Parameters!sortOrder.Value = "N", Fields!FCOMPANY.Value, Fields!FCSAMT.Value)
But if I sort on Sales Totals, I need the highest first, then lowest; Z-A
My expression works fine for Company Name: A-Z
But I couldn't find any references on the web for sort order.
If it ain't broke don't fix it
|
|
|
|
|
Maybe you have to make 2 filters for this, and can't do it in one, and use the button to select the order.
Well I did that and it works. Just thought I could do it in 1 expresion
If it ain't broke don't fix it
|
|
|
|
|
I am trying to build a dictionary of RedirectToRouteResults.
Background:
I am building a web application. Once a user gets past the login, the server returns an encrypted session cookie that follows the user around and is used to display user specific information on each page. Pretty standard fair. Now, the problem is that each Controller Action performs a check on the cookie to check for tampering, if the user's session has expired, if the user is authorized for this page, etc... so each controller has to handle a half-dozen different return types from the security check function. I could handle this with a switch...case in the catch block of each controller's code but that seems sloppy.
The Question:
I am having trouble figuring out how I can build a Dictionary of redirect routes to simplify this. I haven't been able to find anything on the internet in the way of an example for properly building a RedirectToRouteResult object that can be returned in a controller.
Instead of this:
public ActionResult Index()
{
SecurityCheck secCheck = ValidateConnection(this);
if (secCheck != secCheck.Okay)
{
switch (secCheck)
{
case SecurityCheck.AuthenticationFailure:
return RedirectToAction("Default", "ErrorHandler", new { message = "Not Authorized." });
}
}
}
I would like to simplify it to:
public ActionResult Index()
{
SecurityCheck secCheck = ValidateConnection(this);
if (secCheck != secCheck.Okay)
{
return SecurityRedirect.Routes[secCheck];
}
else
{
return View();
}
}
Is there a way? I am having no luck figuring out how to build a RedirectToRouteResult as the documentation on it is Spartan at best. I do believe that they would accomplish my goal.
if (Object.DividedByZero == true) { Universe.Implode(); }
Meus ratio ex fortis machina. Simplicitatis de formae ac munus. -Foothill, 2016
|
|
|
|
|
Foothill wrote: each Controller Action performs a check on the cookie
Sounds like you want an action filter[^] instead. 
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
Is it possible to pass an object created by an authorization filter to the controller action? My authentication processing creates several objects that get used by most controller actions.
if (Object.DividedByZero == true) { Universe.Implode(); }
Meus ratio ex fortis machina. Simplicitatis de formae ac munus. -Foothill, 2016
|
|
|
|
|
Something like this[^] should work. If you add the data to the filterContext.RouteData.Values collection with a specific key, you should be able to receive it as a parameter to your action, where the parameter name matches the key.
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
I ended up wrapping the Controller class in a wrapper class with Properties for the data that I needed to pass along. Problem solved.
if (Object.DividedByZero == true) { Universe.Implode(); }
Meus ratio ex fortis machina. Simplicitatis de formae ac munus. -Foothill, 2016
|
|
|
|
|
Okay, so I have made some progress but I am running into a bit of trouble. On a lot of failures, I redirect the user to the login page but the page URL is not being populated so it tries to call my login action on whatever page its on resulting in an error.
private ViewResult GetRedirectToLogin()
{
ViewResult result = new ViewResult();
result.ViewName = "~/Views/Login/Index.cshtml";
result.MasterName = "~/Views/Shared/_loginlayout.cshtml";
result.TempData = _context.Controller.TempData;
return result;
}
This has been working. Any errors with authentication are caught and the user is redirected. The problem is that the browser still thinks its on the first page so that when I click my "Login" button the server looks for a [HttpPost]Login action and returns a 404 error.
if (Object.DividedByZero == true) { Universe.Implode(); }
Meus ratio ex fortis machina. Simplicitatis de formae ac munus. -Foothill, 2016
|
|
|
|
|
How about:
private ActionResult GetRedirectToLogin()
{
return new RedirectToRouteResult(new RouteValueDictionary
{
{ "Controller", "Login" },
{ "Action", "Index" }
});
}
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
I found that one. Works like a charm. Thanks for your help on this one. I had never even looked at Action Filters before this.
if (Object.DividedByZero == true) { Universe.Implode(); }
Meus ratio ex fortis machina. Simplicitatis de formae ac munus. -Foothill, 2016
|
|
|
|
|
I have an ASP.Net application built in Visual Studio 2015 and deployed to the Azure environment. I am trying to add the capability to allow the user to reset their password. The application sends an email to the user with a link that contains a code to validate the user. After clicking on the link, the user is sent to a page that allows them to enter a new password then click a Submit button to actually change the password. This works fine in the Visual Studio environment but fails with no indication of why after being deployed to Azure. Does anyone have an idea of what might cause this?
