Search results matching tag 'asp.net'

Raid Swap = Email Program Lag ...?

Ashton Sanders — Sat, 28 Nov 2009 08:39:29 GMT

I have this ridiculous problem, and would appreciate your thoughts.

Summary:

We have a simple (ASP.NET) email program that 1) Queries the MSSQL database for valid names and emails. Then 2) Sends an email to each email.
For the last 2-3 years, this has taken 5-10 minutes to run.
On 11/15 one of the hard drives failed during a windows update (or check?)
On the 11/19 at 6:09 AM, The hard drive and raid driver was swapped (after some difficulty). The rebuild apparently didn't work. The drive took 3 tries to rebuild (over the next 4 days).
Since that date, our email program now takes 45-70 minutes to run.

I have had the server guys and ASP.NET guys look over everything, and "nothing's wrong"

To keep this short, I will just say: I need to fix this, and appreciate any thoughts you may have.

Thank you,

Ashton Sanders

Response.Redirect Issues

philsidari — Fri, 13 Nov 2009 22:36:20 GMT

We have been successfully using ARR in our dev and test environments for some time and have had great success. There is one key difference in our production environment that is causing some issues.

We have several instances of the app running in vdirs on the same web servers. In dev and test environments the ARR URL has the same path as the vdir name on the web servers but in prod they are different.

Test Env:

=======================

ARR URL:

http://proxy/App-Inst1/

http://proxy/App-Inst2/

Web URL:

http://websvr/App-Inst1/

http://websvr/App-Inst2/

Prod Env:

=======================

ARR URL:

http://proxy.us/App/

http://proxy.euro/App/

Web URL:

http://websvr/App-US/

http://websvr/App-EURO/

So some of the requests pass through ARR correctly with our rules, but when we do a Response.Redirect to a relative path using any of the following techniques it add the VDIR name to the requested path and ARR then maps this request incorrectly:

Response.Redirect("../Menu.aspx")

Response.Redirect("~/Menu.aspx")

Resonse.Redirect(this.ResolveUrl("~/Menu.aspx"))

Resonse.Redirect(this.ResolveUrl("../Menu.aspx"))

So, what is the best practice for handling this issue. Note that I need the website code to work when accessed both directly and via ARR.

Thanks.

- Phil

404 errors from \bin directory files after 2k3r2 sp2 and various security patches installed

daniel.gaddis — Fri, 13 Nov 2009 18:43:21 GMT

I am now getting 404 errors from \bin directory files after 2k3r2 sp2 and various security patches were installed. I have multiple w2k3 servers running iis6 with FastCGI 1.5 (x86) RC, and php-5.2.9-2-nts-Win32 Although I do not run asp.net code (the asp.net framework is installed on the server), the servers that were updated now have the following iis isapi filter enabled: ASP.NET_2.0.50727.0C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dlllow I found/copied the following from http://technet.microsoft.com/en-us/library/cc782952(WS.10).aspx

Important If you install ASP.NET with IIS 6.0, structure the content of your Web site so that requests for Web site content do not need to contain /bin in the request URL. As a security measure, ASP .NET returns a 404 error for all requests containing /bin in the requested URL.

Can anyone tell me if there is any other benefit/effect to having the ASP.NET_2.0.50727.0 isapi filter enabled that applies to non asp.net pages besides the above mentioned /bin restriction? We are trying to decide between just removing the ASP.NET_2.0.50727.0 isapi filter or keeping it and renaming the /bin directory and changing the corresponding code. Any references to ASP.NET_2.0.50727.0 isapi filter specifics applicable to non asp.net requests would be appreciated. If an iis 5.x & 6.0 General, Extensibility, or ASP.NET Administration forum would be a better place to post this, I do that too. Thanks,Daniel

Directory Enumeration possible on Web Server

sunitha4ever — Tue, 10 Nov 2009 06:22:54 GMT

Hi,

My web application runs on Windows Server 2008 and IIS 7. During penetration testing, we found that it was possible to determine the existence of directories within the web root on the system through messages returned by the access control code. This could enable an attacker to target particluar areas of functionality that they otherwise may not be aware of.

Eg: 1. Directory : /includes/ - Return Code: 403 ; Conclusion:- Forbidden. This directory exists but access has not been granted.

