|
Why would one use the value of "UserUri" for the cookieless property of Session? This makes the session id appear in address bar which means that a malicious user can somehow by trial and error put random texts in the session state portion of the webaddress and see if he comes up with a valid session belonging to someone else?
----------------------------------------------------------
Lorem ipsum dolor sit amet.
|
|
|
|
|
If you are in a company that has decided for security reasons to disable cookies on all browsers but still want to use the features of Sessions for internal intranet applications that would be a perfect solution. It's like you can have your cookie and eat it too.
And if you are that worried about session spoofing you can enable all sorts of other things on the server that link your session to your IP, your user agent etc. as described here[^] under Securing Session State.
|
|
|
|
|
Dear all,
Pls help me, I want to know the way to analyst on website. How to know which website is using webservice.
Thanks and best regards
|
|
|
|
|
You can't really tell. The site could be using a web service on the server side or via JavaScript.
I know the language. I've read a book. - _Madmatt
|
|
|
|
|
This is way outside of any web development I've done so I am not quite sure even how to phrase the question.
I have some web code in master page that dynamically generates a list of user bookmark links, retrieved out of a SQL database. The first link on the generated list is one that allows the user to Add This Page or Remove This Page, depending on whether the page is already in the list of bookmarks. Here is the relevant code:
If CanAddToFavorites Then
If MyUser.Favorites.HasUrl(Url) Then
Result.AppendFormat("<li><a href=""/Reps/Admin/ManageFavorites.aspx?op=r&url={0}"">Remove This Page</a></li>", Url)
Else
Result.AppendFormat("<li><a href=""/Reps/Admin/ManageFavorites.aspx?op=a&url={0}&d={1}"">Add This Page</a></li>", _
HttpUtility.HtmlEncode(Url), HttpUtility.HtmlEncode(PageFullTitle))
End If
Result.AppendLine()
End If
This works fine, but I am not happy with passing everything through the URL. Ideally, I would convert the a into a LinkButton; on postback the handler would wrap the data into a class, save it to Session and redirect to ManageFavorites.aspx.
I cannot hard-code the link, as bookmarking is available only to field users (back office users get a predetermined bookmark list that cannot be altered.) Given this constraint, how can I intercept a link click to perform server-side code? This sounds like a job for AJAX but I am totally ignorant about that tool so relevant examples would be a huge help.
|
|
|
|
|
If you are redirecting to another page then Ajax isn't going help you.
Gregory.Gadow wrote: I cannot hard-code the link
What link? You mean to your manage favorites page?
I know the language. I've read a book. - _Madmatt
|
|
|
|
|
What I need is a link that posts back to the page so that I can perform server-side operations. My understanding is that AJAX was designed for such operations.
And yes, I mean the link to the manage favorites page. You will note in the code I provided that the text is appended to a StringBuilder object. After the link to ManageFavorites.aspx is added, it goes through the list of user bookmarks and adds those. The function then returns either the built string, or an empty string if the user is one of the back office staff.
|
|
|
|
|
ASP.NET is built around postback operations. Ajax is an out of band call that does not use postback.
I don't understand the problem, you are not explaining it clearly. You can't hard code the link for a LinkButton but that is what you are doing for an anchor tag. You should do some research on databinding and databound controls such as Repeater or DataList rather than using such brute force methods and constructing a string.
I know the language. I've read a book. - _Madmatt
|
|
|
|
|
The code I posted is part of a function, which returns Result.ToStrong. In other words, the anchor is not hard coded, it is being injected into the page at render time as a text stream, along with the user's bookmarks. This works fine with regular HTML, but trying to append <asp:LinkButton ...> would result in that literal text being added, not a control with all its associated functionality.
|
|
|
|
|
Gregory.Gadow wrote: trying to append <asp:linkbutton ...=""> would result in that literal text being added,
Yes, of course it would 
Ever heard mention of databinding? You know, like I said in my last response.
I know the language. I've read a book. - _Madmatt
|
|
|
|
|
hello to everyone
i have purchsed a domain name from www.whiz.in and i want to link it with my blog at blogspot.com.
please guide me step by step as i am very new to such things. thanks for your help, highly obliged.
take care
|
|
|
|
|
You could request the domain provider to modify the DNS settings to forward to your blogs address.
|
|
|
|
|
i called them but they said u can read our manual on site but it went off my head.  plzz help
|
|
|
|
|
Well, if the provider has it on their site, go read the manual....
