Asp.net - Stop Document Downloads From Unauthorized Users?
Jun 29, 2011
I have an application where the admin user can create users and upload documents to the server for the created user to download.
When uploading a file it creates a folder using the userid as the folder name and saves in that folder within a folder called documents e.g. ~documents/77b29079-43d6-4520-bc34-77ae2af1b131/documentname.xls
The client then has to login and will see a list of available documents for that user only. The only problem is that if someone was to get hold of one of the urls to a document is can be downloaded without having to login.
Is there something I can do to stop access to these files?? I have tried editing the web.config file to only allow access to certain roles but i could still download a document without logging in.
<location path="documents">
<system.web>
<authorization>
[Code]....
View 1 Replies
ADVERTISEMENT
Oct 16, 2010
net ,vb. I want to deny users who have not logged in with a message" you have to login to access this page".
View 1 Replies
Feb 16, 2010
I have an website that has a datagrid that is pulling information from an SQL database. The user then clicks a link from that grid and is redirected to another page. My question is if a user clicks the first link and is redirected and then a second user clicks the link is there a way to stop that second user from being redirected or sent back to the first page after they click the link? So it would have to somehow detect on the second page that a second user has clicked the same link. Hope this is clear. This is being programmed in VS 2008 vb.net and SQL 2008
View 2 Replies
Sep 26, 2010
I want to stop users input any words into combolist,they just can select item from combolist,instead of input something,anything,but how?
View 7 Replies
Aug 8, 2011
Public Class Form1
Private Sub Form1_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load
If My.Settings.registered = True Then
Form3.Show()
[code]....
This is my code for a trial application. The code is pretty basic but what i couldn't figure out was how i would be able to prevent users from changing the date to extend the trial ("error" i would be getting).
View 4 Replies
May 3, 2009
I have a form that allows users to enter information into a few textboxes. When users click save, the information will be transferred into the datagridview.
My problem now is, for instance, there is a textbox called "Price" with the datatype "money" which users are only allowed to enter numbers. If users enter alphabets, errors will occur. I don't wanna use try catch, I would like to try different methods such stopping users from entering anything into the textbox when the datatype isn't correct - nothing will appear in the textbox when users hit all the keys in the keyboard except for numbers.
View 3 Replies
Sep 19, 2011
Iv tied;
Dim file As String
Dim saveLocation As System.IO.FileStream
[code].....
View 5 Replies
Aug 19, 2009
I have a word (2003) document containing many Activex textboxes which are used to apply a character limit to the users input. Sometimes users want to paste data into the textbox from another source ks fine, but if they try to do it via the Edit menu then the textbox is deleted and replaced with the pasted text
View 6 Replies
Mar 26, 2012
I'm attempting to login to a cPanel using a POST Request in VB.Net. I have the correct credentials when logging in and when posting I still get an 'Unauthorized (401)' response when it should be '301' (analysed using Tamper Data Firefox Add-On). Below is my post request information and function.[code...]
View 1 Replies
Apr 17, 2011
I had an exercise where I was supposed to have a button open an openfile dialog box, let the user select a file, then another button that would save the file with the extension ".bak". The author didn't give any clues about manipulating extensions -- but a few chapters back we covered string functions. So, with that in mind, I did the following...
Private Sub btnSaveFile_Click(sender As System.Object, e As System.EventArgs) Handles btnSaveFile.Click
' Where does the extension start
[code].....
View 7 Replies
Aug 22, 2011
I am trying to call multiple SQL Reporting Services Reports, get the .pdfs back, then append them together. I have no problems appending .pdfs, but I'm getting an error on the second report. Here's some example code:
[Code]...
View 1 Replies
Nov 2, 2008
im working on a disk cleaner in VB.net 2008. im running into a unauthorized file exception.
[Code]...