2. Directory : /Views/ - Return Code: 403 ; Conclusion:- Forbidden. This directory exists but access has not been granted although access is granted to subdirectoires for example /Views/xyz/abc.aspx

3. Directory : /mwr/ - Return Code: 404 ; Conclusion:- Not Found. This directory does not exist in the web root

Could you please help me to prevent this enumeration of directories such that a resource that the current user does not have access to should yield an identical message to the one displayed if that resource does not exist.

virtual directory name and URL path conflict causes malformed hyperlinks in aspx pages

Max Ainscough — Mon, 09 Nov 2009 03:53:53 GMT

Hi,

I (through supporting a client) have discovered an issue where hyperlinks / script urls are malformed when any string occurs as both part of the base URL as well as a virtual directory name e.g. "http://trythis.microsoft.com/trythis/myapp.aspx" Has anyone else come across this issue, and is there a known resolution?

To replicate the errors, I did the following:

Created a new virtual directory to our (working) web app named 'trythis'
Created a new host header name 'trythis.microsoft.com' against the website using the same defaults as localhost
modified my hosts file to add reference to 'trythis.microsoft.com' IP 127.0.0.1
restarted IIS
pinged 'trythis.microsoft.com' successfully
navigated to 'http://localhost/<application>.aspx' successfully with all elements working correctly.
replaced 'localhost' with 'trythis.microsoft.com' - with the page appearing but no images,links,scripts etc. being formed correctly.

I have been able to replicate this on both 5.1 (xp) and 6.0 (Svr 2003)

Any help on this would be greatly appreciated.

Max

IIS 7.5 404 error when redirecting from ASP.NET to Classic ASP

SpaceCowboy74 — Fri, 06 Nov 2009 15:27:16 GMT

I have Windows 7 x64 Ultimate installed on my development box. I've done everything needed to get Classic ASP as well as .NET running on my system. I'm developing in Visual Studio 2008 SP1. Me web site has a default page that has a frameset on it. In the frameset, after authorization, one frame redirects from an ASP.NET page to a Classic ASP page. This returns a 404 error to the screen. If I copy and paste the URL shown in the error page, I can get to the page just fine. Of course, since it expects to be in a frameset, it doesn't work quite right. I do have parameters on the URL (in the query string) but i don't think that's causing the problem.

Has anyone heard of this or have any suggestions?

How to remove IIS version name from the http header

sunitha4ever — Fri, 06 Nov 2009 06:21:49 GMT

Hi,

My web application runs on Windows server 2008 and IIS7.Currently, we are facing a security issue where in we need to reove the IIS version from the http header.

I would be glad if someone can help me out on this.

Regards,

Sunitha

ASP.NET site occasionally never loads at Localhost

mbopp — Fri, 30 Oct 2009 20:35:50 GMT

I have a ASP.NET site that while developing would like to run on my local instance of IIS 7. I am running it in Classic Mode. It works most of the time, but occasionally the site never loads no matter how long I wait. The browser just says "Waiting for localhost...". It does seem to happen most often after building the web application. I understand that it takes a while to load a web app the first time after a build, but in this case it never loads. I ultimately resolve the problem by stopping the current loading page, and trying again. Sometimes it takes serveral attempts before successfully loading. It is worth noting that after a build it does sometimes load, albeit a little slow as expected.

If it matters I am running this site via Virtual Directory within the Default Website.

I have also set the App Pool to allow 32bit. Can anyone tell me why this is necessary. My machine, and OS are 64 bit.

Protecting static content on IIS7 in Classic Mode

aures_arrigo — Thu, 29 Oct 2009 15:07:18 GMT

Hi,

I know how to protect my static (HTML) pages in IIS6, and how to do it using the IIS7 Integrated Pipeline, but how can I protect my HTML pages from unauthorised access in IIS7 when running in Classic Mode?

It's an ASP.NET site using forms authentication.

Thanks!

Re: Web Platform Installer for non-Free app?

tusmester — Sun, 25 Oct 2009 10:18:48 GMT

Thanks, that sounds easy, this is what I've tried (I tried to make my custom xml based on the official ones but didn't succeed, itt seems that because of the missing tab info), but now I think it will work, using the samples.

Cheers

Mike, sensenet.hu