We don't know who your provider is, we don't know your passwords, we don't know your blogs address.
If you go through life expecting everything done for you, you wont get very far will you.
Extra fries with that?
|
|
|
|
|
then let me try myself, if i found any difficulty i'll send u screenshot.
firstly tell me that all settings are done in domain provider's control panel or we do need something from our blog except its address ?
|
|
|
|
|
Everything is done from your domain providers control panel.
All you need to do is look for something relating to DNS
There will be an option for Forwarding and all you need to do is put your full address for your blog in there.
Here is the instruction page on your providers website;
http://domain.whiz.in/kb/servlet/KBServlet/faq1494.html[^]
|
|
|
|
|
thanks a lot for ur help sir but the link u give is showing error "page cannot be found".
|
|
|
|
|
i just clicked the link from my message and it opened up the page fine......
It was easy to find from your provider website though, sure you'll manage.
The next message i want to see is, "Woo Hoo, I've done it, thanks......"
|
|
|
|
|
woo hooo i have done it sir...... if u need any kinda help i m ready
thanks again
|
|
|
|
|
can i have ur email id so that i can send u the screenshot ??
|
|
|
|
|
if i give u all my passwords will u b able 2 do that 4 me ?
|
|
|
|
|
Hang on a minute, let me translate from text-speak to english..........
[translator output]
If I give you all my passwords would you be able to do that for me please?
No, why don't you have a go yourself, sheesh, if your messing about with blogs and domains and visiting codeproject, you must have some IT interest, where is your willingness to learn?
What is to say that you give me your password and I redirect your domain to some dodgy porn website and then change the passwords to lock you out from your account and then start using your domain to send millions of spam messages and host malware?
A bit too trusting are you not?
If your provider has any sort of decent site/support, then it should be laid out in an easy to follow FAQ.
Who is your provider? what is their web address?
|
|
|
|
|
Oh, please send me all your passwords, and I will do it, but only, if you also send me all your credit card information.
No really, why would you trust a complete stranger on this?
"I love deadlines. I like the whooshing sound they make as they fly by." (DNA)
|
|
|
|
|
Don't post across forums.
You posted this in Q&A and were answered there.
------------------------------------
I will never again mention that I was the poster of the One Millionth Lounge Post, nor that it was complete drivel. Dalek Dave
|
|
|
|
|
I have a simple test web application with a single Default.aspx page with 2 buttons having the following handlers:
What surprises me is I expected to get the same session ID between successive clicks of either buttons but I get different session ID's each time. I expected this to be different clicking from 2 different iexplorer instances and more so between an iexplorer and chrome / firefox.
Also, from this experiment, it is obvious that HttpContext.Current.Cache is shared among clients as I get the values inserted from prior requests from different browsers.
protected void _btnAdd_Click(object sender, EventArgs e)
{
int cacheCount = HttpContext.Current.Cache.Count;
Random rnd = new Random();
HttpContext.Current.Cache[cacheCount.ToString()] = TextBox1.Text;
int intLessThanCacheCount = rnd.Next(cacheCount);
_lblCacheIndex.Text = intLessThanCacheCount.ToString();
_lblCacheValue.Text = (string) HttpContext.Current.Cache[intLessThanCacheCount.ToString()];
lblSessionId.Text = HttpContext.Current.Session.SessionID;
ViewState["Value"] = TextBox1.Text;
}
protected void _btnGet_Click(object sender, EventArgs e)
{
int cacheItems = HttpContext.Current.Cache.Count;
Random rnd = new Random();
int intLessThanCacheCount = rnd.Next(cacheItems);
_lblCacheIndex.Text = intLessThanCacheCount.ToString();
_lblCacheValue.Text = (string)HttpContext.Current.Cache[intLessThanCacheCount.ToString()];
lblSessionId.Text = HttpContext.Current.Session.SessionID;
lblSessionValue.Text = ViewState["Value"].ToString();
}
----------------------------------------------------------
Lorem ipsum dolor sit amet.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
