DotNetKicks.com : Stories kicked by joejoejoejoe

Session Attacks and ASP.NET - Part 2

Wed, 24 Jun 2009 19:00:00 GMT

In Session Attacks and ASP.NET - Part 1, I introduced one type of attack against the session called Session Fixation as well as ASP.NET's session architecture and authentication architecture. In this second post, I'll delve into a couple specific attack scenarios, cover risk reduction, and countermeasures specific to ASP.NET for protecting against session attacks in ASP.NET

Session Attacks and ASP.NET - Part 1

Thu, 18 Jun 2009 17:30:01 GMT

I've spent some time recently looking for updated information regarding session attacks as they apply to ASP.NET and am still not completely satisfied with how Microsoft has decided to implement session management in ASP.NET 2.0+. Part 1 explores ASP.NET session management, authentication, and session attacks against ASP.NET with a comparison of how ASP.NET stacks up against mitigation techniques against these attacks.

Visual Studio 2010: Web.config transforms

Mon, 22 Jun 2009 15:15:00 GMT

Recently I wrote about Visual Studio 2010 and multiple web.config files support. Let's see how to play with web.config transformation so we can use one configuration on development environment and the other for production environment.

Model View Presenter (MVP) design pattern and data binding

Tue, 09 Jun 2009 10:45:00 GMT

Model View Presenter (MVP) design pattern is the evolution of the MVC design pattern and it's aimed at providing a cleaner separation of concerns between the view, the model, and the controller improving the architecture (you can use several UI technologies without recompiling the business logic components) and testability of the enterprise solution. The pattern was originally developed at Taligent in the 1990s. In this article, I will explain the principles and how to use the MVP design pattern along with data binding with an example using C# language in Microsoft.NET.

What is Interim Table - Simple Definition of Interim Table

Sat, 06 Jun 2009 06:15:03 GMT

Sometimes a simple question like What is interim table? can initiate a never-ending discussion between developers. I experienced this recently while I was on phone helping my friends working in Los Angeles. In a conference call, one of the developers kept on talking about first interim table and second interim table and so forth, while another developer was of the opinion that that there cannot be more than one interim table. Well, as this was not enough a third developer interrupted the debate and said that all the tables are interim tables. The heated discussion seemed never ending.

The Greatest Exception Handling WTF?!? of All Time

Thu, 28 May 2009 10:00:00 GMT

The Exception object has ONE purpose and ONE purpose only - to represent a runtime error, nothing more. Exceptions should never be used for purposes for which they were not intended -- or you could end up with this monstrosity...

Parameter count mismatch Error

Thu, 21 May 2009 19:22:17 GMT

Yesterday, I spent a whole day chasing a very weird and strange error - I was getting an exception at the main method. The error description was: "Parameters count mismatch".

Book Review - Wrox Professional ASP.NET MVC 1.0

Thu, 21 May 2009 22:19:48 GMT

A review of Professional ASP.NET MVC 1.0 from Wrox. A great book from Rob Conery, Scott Hanselman, Phil Haack, and Scott Guthrie.

Top 10 .NET Twitterers

Sat, 02 May 2009 13:46:11 GMT

If your not on Twitter you are missing out - here are some .NET tweeps to get you started.

Using AutoMapper to map view models in ASP.NET MVC

Mon, 20 Apr 2009 16:46:03 GMT

Mapping code between Domain Models and Data Transfer Objects/Presentation Models is often boring and tedious to write, so when I first read about AutoMapper it triggered my interest. This post takes a first look at AutoMapper, and show how it can be used to map a complex domain model to a view model in an ASP.NET MVC application.

ASP.NET MVC: Using Custom ViewModels with POST action methods

Mon, 20 Apr 2009 06:16:02 GMT

One of the top good practices for ASP.NET MVC is not to use the ViewData Dictionary, but to put your data in a strongly typed ViewModel instead. Many people seem to be using Linq to SQL entities as a ViewModel, because it's a very comfortable approach. But what do you do if your view should contain data that is not included in any of your linq entities? This posting describes how to use custom shaped ViewModel classes for these cases.

