|
Hi all,
I have a set of help files(html files) in the application root directory. Now these HTML files can be accessed by the users even if they are not logged into the application. How can I restrict this?
Similarly, how can I restrict users to download java script files which is in my application root directory by directly typing the URL in the browser.
Please note, the authentication mode is windows and framework used is 1.1.
Kindly help...
Thanks in advance..
Rijz
|
|
|
|
|
Well.. .Actually browser makes separate http request for each individual external files.
Rijz wrote: Now these HTML files can be accessed by the users even if they are not logged into the application. How can I restrict this?
To make access to the html files.. I would suggest to use separate HttpHandler which will authenticate your request againist some session id, if session is created already or will do it using uid and password.
Rijz wrote: Similarly, how can I restrict users to download java script files which is in my application root directory by directly typing the URL in the browser.
In case of Javascript as a separate request is made from the browser, it would not be a good idea to restrict the download of the file. Some browser requests javascript after document is fully loaded, but there are others which actually starts download of the file as soon as it parses the Javascript tag. So you cant trap the behaviour of the browser.
Rather, I would suggest you to edit your javascript and place your sessionid within the url. Place your sessionid in a sesssion variable or in database. Create a separate HttpHandler for Js file which will check if the sessionid(might be your custom GUID which you generate during the login) passed with the querystring is valid for the current user. Allow download of the javascript only when url is valid.
say in your browser you place script tag like this
<script type="text/javascript" src="yourjavascript.js?sessionId=<%=this.Session.SessionId%>
Now from ProcessRequest of IHttpHandler, check
string qry = context.Request.QueryString["sessionId"] as string;
if(!context.Session.SessionId.equals(qry))
{
context.Response.clear();
context.Response.close();
}
Also remember to implement your class from RequiresSessionState, otherwise session will not be available in the
HttpHandler .
Hope you got the idea. ![Rose | [Rose]](https://codeproject.global.ssl.fastly.net/script/Forums/Images/rose.gif)
|
|
|
|
|
Hi all
can any one Help On this
i am using the gridview item template ,Edit itemTemplate,footer Template
to insert the data into the DB
i have developed a webservice which displays Cityname as the user types in the the character
here is the code..
<asp:GridView
ID="dg_masters" runat="server" AutoGenerateColumns="False" BackColor="White"
BorderColor="#E7E7FF" BorderStyle="None" BorderWidth="1px" CellPadding="3"
GridLines="Horizontal" ShowFooter="True" Width="746px"><AlternatingRowStyle
BackColor="#C2D69B" />
<Columns>
<asp:CommandField ShowEditButton="True" />
<asp:TemplateField>
<ItemTemplate>
</ItemTemplate>
<FooterTemplate>
<asp:Button ID="btnAdd" runat="server" CssClass="Button" Text="Add" OnClick="AddNewDesignation"
ValidationGroup="abc" />
</FooterTemplate>
</asp:TemplateField>
<asp:TemplateField HeaderText="Designation Code">
<EditItemTemplate>
<asp:TextBox ID="txt_DesignationCode" runat="server" CssClass="textboxDisabled"
Text='<%# Eval("Designation Code")%>' Enabled="false">
</asp:TextBox>
<asp:RequiredFieldValidator ID="txt_Vld_designCOde" runat="server"
ControlToValidate="txt_DesignationCode" Display="Dynamic"
ErrorMessage="Designation Code" CssClass="Validators">
</asp:RequiredFieldValidator>
</EditItemTemplate>
<FooterTemplate>
<asp:TextBox ID="txt_designationCode" runat="server" CssClass="textboxDisabled" MaxLength="3">
</asp:TextBox>
<asp:RequiredFieldValidator ID="txt_Vld_designCode1" runat="server"
