ASP.NET

manual session id assignment

17-Jul-17 1:40

ftbadolato76 wrote:
I have used this code hundreds of times

Please tell us where, so that we can avoid those sites like the plague! WTF | :WTF:

Your code contains the most common security vulnerability in the world:
Everything you wanted to know about SQL injection (but were afraid to ask) | Troy Hunt[^]
How can I explain SQL injection without technical jargon? | Information Security Stack Exchange[^]
Query Parameterization Cheat Sheet | OWASP[^]

You then compound that by storing your users' passwords in plain text.
Secure Password Authentication Explained Simply[^]
Salted Password Hashing - Doing it Right[^]

It's almost as if you want your sites to be breached, and your company to face massive crippling fines for failing to protect your users' data properly!

Do yourself, and your users, a favour: stop trying to reinvent the wheel. Switch your sites to one of ASP.NET's built-in authentication systems - for example, ASP.NET Identity[^].

"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

jkirkerx14-Jul-17 6:25

jkirkerx

14-Jul-17 6:25

Has anyone figured out a way to assign a session ID manually

I have a cart program, in which the cart items are stored by session ID. I send them a email saying you still have items pending for checkout, they click the link with the session id and there cart loads.

At the moment, I'm picking up the new session id and changing the old session id. But if they do it twice, the link stops working.

I was thinking maybe I can force the old session ID if they use a different computer.

FYI:
I have a new program that eliminated this problem, I just need to support the old program for at least 6 more months.

If it ain't broke don't fix it

Re: manual session id assignment

jkirkerx14-Jul-17 8:26

jkirkerx

14-Jul-17 8:26

I ended up writing this which works on all my devices and multiple browsers that have never been to the website.

But 1 strange things occurs ...
It works on all my devices, Win10 using Firefox, Edge, Chrome and my iphone 6S+ using Google Inbox and Safari, Firefox

But it doesn't work downstairs on the other internal subnet where the complaints come from.
Seems every time I fix a bug or mistake, improve something, the changes never reflect downstairs and I get yelled at.
I don't know if this is some evil spirit or something, but I do need to figure this out soon.

Any ideas welcomed, even an exorcist.

//Use the old Session ID, Destroy the Cookie and redirect them
m_Context.Session.Abandon()
m_Context.Response.Cookies.Add(New HttpCookie("ASP.NET_SessionId", ""))
Dim manager = New SessionIDManager()
manager.RemoveSessionID(m_Context)
Dim addCookie As Boolean = False
manager.SaveSessionID(HttpContext.Current, m_sessionID_OLD, False, addCookie)

Dim currentUrl As String = m_Context.Request.Url.GetLeftPart(UriPartial.Path)
m_Context.Response.Redirect(currentUrl)

If it ain't broke don't fix it

Re: manual session id assignment

F-ES Sitecore17-Jul-17 5:13

F-ES Sitecore

17-Jul-17 5:13

Don't use the Session ID to identify users in this way, it's not suitable as you're finding out. Generate a GUID for people and store it in a cookie and use the GUID to identify people\carts.

Query regarding IIS Thread Pool Settings in Machine.config

bhavin chheda13-Jul-17 6:51

bhavin chheda

13-Jul-17 6:51

Hi,

Currently I am working on fine tuning the IIS 8.5 settings.

The CPU is 6 core and RAM is 16 GB

I have set all the Perfmon counters for general and IIS as per below link :

http://www.monitis.com/blog/important-iis7-counters/

Now after observing the Perfmon, I found that ASP.NET\Request Wait Time is taking more than 5 seconds.

So I need to fine tune the Thread Pool settings in machine.config as in below link :

http://geekswithblogs.net/StuartBrierley/archive/2009/09/30/tuning-iis---machine.config-settings.aspx

Currently there is no thread pool settings in machine.config, it is <processmodel autoconfig="“true”">.

So please advise that can I update the thread pool settings as below :

Thread pool setting in Machine.config

maxconnection 12 * #CPUs

maxIoThreads 100

maxWorkerThreads 100

minFreeThreads 88 * #CPUs

minLocalRequestFreeThreads 76 * #CPUs

As I need some basis to change the default Thread Pool Settings.

Or what Perfmon counters should I need to study in-order to change the default Thread Pool Settings.

Please suggest.

Thanks in advance.

Side bar

sunsher11-Jul-17 2:19

sunsher

11-Jul-17 2:19

Hi,

I am new to ASP.NET. I would like to know how to create a page with a side bar, which is tree like. There are two tables with a one to many relation. So I get all records from table A that matches the Id of table B. I want to display this list in the side bar. Also, use the Create New page in the body content. Is this possible in ASP.NET? Please help.

Thanks

Re: Side bar

ZurdoDev11-Jul-17 2:54

ZurdoDev

11-Jul-17 2:54

I would google for "css sidebar" and find one you like and then implement it.