View 5 Replies
Jan 10, 2010
Ive created a simple application that works fine when i debug and test it though visual studio but when i deploy the application, download it and install it onto my machine i get an error.basically when the first form loads it checks for a file called "New Folder" in my program files folder on my machine if the file is not there, then it adds the file. the code im using to do this is:
If System.IO.Directory.Exists(My.Computer.FileSystem.SpecialDirectories.ProgramFiles & "New Folder") Then
Exit Sub()
[code]....
View 4 Replies
Feb 9, 2010
I have an asp.net web app that uses forms-based authentication, a SqlMembershipProvider (using an encrypted password format), and a SqlRoleProvider. I need to know if it's possible to administer the users (create new users, assign them to roles, etc.) from a windows application - the powers that be don't want any administrative functionality in the web app itself.Here is the membership provider definition from web.config:
<membership defaultProvider="MyProvider">
<providers>
<add name="MyProvider"
[code].....
View 3 Replies
Dec 29, 2010
I've got a code using SQLClient that loops though all users in a Users table inside each loop i want to preform another search in the UserOrders table, thus doing a count of all orders.
I get this error
HTML
There is already an open DataReader associated with this Command which must be closed first.
Here is my code
vb.net UserLists.Items.Clear()
Dim connection As New SqlClient.SqlConnection(My.Settings.ConnectString)
Dim command As New SqlClient.SqlCommand("SELECT * FROM Users ORDER BY PersonName",
[CODE]...
View 3 Replies
Apr 3, 2012
1.I�d like to publish a free vb.net desktop application for the users to download and use meanwhile I�d like to collect usage information ex: user ip address, user�s registration information, used features, time spent� if the user allows the report to be sent back.
2.Also , in order for the user to be able to use the application, he�ll have to register it then, everytime, before the application loads, it gets verified online that it was registered, maybe validate the registration information or a valid user name and password, no critical personal information. The target of this step is for the application to be used exclusively by the registered user and maybe on his computer only.
View 2 Replies
Apr 4, 2012
1. I�d like to publish a free vb.net desktop application for the users to download and use meanwhile I�d like to collect usage information ex: user ip address, user�s registration information, used features, time spent� if the user allows the report to be sent back. 2. Also , in order for the user to be able to use the application, he�ll have to register it then, everytime, before the application loads, it gets verified online that it was registered, maybe validate the registration information or a valid user name and password, no critical personal information. The target of this step is for the application to be used exclusively by the registered user and maybe on his computer only. Any alternative way to achive the target is just fine.
View 1 Replies
Oct 30, 2010
I am just writing a simple file browser. It works without problems when I point to a specific directory but throws "UnauthorizedAccessException access to the path .... is denied" when I point to drive "C:\" or "D:\".
If Not txtToSearch.Text = Nothing Then
ListBox1.Items.Clear()
FC = 0
For Each foundfile As String In My.Computer.FileSystem.GetFiles("D:\", FileIO.SearchOption.SearchAllSubDirectories, Nothing)
Dim title As String = My.Computer.FileSystem.GetFileInfo(foundfile).Name
If title.Contains(txtToSearch.Text) Then
ListBox1.Items.Add(title)
FC += 1
End If
Next
View 1 Replies
Jan 17, 2011
I am trying to get a list of files using this line of Dim files() As String = IO.Directory.GetFiles("D:", "*.*", SearchOption.AllDirectories)But it errors out on folders that are inaccessible, like the RecycleBin folder & the program stops. So how do I get a list of files in all folders, while skipping the inaccessible one
View 1 Replies
Jun 15, 2010
I've got a vb (desktop) app (not a web app) that needs to connect to my website, I've been told that embedding my MySQL database credentials is a big mistake for several reasons.So, I've built a web script in PHP that runs on my server called web-service.php, it's located at www.example.com/web-service.php.Now, I'm trying to connect with this code:
Code:
Dim hwrRequest As HttpWebRequest = HttpWebRequest.Create("http://www.example.com/web-service.php")
hwrRequest.Method = "POST"
Using swWriter As New StreamWriter(hwrRequest.GetRequestStream) 'POST the info
[code]....