ControlToValidate="txt_designationCode" Display="Dynamic"
ErrorMessage="Designation Code" ValidationGroup="abc" CssClass="Validators">
</asp:RequiredFieldValidator>
</FooterTemplate>
<ItemTemplate>
<asp:Label ID="lbl_DesignationCode" runat="server" Text='<%# Eval("Designation Code")%>'>
</asp:Label>
</ItemTemplate>
<ItemStyle Width="30px" />
</asp:TemplateField>
<asp:TemplateField HeaderText="Designation Description">
<EditItemTemplate>
<asp:TextBox ID="txt_designDesc" runat="server" CssClass="textboxEnabled"
Text='<%# Eval("Designation Description")%>'>
</asp:TextBox>
<asp:RequiredFieldValidator ID="txt_vld_DesignDescr" runat="server"
ControlToValidate="txt_designdesc" Display="Dynamic"
ErrorMessage="Designation Description" CssClass="Validators">
</asp:RequiredFieldValidator>
</EditItemTemplate>
<FooterTemplate>
<asp:TextBox ID="txt_designDesc" runat="server" CssClass="textboxEnabled" AutoCompleteType="None" >
</asp:TextBox>
<cc1:AutoCompleteExtender ID="aceMinfileNumber" runat="server"
ServicePath="WebService.asmx" ServiceMethod="GetCompletionList" TargetControlID="txt_designDesc"
MinimumPrefixLength="1" EnableCaching="true" CompletionInterval="1000" CompletionSetCount="15" />
<asp:RequiredFieldValidator ID="txt_vld_designdescr" runat="server"
ControlToValidate="txt_designdesc" Display="Dynamic"
ErrorMessage="Designation Description" validationGroup="abc" CssClass="Validators">
</asp:RequiredFieldValidator>
</FooterTemplate>
<ItemTemplate>
<asp:Label ID="lbl_designDesc" runat="server" Text='<%# Eval("Designation Description")%>'>
</asp:Label>
</ItemTemplate>
<ItemStyle Width="100px" />
</asp:TemplateField>
</Columns>
<FooterStyle BackColor="#B5C7DE" ForeColor="#4A3C8C" />
<HeaderStyle BackColor="#4A3C8C" Font-Bold="True" ForeColor="#F7F7F7" />
<PagerStyle BackColor="#E7E7FF" ForeColor="#4A3C8C" HorizontalAlign="Right" />
<RowStyle BackColor="#E7E7FF" ForeColor="#4A3C8C" />
<SelectedRowStyle BackColor="#738A9C" Font-Bold="True" ForeColor="#F7F7F7" />
</asp:GridView>
WEBSERVICE
Dim adp As SqlDataAdapter
Dim str_Qry As String
str_Qry = "select distinct cityname from tblLocation where cityname like '" + prefixText + "%'"
adp = New SqlDataAdapter(str_Qry, cnn)
Dim daset As Data.DataSet = New Data.DataSet
adp.Fill(daset, "xxx")
Dim temp As New List(Of String)
For i As Integer = 0 To daset.Tables(0).Rows.Count - 1
temp.Add(daset.Tables(0).Rows(i).Item(0).ToString())
Next
Return temp.ToArray
cnn.Close()
plzzzzzzzzzzzzz Its urgent
|
|
|
|
|
devkranth wrote: plzzzzzzzzzzzzz Its urgent
vats your question? 
|
|
|
|
|
Arun Jacob wrote: vats your question
Its definately got nothing to do with V.A.T. 
(I think the word you're looking for is "what's")
|
|
|
|
|
Thats only a short form of 'what' just a chat form of that.When v r replying in a hurry its accidentally coming out as v r using this all the time(laziness lol ).Definitely i'll keep this in mind.Thanks J4amieC.
|
|
|
|
|
Arun Jacob wrote: When v r replying in a hurry its accidentally coming out as v r
VR? AS IN Virtual Reality? Yeah, it was big in the late 80's and early 90's - but again I cant see what this has to do with the Original post!
 Seriously though, you have a point about text messaging, using a cellphone keypad - but I assume you're using a proper keyboard for posting here, and so there is no excuse for using text speak.
|
|
|
|
|
OK OK I WILL DO THAT BECAUSE OF GOOD INTENTION BEHIND THAT.
|
|
|
|
|
devkranth wrote: plzzzzzzzzzzzzz Its urgent
What exactly is urgent? You've actually not asked a question - you've just stated your intent.
devkranth wrote: can any one Help On this
i am using the gridview item template ,Edit itemTemplate,footer Template
to insert the data into the DB
i have developed a webservice which displays Cityname as the user types in the the character
See.
|
|
|
|
|
Hi,
I am creating item template dynamically inside gridview in Asp.net 2.0.
