|
Can someone suggest a place for me to look for security issues with ASP.NET?
I am having a problem where my app is using an out-of-process COM server and it works just fine under the VS2005 debugger, but when it is deployed, the out-of-process COM server is not able to access the network shares or databases.
The out-of-process COM server works correctly on the same machine if I use a normal C# or VB6 application to talk to it.
How do I turn off the security, and what are the settings I need to look at so that I can have a chance at setting the correct security settings?
Thanks,
David
|
|
|
|
|
What does the COM server do ? Are you expecting it to be accesing the server or the client machine ?
Christian Graus - Microsoft MVP - C++
"also I don't think "TranslateOneToTwoBillion OneHundredAndFortySevenMillion FourHundredAndEightyThreeThousand SixHundredAndFortySeven()" is a very good choice for a function name" - SpacixOne ( offering help to someone who really needed it ) ( spaces added for the benefit of people running at < 1280x1024 )
|
|
|
|
|
The COM server runs on the server along with the ASP.NET application and accesses resources that the server can see (or at least that is what it is supposed to do).
The COM server doesn't know anything about the ASP.NET application, it is only accessed through the COM interface by the ASP.NET application.
The resources it accesses are databases through ADO, and also network shares accessible from the server machine running the ASP.NET application.
The strange thing is, even if I force the ASP.NET app and the COM server app to run as an administrator account on the server, it still is not able to access the other resources.
Thanks,
David
|
|
|
|
|
Hello,
I've been trying to find an answer, but haven't found any. Say I have a page that has several controls; is there a way that during the Page_Load I could know which control called the postback so that I can handle stuff differently during loading?
Thanks in advance!
|
|
|
|
|
One way is to check the __EVENTTARGET form field. The advantage of this is it works before OnLoad, so you can use it in for example OnInit.
if(this.Request.Form["__EVENTTARGET"] == "YourControlID")
return;
Kind regards,
Pawel Krakowiak
|
|
|
|
|
Can anyone point me to an example of how to fire a DynamicPopulateExtender from JavaScript? PopulateTriggerControlID attribute is no good, because I need to use it with a DropDownList (so there are two clicks each time) and I also need to change the page method's contextKey parameter dynamically.
Kind regards,
Pawel Krakowiak
|
|
|
|
|
How can I let my users type a value into a DropDownList that isn't in the options list?
Calling all South African developers! Your participation in this local dev community will be mutually beneficial, to you and us.
|
|
|
|
|
They must enter the text in another textbox, and then add it yourself.
|
|
|
|
|
Aw, damn. 
Calling all South African developers! Your participation in this local dev community will be mutually beneficial, to you and us.
|
|
|
|
|
The only idea I have is to use the ASP.NET AJAX AutoComplete extender[^]. It looks like a drop down, but at the same time it allows you to type in any text. I haven't used it myself yet.
Kind regards,
Pawel Krakowiak
|
|
|
|
|
Thanks Pawel, I will look at that control for future work, but I can't use it now. We have rolled out own AJAX, so no external controls are desirable.
What I'm thinking of doing is placing a textbox over the dropdown, and only ever using the textbox value. Whenever the user chooses from the dropdown, the text box gets the value of the dropdown, but they can overwrite this. When they save, I read the textbox.
Calling all South African developers! Your participation in this local dev community will be mutually beneficial, to you and us.
|
|
|
|
|
Hi Friends
I am trying to go from one page to another page using Javascript in my aspx page.
I am using
{
window.location.href = link;
}
My var link has the URL and i did confirm it by using alert.
I am getting the correct URL but i want it to go to that page.
I think window.location.href is the method for redirecting to another page.
Not sure whats wrong.
If any of you have any suggestions or help, it would be appreciated.
Thanks
Cheers
Menon
|
|
|
|
|
What you have will work in IE, but not Firefox. Someone will no doubt say this is because FF is w3-compliant and IE isn't or some such nonsense, but don't believe them: it's a bug.
The fix is twofold:
First, add a "return false;" to stop FF posting the page back to itself:
window.location.href=link;
return false;
Second, note that if running this script locally you will need to make your link absolute (http://...) but when running on a live web server a relative link will work.
cheers
Fred
|
|
|
|
|
Thanks Fred,
Well you are correct it was bug from the browser, It doesnt work for FireFox and older versions of IE also, but works for IE7.
Thanks again
Cheers
Menon
|
|
|
|
|
hi there,
i hav created a web service (converts currencies) wel its working fine at my system, but when i try to access it from some other machine, it gives an exception and in its detail all i understand is " this service is to test on local machine only" how to resolve this prob??
i want to access it from remote location??
help plz...
i m faisal
|
|
|
|
|
Have you installed a web server, like IIS, on your machine?
If you use the built in web server in Visual Studio, that can only be used on the local machine.
Experience is the sum of all the mistakes you have done.
|
|
|
|
|
yeah..IIS is installed on that machine.
but still having problems
i m faisal
|
|
|
|
|
hello to all
I put one datalist in the form and there puting one textbox. data is bind from the database into the textbox. i want to disable textbox by using java scirpt ?
|
|
|
|
|
You can disable the textbox by using the Javascript below..
var txt = document.getElementById('textbox');<br />
txt.disabled = ture;
Thanks and Regards,
Michael Sync ( Blog: http://michaelsync.net)
"Please vote to let me (and others) know if this answer helped you or not. A 5 vote tells people that your question has been answered successfully and that I've pitched it at just the right level. Thanks."
|
|
|
|
|
|
Yups, use publish web site and uncheck the option "Allow this site to be updatable".
/// -------------------------
Braulio Díez
tipsdotnet.com
/// -------------------------
|
|
|
|
|
Thanks for your reply. Can you write the steps from the beginning?
|
|
|
|
|
I require to create a Web Setup project in VS.NET 2005 that I am interested not to give the Source code to client. Please give the idea how to create.
Thanks in advance
|
|
|
|
|
I am declard a field name as date of birty - data type as date
now I get a date in a textbox as dd/mm/yyyy format. but
sqlserver as mm/dd/yyyy format
how can i store into a table as my getting value as dd/mm/yyyy
Please give me a source code in vb
thanking you
abglorie
|
|
|
|
|
If you pass the date as a parameter rather than trying to inject it into the SQL String you won't have to worry about date formats.
It will also give you an extra benefit of protecting you against SQL Injection Attacks.
And this appears to be a database question - Why isn't it in the SQL Forum?
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