Project Kobe community feedback

Sat, 18 Apr 2009 11:31:02 GMT

A project that we recently worked on in my team is Kobe , a Web 2.0 service development resource kit. The goal of the resource kit was to provide a collection of resources in the form of presentations, white papers, and a working sample application to enable business and technology decision makers to develop a good foundational understanding of Web 2.0 services, a conceptual architecture of a Web 2.0 service, challenges to think through when embarking on a new Web 2.0 service development project, and Microsoft platform implementation assets that are available and can be applied to materialize Web 2.0 services.

8 Common Uses of the undocumented Stored Procedure sp_MSforeachtable

Mon, 20 Apr 2009 11:31:02 GMT

Check out some common uses of the undocumented procedure sp_MSforeachtable of the Master database.

A Closable jQuery Plug-in

Wed, 15 Apr 2009 03:16:03 GMT

I've found it very useful to have a closeable plug-in that hide the content of an HTML element providing a visual close image cue. Almost every UI I build these days requires either closing pop up windows or even more commonly requires that items are removed and visually hidden which usually implies 'close' behavior. In addition to removing a bunch of HTML markup, having a plug-in is also quite useful for server controls especially if multiple behaviors (plug-ins) need to be applied.

jQuery Search box and Asp.net MVC

Mon, 13 Apr 2009 12:16:03 GMT

This is a simple tutorial on how to create a fancy search box, that has suggestions underneath the input box, and that also can do autocomplete.

Learning the Template Pattern

Sun, 12 Apr 2009 10:01:03 GMT

Taking a look at how you can use the Template Design Pattern in your applications. The Template Design Pattern is perhaps one of the most widely used and useful design pattern. It is used to set up the outline or skeleton of an algorithm, leaving the details to specific implementations later. This way, subclasses can override parts of the algorithm without changing its overall structure.

RANK() VS DENSE_RANK() With an Example using SQL Server 2005/2008

Sat, 11 Apr 2009 22:01:02 GMT

Cool Example to understand these two very useful functions in SQL Server in a simple way!

4 Great Tools to use with Visual Studio

Sat, 04 Apr 2009 03:16:02 GMT

Today was a slow day so I was trying some Visual Studio Add-Ins for our team to help in the development and here are the ones that made the cut.

Hello World to LINQ Projection in C#

Sat, 04 Apr 2009 16:46:04 GMT

In this post we will what is projection, what are its benefits and how we can use it with LINQ.

ASP.NET MVC Best Practices (Part 2) - Kazi Manzur Rashid's Blog

Fri, 03 Apr 2009 22:01:02 GMT

This is the second part of the series and may be the last, till I find some thing new. My plan was to start with routing, controller, controller to model, controller to view and last of all the view, but some how I missed one important thing in routing, so I will begin with that in this post.

Using the Navigation Framework in Silverlight 3

Fri, 03 Apr 2009 23:31:04 GMT

In Silverlight 2, one of the challenges faced by developers was navigation between pages. It was not easy to navigate from one Xaml page to the other. In Silverlight 3, Microsoft has introduced the Navigation Framework. In this article, we will explore Step by Step the Navigation Framework in Silverlight 3 and build an application on it.

5 Useful SQL Server Scripts

Tue, 31 Mar 2009 07:01:05 GMT

Collection of 5 useful scripts for SQL Server.

Integrating Silverlight and ASP.NET MVC

Tue, 31 Mar 2009 08:31:01 GMT

I mean come on. Doesn't that title just suck you right in? Tim Heuer bridges the gap.

Are you a Control Freak?

Thu, 26 Mar 2009 23:31:12 GMT

Since the very early ASP.NET MVC previews, the most common argument I've heard against using the framework is the lack of user controls. In my opinion, this is a mixed blessing, however, for some, this is a show stopper. What can you do to provide a rich user interface with the MVC framework, while not reinventing the wheel?

Secrets of Extension Methods: Part I

Wed, 25 Mar 2009 12:16:03 GMT

This article gives an introduction to Extension Methods.