The Item templates are sucessfully created.like as follows,
Assume below as a grid view Rows & Columns :
EmpID EmpName Basic HRA MA TA PF OTHER
-------------------------------------------------------------
1 Employe1 10000 1000 500 400 300 700
2 Employe2 20000 2000 800 600 400 800
3 Employe3 30000 2500 900 700 400 900
-------------------------------------------------------------
so the above coloumns as item template created dynamically First 2 column are labels and rest of the columns are textbox...So the first time loading the gridview with 3 rows empty - then i will enter data then i will save it to database... so UPTO here working fine...
Note:
The problem is i can change the text vaue from any rows any coloumn, i want find which rows and which cell was changed ,, how to find this..plz tell me ...
i ll give code snippet,
Gridview_RowCreatedEvent()
If e.Row.RowType = DataControlRowType.DataRow The
Dim txt As New TextBox
For inti = 0 To 7
strname = "txt" & inti
txt = CType(e.Row.FindControl(strname), TextBox)
AddHandler txt.TextChanged, AddressOf txt_TextChanged
Next
End If
Regards,
Sekannak....
kannak
|
|
|
|
|
You can set the id of the control to contain a row index, then in your text changed event, check the id of the control that fired it. You can also use it's Tag property.
Christian Graus
Driven to the arms of OSX by Vista.
Read my blog to find out how I've worked around bugs in Microsoft tools and frameworks.
|
|
|
|
|
You can use the text changed event of the textbox.If u want that particular row just try this,
GridviewRow gvRow = (sender as TextBox).NamingContainer
|
|
|
|
|
Hi guys i am using ajax controls in my application...,
my probs is, suppose if i didnt do any events for 5 mins...,later i will click on my event...,
my evets are not firing properly...,
how to avoid it?
Thanks & Regards,
Member 3879881,
please don't forget to vote on the post
|
|
|
|
|
If you don't use the page for 5 minutes, then you click something ? I don't think that's normal, they should continue to work. Perhaps your code is slowing down the system over time, due to memory leaks in javascript ?
Christian Graus
Driven to the arms of OSX by Vista.
Read my blog to find out how I've worked around bugs in Microsoft tools and frameworks.
|
|
|
|
|
Try ScriptMode="Release" in Script Manager....
|
|
|
|
|
What are peoples thoughts on databinding (in ASP.NET), is it good or bad? I have recently started using databinding and I am not enjoying it. My biggest problem is that it is so hard to test. The only way to test it is by running it and manually trying every possibility. I fear that I will leave one or two properties unlinked and then they won't do anything.
At the moment I am unable to get a dropdownlist working on a InsertItemTemplate. As it is the 'insert' one it doesn't try to populate the objects. I need to populate the items in the dropdown, but not populate the value. Setting the datasource doesn't do anything. Any ideas how I can solve this problem?
|
|
|
|
|
Member 4487083 wrote: What are peoples thoughts on databinding (in ASP.NET), is it good or bad?
Well, I guess my question would be, what is the alternative ? Writing code that iterates by hand ? No thanks.
Member 4487083 wrote: My biggest problem is that it is so hard to test. The only way to test it is by running it and manually trying every possibility.
I'm not sure how you mean.
Member 4487083 wrote: I need to populate the items in the dropdown, but not populate the value. Setting the datasource doesn't do anything. Any ideas how I can solve this problem?
You should populate your drop down in the item databound event.
Christian Graus
Driven to the arms of OSX by Vista.
Read my blog to find out how I've worked around bugs in Microsoft tools and frameworks.
|
|
|
|
|
Databinding is a great feature, a base to zero code tricks. If you follow rules properly you will found it very helpfull and very thin front end pages.
|
|
|
|
|
Hello together,
I have a part in my web project for managing documents. If I upload a file and create the directory for store in with:
System.IO.Directory.CreateDirectory(strPathName)
it works fine with normal local path like "C:\temp\document".
