prevent ajax functions used by Malicious users using HTTP POST

Hi Guys ,i have a problem in my site,i m having a class which is having ajax functions,problem is that Malicious users can access these ajax functions method using HTTP POST.so that he can do all the task using HTTP POST.

in config file i write following code.

<httpHandlers>

<addverb="POST,GET"path="ajax/*.ashx"type="Ajax.PageHandlerFactory,eAjax"/>

<addverb="POST,GET"path="ajaxpro/*.ashx"type="AjaxPro.AjaxHandlerFactory, AjaxPro"/>

</httpHandlers>

the malicious user use the functions using following Code.

Post

/ajax/al2006.ajaxFunctions,al2006.ashx?_deleteusers&_session=no.

so i want to prevent that problem.so pls give me any suitable solution of this.shall be thankful to all.

Thanks in Advance.

jkyadav

You can use the following line of Code in your Generic handler to check if the User is Authenticated:

if (HttpContext.Current.User.Identity.IsAuthenticated)
{
//Do what you need to do for authenticated users
}

Problem installing the Toolkit

I read the post (http://forums.asp.net/t/1149177.aspx) which pointed to a video to help with the installation.

I downloaded the video and followed the instructions (Create the VSI file in VS 2005; run the VSI) however I am not seeing the toolkit as a template as the video indicates.

I checked the \My Documents\Visual Studio 2005\Templates\ProjectTemplates\Visual C# directory and the AjaxControlExtenderProjectCS.zip file exists within the directory. I am assuming that this should then show up under the 'my templates' section when I click to the web project.

I have checked the options in VS 2005 and for the "Visual Studio user project templates location" it points to the above directory.

It seems like something is simply misconfigured within VS2005 unless there is something else I need to do with the zip file prior to getting this to work.

Thank you in advance.

Hi,

Your configurations are correct.

Please note that the template will be shown in "My Templates" when you select Visual C#, and not listed in any child categories.

Hope this helps.

Problem installing...

Everything goes fine, until it wants to install IIS.

See below.

http://img88.imageshack.us/img88/8344/problemjq0.gif

So, what am I supposed to do?

Also, where is a good place to start to learn Atlas, I already know CSS and some basic PHP.

Thanks.

Basically it is saying it needs IIS installed. So, as suggested, install IIS.

But how? I do as it says by not installing the .asbx whatever, and then it says it comepltes correctly.

If I try again and say to install the file extention, it cancels ot of the install.

Is IIS a seperate install?

Yes, go into Add or Remove Programs, click "Add/Remove Windows Components" and check IIS. (Note: IIS is not avaliable on Windows XP Home Edition)

I've got XP Pro, but my brother has the diskbooklet that has the XP Pro disk...And he's 5 hours away at college.

Any way I can get it from somewhere like Windows Update?

My XP is 100% legal.

No, you need it from an XP Professional Installation CD, or the Network installation location. Basically, you need the contents of the CD, but it doesn't have to be from a CD. If the CD was copied to the HD, that will work too.