The original page is displayed correctly and the code is validated. The process fails when the user clicks the submit button and the standard login page is displayed.
Thanks.
Phil
|
|
|
|
|
How can anyone guess with only that information Quote: fails with no indication of why
You must be able to do some kind of debugging to track down the point of failure: is the token not being read? Is it being found in the database? Is a matching user record found? Is the database read or write the issue? There are numerous places in the process you can monitor to see what's going on. If nothing else, log every step along the way...
|
|
|
|
|
The token works fine and the user record is found. Those items are checked before the page is displayed that allows the user to enter a new password. It fails when it tries to submit the information. I do not have remote debugging capability so the best I can do is try to display error messages but none of them are displayed.
Code is included below:
@using Microsoft.AspNet.Identity;
@model CLCC_Browser.Models.ManageResetViewModel
@{
ViewBag.Title = "Password Reset";
Layout = "~/Views/Shared/_Layout.cshtml";
}
@ViewBag.Title.
@using (Html.BeginForm("ManageReset", "Account", FormMethod.Post, new { @class = "form-horizontal", role = "form" }))
{
@Html.AntiForgeryToken()
@Html.ValidationSummary()
@Html.HiddenFor(m => m.Token, new { @class = "form-control" })
@Html.HiddenFor(m => m.UserID, new { @class = "form-control" })
}
[AllowAnonymous]
public async Task<actionresult> ManageReset(string userName, string userId, string code)
{
IdentityResult result;
ManageResetViewModel model = new ManageResetViewModel();
var provider = new DpapiDataProtectionProvider("PokerResults");
UserManager.UserTokenProvider = new DataProtectorTokenProvider<applicationuser>(provider.Create("ResetPassword"));
UserManager.FindById(userId);
try
{
result = await UserManager.ConfirmEmailAsync(userId, testcode);
}
catch (InvalidOperationException ioe)
{
// ConfirmEmailAsync throws when the userId is not found.
ViewBag.errorMessage = ioe.Message;
return View("Error");
}
if (userId == null || code == null)
{
return View("Error");
}
ViewBag.HasLocalPassword = false;
ViewBag.UserID = userId;
model.UserName = userName;
model.UserID = userId;
model.Token = code;
return View(model);
}
[HttpPost]
[ValidateAntiForgeryToken]
public async Task<actionresult> ManageReset(ManageResetViewModel model)
{
IdentityResult result;
var provider = new DpapiDataProtectionProvider("PokerResults");
UserManager.UserTokenProvider = new DataProtectorTokenProvider<applicationuser>(provider.Create("ResetPassword"));
string thetoken = await UserManager.UserTokenProvider.GenerateAsync("ResetPassword", UserManager,
UserManager.FindByName(model.UserName));
model.Token = thetoken;
ModelState state = ModelState["NewPassword"];
if (state != null)
{
state.Errors.Clear();
}
if (ModelState.IsValid)
{
// result = await UserManager.AddPasswordAsync(User.Identity.GetUserId(), model.NewPassword);
result = await UserManager.ResetPasswordAsync(model.UserID, thetoken, model.NewPassword);
if (result.Succeeded)
{
ModelState.AddModelError("", "Password Reset Succeeded.");
Response.Write("alert('Password Updated');");
ViewBag.Message = "Password Reset Successful";
ViewBag.ResetType = "Complete";
Session["ResetStatus"] = "Complete";
return RedirectToAction("ResetPassword", "Account", "Complete");
// return RedirectToAction("Manage", new { Message = ManageMessageId.SetPasswordSuccess });
}
else
{
ModelState.AddModelError("", "Password Update failed, User = " + model.UserID);
Response.Write("alert('Password Update failed');");
AddErrors(result);
}
}
else
{
ModelState.AddModelError("", "Password Update failed");
Response.Write("alert('Password Update failed - Invalid Model');");
}
return View(model);
}
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
