Posts

Showing posts from November, 2009

Creating a Secure Base Page class for ASP.NET Pages

Every web application developed using .NET as application framework needs authentication as well as authorization. ASP.NET provides 2 types of authentication providers for the web applications, namely Windows Authentication Provider and Forms Authentication Provider . Am not going to discuss these types and various modes of authentication. But am going to write about how one can implement a code to secure their web pages. And specially if these pages require some kind of user login is a mandatory. First, you create any page that is supposed to be secured, say for instance AccountDetails.aspx. This page by default takes the inheritance from System.Web.UI. Page class. Now that you have created the page, it is the time for you to induce the security for this page. So add a new class to your application and name that as SecureBasePage .CS. This class is now inherited from System.Web.UI. Page class. The code would look like below public class SecureBasePage : System.Web.UI. Page { pub

Tools I’ve installed

  Today, I'd to format my system. After successful installation, the following are the tools that are of my choice to install. WinMail from Live.com Windows LiveWriter from Live.com msdnReader from this link The Architecture Journal from this link . This link is not working, but if you go to the archives, you might find. If you fail to download there, then drop me a mail. I’ll try to upload that to some free upload source. Xobni for Outlook I started using Pidgin for multi chat client, but now moved to Digsby . An RSS tool, FeedDemon from Newsgator Baraha for local language typing. Twhirl for following my tweets from Twitter as well as కువకువలు , a telugu twitter Seven types of browsers. IE, FF, Opera, Flock, Apple Safari, Chrome and Wyzo ( liked it just because of pictures search tool) Am a .NET Developer, so Visual Studio 2008 along with SQL Server 2005 Am also a community person, so to support or reach directly onto the systems away from me and the folks

FireFox file full path – Security Issue

when you use the file upload using either ASP:FileUpload or html input control which is a type of file, FireFox doesn’t give you the full path of the selected file. For this purpose i have used both the controls as mentioned below < asp : FileUpload ID ="fleUpLd" runat ="server" /> < input type ="button" id ="btnDD" value ="File - Upload " /> Now that I’ve used both, i tried to get the full path of the selected file. Well, you’ll get the full path of the selected file, when this page is viewed in IE, but not in FireFox. I did a full search on net for getting the full path of the file, but my search went in vain. There are many snippets that did some attempt to show case the full file path. some thing like, using the onchange event with the help of this.value , but that would also show  you only the file name when fired in FF. The code is some thing like the below < input type ="file" name =&quo