ÔÚasp.net webserviceÖÐÈçºÎʹÓÃsession
ÔÚʹÓÃasp.net±àдwebserviceʱ£¬Ä¬ÈÏÇé¿öÏÂÊDz»Ö§³ÖsessionµÄ£¬µ«ÎÒÃÇ¿ÉÒÔ°ÑWebMethodµÄEnableSessionÑ¡ÏîÉèΪtrueÀ´ÏÔʽµÄ´ò¿ªËü£¬Çë¿´ÒÔÏÂÀý×Ó£º
1 н¨ÍøÕ¾WebSite
2 н¨web·þÎñWebService.asmx£¬Ëü¾ßÓÐÒÔÏÂÁ½¸ö·½·¨£º
C#-Code:
[WebMethod(EnableSession = true)]
public string Login(string name)
{
Context.Session["name"] = name;
return name;
}
[WebMethod(EnableSession = true)]
public string GetName()
{
if (Context.Session["name"] != null)
return Context.Session["name"].ToString();
else
return "";
}
3 Ìí¼Óasp.netÒ³ÃæSessionInWebservice.aspx
ASP.NET-Code:
<form id="form1" runat="server">
<div>
<asp:TextBox ID="txtName" runat="server"></asp:TextBox>
<asp:Button ID="btnLogin" runat="server"
Text="Login" OnClick="btnLogin_Click" />
</div>
<div>
<asp:Button ID="btnGetName" runat="server"
Text="GetName" OnClick="btnGetName_Click" />
<asp:Label ID="lblName" runat="server" Text="Label"></asp:Label>
</div>
</form>
SessionInWebservice.aspx.cs
C#-Code:
protected void btnLogin_Click(object sender, EventArgs e)
{
WebService ws = new WebService();
ws.Login(txtName.Text);
}
protected void btnGetName_Click(object sender, EventArgs e)
{
WebService ws = new WebService();
lblName.Text = ws.GetName();
}
ÎÊ
Ïà¹ØÎĵµ£º
<Ò»>Ò³Ãæ¼¶µÄ´íÎó´¦Àí
void Page_Error(Object sender, EventArgs e) {
String message = "<font face=verdana color=red>"
......
½¨Á¢Ò»¸öWEB¹¤³Ì£¬Ìí¼ÓÐÂÏî->HTMLÒ³Ãæ£¬ÃüÃûΪProgressBar.htm£¬ÄÚÈÝÈçÏ£º
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" id="mainWindo ......
¹ÛÆä´óÂÔ£º
1.
Asp.netÊÇÒÀ´æÓÚ IISµÄÒ»¸ö·þÎñ£¬Ëµµ½ Asp.netµÄ°²È«Ïà¹ØµÄ»°Ì⵱ȻҪÓÐÒ»¸öÕûÌåÉϵÄ˼·£º IIS½ÓÊÕ —¡· IISÑéÖ¤ —¡· IISÊÚȨ ---¡· ASP.netÑéÖ¤ ---¡· Asp.netÊÚȨ ---¡·×ÊÔ´·µ»Ø¸øÓû§
IIS´ÓÍøÂçÉϽÓÊÕµ½Ò»¸ö HTTP WEBÇëÇó¿ÉÒÔʹÓà SSL¼¼ÊõÀ´±£Ö¤·þÎñÆ÷µÄÉí·Ý£¬´ËÍâ SSLÒ²¿ÉÒÔÌṩһ¸ö°²È ......
Èç¹ûÄãÒѾÓн϶àµÄÃæÏò¶ÔÏ󿪷¢¾Ñé£¬Ìø¹ýÒÔÏÂÕâÁ½²½£º
µÚÒ»²½¡¡ÕÆÎÕÒ»ÃÅ.NETÃæÏò¶ÔÏóÓïÑÔ£¬C#»òVB.NET ÎÒÇ¿ÁÒ·´¶ÔÔÚûϵͳѧ¹ýÒ»ÃÅÃæÏò¶ÔÏó(OO)ÓïÑÔµÄǰÌáÏÂȥѧASP.NET¡£ ASP.NETÊÇÒ»¸öÈ«ÃæÏò¶ÔÏóµÄ¼¼Êõ£¬²»¶®OO£¬ÄǾø¶Ôѧ²»ÏÂÈ¥!
µÚ¶þ²½¡¡¶Ô.NET FrameworkÀà¿âÓÐÒ»¶¨µÄÁ˽⠿ÉÒÔͨ¹ý¿ª·¢Windows FormÓ¦ÓóÌÐòÀ´Ñ§Ï°NE ......
Trustwave's SpiderLabs Security Advisory TWSL2010-001:
Multiplatform View State Tampering Vulnerabilities
Published: 2010-02-08 Version: 1.1
SpiderLabs has documented view state tampering
vulnerabilities in three products from separate vendors.
View states are used by some web application frame ......