And when I do, I get the error "The remote server returned an error: {401} Unauthorised.", but I shouldn't need any credentials to access this. I'm just trying to POST a username and password to that page and have it query the database and then get the returned content, I'd prefer to use POST than GET so you can't see the user/pass in the URL (if possible).
EDIT: I used CPanel to password protect my website so it can't be accessed, after supplying my user & pass to access it, everything works.
View 1 Replies
Mar 19, 2010
I have my own login page.If any user access any page directly(without login),i want to redirect unauthorized user to login page. Using Generic Handler is there any chance?
View 2 Replies
Jan 16, 2012
below is my code for posting a value in php code and get response...but I am have an error The remote server returned an error: (401) Unauthorized
ddd
Try
Dim post As String
[code]....
View 3 Replies
Jun 10, 2008
I cannot figure out how to get this call to work.I have searched EVERYWHERE.MSDN is no help at all and the only thing I can find is this vb6 code that doesn't work in .net.I tried to convert it over but I've had no luck.Specifically I'm trying to get the path of the "All Users" Desktop and the "All Users" Start Menu.It would rock if anyone could help me out with this one.
View 5 Replies
May 18, 2010
If any directory within a set being searched by the [URL] or [URL] methods contains a junction point, the entire method fails and returns zero results on my tests under VB 2008. I would like to make the call more robust: to return the folders or files not blocked by access restrictions and to note the folders which were blocked. Do those methods offer a means to do this, or is a recursive folder-by-folder call necessary?
View 3 Replies
Aug 4, 2010
I am creating a file and then trying to read and write to it. I'm coming up with an UnauthorizedAccessException wa unhandled. My question is, How do I get around this properly or otherwise improperly to read and write to my text file?
Imports Scripting
Imports System.IO
Imports System.Security
Imports System.Security.Permissions
Public Class Form1
[Code] .....
View 11 Replies
May 4, 2011
I'm trying to write a console application that can modify registry subkeys on remote pc's in the same network. I have it working in my own environment but when I install on the customer machines I'm getting unauthorized access when it hits the OpenRemoteBaseKey. The security settings in the application properties is set to full trust application so I'm not sure why it won't work.
I'm using Visual Studio 2010 and first I just installed it on the customer machine and when it wouldn't work I ran the source code in Visual Studio 2005 which is on the customer machine but got same results.I can run the app directly on the remote machine and it will change the registry subkeys as directed, I just can't do it remotely. RemoteRegistry service is started. Both machines are logged in as administrators.
Here is the source code:
Imports Microsoft.VisualBasic
Imports System
Imports System.IO
Imports System.Security.Permissions
[code]....
View 14 Replies
Sep 19, 2009
I'm running Windows Vista with admin privilege and UAC is disabled but still unable to write to windows registry!
My.Computer.Registry.SetValue _
("HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun", _
"Test", "C:Test.exe", Microsoft.Win32.RegistryValueKind.String)
I'm getting error "Unauthorized Access Exception was unhandled."
"Access to the registry key 'HKEY_LOCAL_MACHINE....' is denied."
I've googled the net and found that registry permission elevation is required for admin tasks, Is there away to take registry key ownership through VB.Net code??
View 2 Replies
Apr 23, 2012
I have a very long running task I need to take from my website and put into a web service however every time I try call the web service I get this error message The request failed with HTTP status 401: Unauthorized.
View 1 Replies
Feb 20, 2011
Its a single file downloader (the file location is in the code) and it only downloads the file as 0kb (it debugs fine). Also, i think my directory finder is not working, as i did it the simple way, because i dont know the environment code.
Imports System.Net
Public Class Form1
Dim Directory As String
Private WithEvents Client As New WebClient
[code]...
View 2 Replies
Jul 21, 2011
I have a VB app that ftp downloads a csv file every 5 minutes it contains a columns with data and one column with date and time. I need to figure out how to determine if the data changed based on whether or not the date column updated. Currently I parse the file in and drop a couple columns and do a sql update to a database.
View 1 Replies
