prevent ajax functions used by Malicious users using HTTP POST

Hi Guys ,i have a problem in my site,i m having a class which is having ajax functions,problem is that Malicious users can access these ajax functions method using HTTP POST.so that he can do all the task using HTTP POST.

in config file i write following code.

<httpHandlers>

<addverb="POST,GET"path="ajax/*.ashx"type="Ajax.PageHandlerFactory,eAjax"/>

<addverb="POST,GET"path="ajaxpro/*.ashx"type="AjaxPro.AjaxHandlerFactory, AjaxPro"/>

</httpHandlers>

the malicious user use the functions using following Code.

Post

/ajax/al2006.ajaxFunctions,al2006.ashx?_deleteusers&_session=no.

so i want to prevent that problem.so pls give me any suitable solution of this.shall be thankful to all.

Thanks in Advance.

jkyadav

You can use the following line of Code in your Generic handler to check if the User is Authenticated:

if (HttpContext.Current.User.Identity.IsAuthenticated)
{
//Do what you need to do for authenticated users
}

Problem building the TemplateVSI project

I am attempting to build the TemplateVSI project in the AjaxControlToolkit solution. When I try I get this error:

Error 1 The process cannot access the file 'C:\Documents and Settings\randyd\Local Settings\Temp\tmp1E.tmp' because it is being used by another process. C:\Program Files\Microsoft ASP.NET\ASP.NET 2.0 AJAX Extensions\AJAX Control Toolkit\TemplateVSI\TemplateVSI.csproj 52 5 TemplateVSI

I can not find reference to this error relating to the TemplateVSI project anywhere.

Any help would be great!

Thanks,
Randy DeForest

Hi Rdeforest,

Have you installed the Ajax Control Toolkit template yet? Based on my experience, I think that you should restart your system and have a test. If your problem still cannot been resolved, we suggest that you should reinstall your Ajax Control Toolkit template by following the tutorial: http://www.asp.net/learn/ajax-videos/video-76.aspx .

Best Regards,

Jonathan

Thank you for the response.

I have un-installed and re-installed the AJAX Extensions. I get the same error when attempting to build the TemplateVSI, as instructed in the video.

I do not understand what you mean by the AJAX Control Toolkit template. Please explain. Also, the link you posted is to another, unrelated, post.

Thanks again for your response.

Randy

Hi Rdeforest,

Here is video tutorial for insatll Ajax Control Toolkit Template: http://www.asp.net/learn/ajax-videos/video-76.aspx

For get started with ASP.NET AJAX, please visit: http://www.asp.net/learn/ajax-videos/video-75.aspx

For more video tutorial, please visit: http://www.asp.net/learn/ajax-videos/

Best Regards,

Jonathan

Jonathan,

As stated, I followed the instruction on the video. I was still unable to complete the build.

I re-installed VS2005 Team Suite and still received the same error.

I was able to get a copy of a previous version of the Control Toolkit, and it compelted the build without any issues.

Thanks for you help.

Randy