There are two kinds of people in the world: those who can extrapolate from incomplete data.

There are only 10 types of people in the world, those who understand binary and those who don't.

FTP user and user wise folder

sanket1649-Jul-17 18:14

sanket164

9-Jul-17 18:14

Hello All,

From my site user can login and manage it's document. I need to create user wise FTP account where user can login in FTP . From that FTP credential user can download and upload file. Admin of this site access that document . Admin can download all users files.
For that i need help.
1) Create FTP user on server where site is publish from c# code.
2) Create User wise folder with user wise permission.
3) Other user can not see other user folder. Admin have all user wise folder rights.

All things manage from c# code.

Thanks in Advance.
Have great day.

Entity Framework 500 Error

sanforjackass9-Jul-17 4:43

sanforjackass

9-Jul-17 4:43

500 (Internal Server Error)

I Have This Problem When I Upload The Project To Server But Locally I Dont Have This Problem

EASY COME EASY GO

Re: Entity Framework 500 Error

Richard MacCutchan9-Jul-17 20:59

9-Jul-17 20:59

There was an error in the server.

.lic file

Member 133002248-Jul-17 17:11

Member 13300224

8-Jul-17 17:11

i have a software that work with .lic file for expiry date

i have the .lic files they contain exp date till 6 june 2018 expiry need to generate files my self any help

i cant paste or uplaod the file here so if any one have clue email me and i send the file its 16 caracters in the file.

Re: .lic file

Richard MacCutchan9-Jul-17 20:58

9-Jul-17 20:58

[redacted]

modified 10-Jul-17 9:08am.

Re: .lic file

Richard Deeming10-Jul-17 2:42

10-Jul-17 2:42

That suggests you're using a commercial component, and you've only purchased a license to use it until June next year.

If you want to extend that date, then you will need to purchase a new license.

We will not help you steal someone else's intellectual property. Suspicious | :suss:

"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

ASP.Net

Member 132992387-Jul-17 18:06

7-Jul-17 18:06

hello
Actually i want to add superscript and subscript text using asp.Net. Can anybody help me that
how to write superscript and subscript text using ASP.NET.

Richard MacCutchan7-Jul-17 22:12

7-Jul-17 22:12

Member 13299238 wrote:
how to write superscript and subscript text using ASP.NET.

What does that mean, where are you trying to write it - to a file, printer, screen, website ... ?

Member 132992389-Jul-17 19:52

9-Jul-17 19:52

first of all thank you very much sir for your response.
sir i want to design a web page where from anyone can ask any question of any subject for eg maths.
suppose someone want to ask about solution for (a+b)2 [a plus b whole square] then how he/she can type 2 as superscript, and other symbols like integration, differentiation etc.

Richard MacCutchan9-Jul-17 20:46

9-Jul-17 20:46

You cannot type those symbols on a standard keyboard, without using multiple keystrokes, which are difficult to remember. You should use the standard operator symbols as defined in most modern programming languages, e.g. 7.2.1 Operator precedence and associativity (C#)[^]. For subscript and superscript on web pages see HTML sub tag[^].

Member 132992389-Jul-17 20:55

9-Jul-17 20:55

okay sir, can you tell me how to upload and retrieve videos using ASP.Net

Richard MacCutchan9-Jul-17 20:57

9-Jul-17 20:57

Google will find many samples and tutorials for you.

Member 132992389-Jul-17 21:02

how to connect database to asp.net form

9-Jul-17 21:02

thanks sir

Member 127613417-Jul-17 3:26

Member 12761341

7-Jul-17 3:26

i want to connect to my local database but it doesn't responding means some thing is going wrong.
please advised me for the syntax of as i wrote the below code.
<connectionstrings>
<add name="connect" connectionstring="Data Source=DESKTOP-L6ABJBC;Initial Catalog=LoginDB1;Integrated Security=SSPI;AttachDBFilename=|DataDirectory|\aspnet-WebSite3-20170707151050.mdf">

Re: how to connect database to asp.net form

Richard Deeming7-Jul-17 5:51

Re: how to connect database to asp.net form

7-Jul-17 5:51

If you want someone to help you resolve an error, then first you need to tell us what the error is. Just saying "it's not responding" and "something is going wrong" is not enough information for anyone to help you.

The only obvious problem is that you're using AttachDBFilename, but you don't appear to be connecting to an instance of SQL Server Express. That option only works with Express, and is a bad idea anyway:

Bad habits : Using AttachDBFileName - SQL Sentry[^]

"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

Member 127613417-Jul-17 18:58

Member 12761341

7-Jul-17 18:58

Brother this is error showing in this way "Line no. 22 con.open();

Server Error in '/' Application.