But if the path is a UNC-Path, I get an access denied exception. It does not matter that the UNC-Path is a local path like "\\localhost\Share" or to another computer.
I try to use the impersonate feature in web.config:
<identity impersonate="true" />
In this case normally ASPNET user is used by IIS and I have set full control access rights for this user to C:\temp directory and all sub dirs. Result: Get access denied exception
Than I set user and pass:
<identity impersonate="true" userName="domain/user" password="xyz" />
I get access denied too.
Last chance was an idea from a guy found in a blog:
http://blogs.msdn.com/saurabhkv/archive/2008/05/29/windowsidentity-impersonation-using-c-code.aspx
The function runs without an error, but it solves not my problem. I get access denied too.
What can I do?
\\\| \\ - -
( @ @ )
+---------------oOOo-(_)-oOOo-----------------+
| Stephan Pilz stephan.pilz@stephan-pilz.de |
| <a href="http://www.stephan-pilz.de">www.stephan-pilz.de</a> |
| ICQ#: 127823481 |
+-----------------------Oooo------------------+
oooO ( )
( ) ) /
\ ( (_/
\_)
|
|
|
|
|
Why on earth would you write a website that tries to create directories over a network ? You should always use Server.MapPath for any System.IO methods, and obviously, they are going to map to local paths.
Christian Graus
Driven to the arms of OSX by Vista.
Read my blog to find out how I've worked around bugs in Microsoft tools and frameworks.
|
|
|
|
|
Why on earth, somebody must ask, WHY something must be so as written 
I have my reasons and please note: I'm note the only one with this problem. There are many many pages in the web with this problem and nobody can help.
So. BTT
The reason is: If you want store documents and I have a web farm, each web server instance need access to each document. Therefore only on web server in the web farm have direct local access to the documents. Each other web server via UNC-Path. The alternative is a copy of each document local inside each web server. That is not acceptable by me, my company and our customers.
\\\| \\ - -
( @ @ )
+---------------oOOo-(_)-oOOo-----------------+
| Stephan Pilz stephan.pilz@stephan-pilz.de |
| <a href="http://www.stephan-pilz.de">www.stephan-pilz.de</a> |
| ICQ#: 127823481 |
+-----------------------Oooo------------------+
oooO ( )
( ) ) /
\ ( (_/
\_)
|
|
|
|
|
iam working an access control by magnatec car in order to make connection between the mahien and asp.net to read data from the card at first i have to save the info that are found on the card of a txt file then read them using asp in a text box in this type "12/1/2009|123|12 " the date is the exipry date of the card and 123 is id of the student my problem is i need to put a read button near the text box but to read only the id not all info in order to bring data about the id from the data base
|
|
|
|
|
na3em 2009 wrote: iam working an access control by magnatec car in order to make connection between the mahien and asp.net
I have read this at least 15 times, and I still have no idea what it means. Dictionary.com tells me there is no such word as 'mahien'.
na3em 2009 wrote: n this type "12/1/2009|123|12 " the date is the exipry date of the card and 123 is id of the student my problem is i need to put a read button near the text box but to read only the id not all info in order to bring data about the id from the data base
I can't make sense of this either. I *think* you want to get some data out of this. The reason the string has the pipe (|) as a seperator, is that it's unique. You can use the Split method on the string class to turn this into an array of three strings, the date, then 123 then 12. Then you can deal with them from there, if you want to show only one of the three.
Christian Graus
Driven to the arms of OSX by Vista.
Read my blog to find out how I've worked around bugs in Microsoft tools and frameworks.
|
|
|
|
|
hi,
I am using modalpopupextender for my login and user Registration purposes on masterpage. its works fine simple content page, but when i load a page which contain(multiview and view controls) then page is loaded but links on that page does not works. please help me
Regards
|
|
|
|
|
debug it carefully sounds like something is getting mixed up most probably scripts.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
