This week I have been working on a custom security module for ASP.NET 2.0 (you mean to say that Windows authentication and Forms authentication is not enough?). My development process has involved wading through .NET Framework security code (thanks to Lutz Roeder for Reflector), and reading articles on IIS (Internet Information Server) security in MSDN [...]
Posts Tagged ‘ASP.NET’
IIS 6/ASP.NET 2.0 Security Demystified – Part 1
Posted in Everything, Software Development, tagged ASP.NET, IIS on October 23, 2005 | Leave a Comment »
Event catch-up in ASP.NET 2.0 Controls
Posted in Everything, Software Development, tagged ASP.NET, Code, Web Development on August 19, 2005 | Leave a Comment »
Pop quiz, what is wrong with the following class? public class MyPlaceHolder : PlaceHolder { protected override void OnInit(EventArgs e) { Page.Trace.Write(this.ID, “In OnInit”); base.OnInit(e); } protected override void OnLoad(EventArgs e) { Page.Trace.Write(this.ID, “In OnLoad”); base.OnLoad(e); } protected override void OnUnload(EventArgs e) { Page.Trace.Write(this.ID, “In OnUnload”); base.OnUnload(e); } protected override void OnPreRender(EventArgs e) { DropDownList [...]
IPostBackDataHandler and IPostBackEventHandler
Posted in Everything, Software Development, tagged ASP.NET, Code on August 2, 2005 | 8 Comments »
I’ve been messing around with post back handler in ASP.NET today, and I found out a few points of interest. Firstly, a description of the two interfaces used with server controls to handle post backs: IPostBackEventHandler – Implemented by server controls that wish to handle post back events. The RaisePostBackEvent method is invoked by the [...]
ViewState Tracking in ASP.NET Controls
Posted in Everything, Software Development, tagged ASP.NET, Web Development on July 13, 2005 | Leave a Comment »
Let’s say you have the following snippet of code below. The code dynamically instantiates a new ASP.NET control, changes the title property and then adds the control to the control collection of a placeholder on the page – a typical approach to dynamically creating controls. When the control loads, it adds an item into the [...]
ASP.NET Execution Process
Posted in Everything, Software Development, tagged ASP.NET, Web Development on December 2, 2004 | 1 Comment »
In my previous post I mentioned the steps involved in the process of an ASP.NET page. As promised, here are the details on the slide that was covered in Chris Mazzanti’s presentation at this months Rockville WinProteam user group meeting. Firstly, all ASPX and ASCX pages are just serialized control trees – object structures. If [...]
View State Improvements in ASP.NET 2.0
Posted in Everything, Software Development, tagged ASP.NET, Web Development on November 1, 2004 | Leave a Comment »
http://msdn.microsoft.com/msdnmag/issues/04/10/View State/default.aspx What is the View State? The view state is a hidden form variable containing data encoded in base-64 to represent the state of server side controls on an ASP.NET page. What’s wrong with the View State? The view state can become large on pages that include a large number of controls, or complex [...]
ASP.NET Vulnerability
Posted in Everything, Software Development, tagged ASP.NET, Security, Web Development on October 26, 2004 | Leave a Comment »
This alert is to advise you of the availability of a web page that discusses an investigation Microsoft is currently conducting into public reports of a security vulnerability in ASP.NET. A malicious user could provide a specially-formed URL that could result in the unintended serving of secured content. This alert is also to advise you [...]