Database 'C:\Program Files (x86)\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\DATA\LoginDB1.mdf' already exists. Choose a different database name.
Cannot attach the file 'C:\Users\Atta\Documents\Visual Studio 2012\WebSites\WebSite3\App_Data\aspnet-WebSite3-20170707151050.mdf' as database 'LoginDB1'.

Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code. 

Exception Details: System.Data.SqlClient.SqlException: Database 'C:\Program Files (x86)\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\DATA\LoginDB1.mdf' already exists. Choose a different database name.
Cannot attach the file 'C:\Users\Atta\Documents\Visual Studio 2012\WebSites\WebSite3\App_Data\aspnet-WebSite3-20170707151050.mdf' as database 'LoginDB1'.

Source Error: 


Line 20:     {
Line 21:         SqlConnection con = new SqlConnection(ConfigurationManager.ConnectionStrings["connect"].ToString());
Line 22:         con.Open();
Line 23:         string query = "select count(*) from userlogin where username ='" + txtBox1.Text + "'and pass '" + txtBox2.Text + "'";
Line 24:         SqlCommand cmd = new SqlCommand(query, con);

Source File: c:\Users\Atta\Documents\Visual Studio 2012\WebSites\WebSite3\Default2.aspx.cs    Line: 22 

Stack Trace: 


[SqlException (0x80131904): Database 'C:\Program Files (x86)\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\DATA\LoginDB1.mdf' already exists. Choose a different database name.
Cannot attach the file 'C:\Users\Atta\Documents\Visual Studio 2012\WebSites\WebSite3\App_Data\aspnet-WebSite3-20170707151050.mdf' as database 'LoginDB1'.]
   System.Data.SqlClient.SqlInternalConnectionTds..ctor(DbConnectionPoolIdentity identity, SqlConnectionString connectionOptions, SqlCredential credential, Object providerInfo, String newPassword, SecureString newSecurePassword, Boolean redirectedUserInstance, SqlConnectionString userConnectionOptions, SessionData reconnectSessionData, DbConnectionPool pool, String accessToken, Boolean applyTransientFaultHandling) +821
   System.Data.SqlClient.SqlConnectionFactory.CreateConnection(DbConnectionOptions options, DbConnectionPoolKey poolKey, Object poolGroupProviderInfo, DbConnectionPool pool, DbConnection owningConnection, DbConnectionOptions userOptions) +332
   System.Data.ProviderBase.DbConnectionFactory.CreatePooledConnection(DbConnectionPool pool, DbConnection owningObject, DbConnectionOptions options, DbConnectionPoolKey poolKey, DbConnectionOptions userOptions) +38
   System.Data.ProviderBase.DbConnectionPool.CreateObject(DbConnection owningObject, DbConnectionOptions userOptions, DbConnectionInternal oldConnection) +699
   System.Data.ProviderBase.DbConnectionPool.UserCreateRequest(DbConnection owningObject, DbConnectionOptions userOptions, DbConnectionInternal oldConnection) +89
   System.Data.ProviderBase.DbConnectionPool.TryGetConnection(DbConnection owningObject, UInt32 waitForMultipleObjectsTimeout, Boolean allowCreate, Boolean onlyOneCheckConnection, DbConnectionOptions userOptions, DbConnectionInternal& connection) +426
   System.Data.ProviderBase.DbConnectionPool.TryGetConnection(DbConnection owningObject, TaskCompletionSource`1 retry, DbConnectionOptions userOptions, DbConnectionInternal& connection) +78
   System.Data.ProviderBase.DbConnectionFactory.TryGetConnection(DbConnection owningConnection, TaskCompletionSource`1 retry, DbConnectionOptions userOptions, DbConnectionInternal oldConnection, DbConnectionInternal& connection) +191
   System.Data.ProviderBase.DbConnectionInternal.TryOpenConnectionInternal(DbConnection outerConnection, DbConnectionFactory connectionFactory, TaskCompletionSource`1 retry, DbConnectionOptions userOptions) +154
   System.Data.ProviderBase.DbConnectionClosed.TryOpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory, TaskCompletionSource`1 retry, DbConnectionOptions userOptions) +21
   System.Data.SqlClient.SqlConnection.TryOpenInner(TaskCompletionSource`1 retry) +90
   System.Data.SqlClient.SqlConnection.TryOpen(TaskCompletionSource`1 retry) +217
   System.Data.SqlClient.SqlConnection.Open() +96
   Default2.Button1_Click(Object sender, EventArgs e) in c:\Users\Atta\Documents\Visual Studio 2012\WebSites\WebSite3\Default2.aspx.cs:22
   System.Web.UI.WebControls.Button.OnClick(EventArgs e) +9819334
   System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument) +204
   System.Web.UI.WebControls.Button.System.Web.UI.IPostBackEventHandler.RaisePostBackEvent(String eventArgument) +12
   System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument) +15
   System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData) +35
   System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +1639

Re: how to connect database to asp.net form

Richard Deeming10-Jul-17 2:36