Index

S

sa (system administrator) account

MSDE, 145–48, 184

SQL Server, 150, 513

Save button, 43, 47

SaveCredentials method, 386, 387–88

SaveViewState, 221, 373

scalability

operating system selection and, 134

state management and, 104–5

scavenging, caching, 456–57

scope, variables, 56–58

C# compared with C++, 57–58

guidelines, 58

namespaces and, 57

variable levels and, 56

code declaration blocks, 191, 211–12, 517

language attribute, 212

script, server-side, 30

Secure Sockets Layer. See SSL (Secure Sockets Layer)

security, 131–85

access control, 158–59

account limitations, 150–51

appSettings, 472

ASP.NET new features, 31–32

auditing, 159

authentication. See authentication

authorization. See authorization

code access, 182–83

IIS installation and, 562

impersonation, 181–82

Internet security, 131

logging, 159–60

operating systems and, 134–35

passwords, 145–49, 513

patches, 155–58

policies, 138

ports, 154–55

Request Validation, 153–54

resources, 183–84

sample applications and, 151–52

server setup, 133–34

services, not installing unneeded, 135

services, removing unnecessary, 136–38

SSL protection, 161–65

templates, 139–45

threats, 132–33

tracing and, 486

validation, 152–53

ViewState and, 402

Web services, 427

Security Configuration and Analysis tool, 138

<securityPolicy> element, 183, 544–45

security templates, 139–45

applying, 143–44, 184

creating, 139–42, 184

Security Templates tool

accessing, 139

creating new template, 139–42

overview of, 138

testing templates, 142

SelectedDates collection, 260

<select>, HTML element, 231

SelectionList control, Mobile Web Forms, 272

semantic errors, 491, 496

semicolons (;), terminating statements with, 509

separators, Repeater controls, 344–47

SeparatorTemplate, 344

server controls, 229–77

adding declaratively, 238–39

adding programmatically, 239–40

adding with Visual Studio .NET, 241–44

AdRotator control, 257–60

ASP.NET mobile controls, 270–76

ASP.NET new features, 31

ASP.NET page elements, 192

Attributes collection, 277

Calendar control, 260–63

choosing, 238

CompareValidator control, 269–70

contrasted with user controls, 213

data-bound controls, 270

e-mail example, 246–51

HTML controls, 229–36, 277

registration wizard example, 251–57

RequiredFieldValidator control, 267–68

styles, 244–46, 277

types of, 229

validation controls, 264–70, 277

Visible property, 277

Web controls, 237

Web Forms, 44–45

Xml control, 263–64

server controls, custom, 351–407

adding programmatically, 362–64

adding with Visual Studio .NET, 356–61

classes, 353–54

creating, 352–53

enhanced TextBox control, 356–58

event execution order, 372–73

event handling, 370–71

events, 369–70

functionality of, 364

inheriting from base class, 354–55

methods, 366–67

namespaces, 353

overriding inherited events, 371–72

overview of, 351–52

postbacks, 368–69

properties, 364–65

raising events, 369–70

RegLogin control example. See RegLogin control

rendering control output, 355

state, maintaining, 401–2

Toolbox and, 358–59

Web Forms, 359–61

serverErrorMessageFile attribute, <processModel>, 556

Server Explorer window, Visual Studio .NET, 21

Server.GetLastError method, 224

servername, 471

Server objects, 30

servers

security, 133–34

SqlConnection connection string keys, 285

server-side code

ASP.NET page elements, 191

migration process and, 508

postbacks, 192–93

server-side comments, 190–91

server-side includes, 220

Service Releases, 576–80

services

not installing unneeded, 135

removing unnecessary, 136–38, 184

removing unused, 562

SessionID property, Session object, 100

Session objects

ASP.NET, 30

caching and, 442

methods and properties, 100

session state, 98–104

cookieless sessions, 108–9

disabling when not needed, 104

enabling, 100–101

limitations of, 103

overview of, 98–100

reading and writing, 101–2

recommendations for information stored in, 103

session object methods and properties, 100

storing in client-side cookies, 109–11

storing in-process, 105

storing in SQL Server, 107–8

storing out-of-process, 105–7

<sessionState> element, 546–47

Set method, Application Collection, 93

Set statements, 509

Setup Type page, MSDN Library, 572–73

Setup Wizard, 480

SGML (Structured Generalized Markup Language), 115

shared assemblies, 362

Shared attribute, @OutputCache directive, 207, 443–44, 449

short data type, 52

short-term migration, 513

shutdownTimeout attribute, <processModel>, 556

side-by-side execution, 128

single-threaded apartment (STA) process, 509

slidingExpiration attribute, <forms> child element, <authentication>, 174, 538

smartNavigation attribute, @Page directive, 197

smartNavigation attribute, <pages> element, 532

SmtpMail class, 246

SMTP Service

port security, 154

vulnerabilities of, 135

sn.exe, 362

SOAP

consuming Web service via, 432

standardization, 432

Web services and, 412

Web service security, 427

SOAP envelopes, 412

solution containers, Visual Studio .NET, 13

Solution Explorer

Add Web Form, 40–41

Add Web Reference, 435–36

Add Web User Control, 447

Browse With, 122, 125, 250, 399, 419

opening files with, 24

View In Browser option, 46

Visual Studio .NET windows, 20

SortCommand, DataGrids, 336–38

<span> tags, 245

specialization, of server controls, 352

SqlCommand class, 290–96

creating SqlCommand object, 290–92

displaying XML data in Web pages, 292–96

overview of, 281

Parameters collection, 301

SqlConnection class, 283–86

connection string keys, 284–86

database connection with, 283–84

overview of, 281

sqlConnectionString attribute, <sessionState>, 547

SqlDataAdapter class, 281, 423

SqlDataReader class, 281, 299–301, 322–23

SQL Enterprise Manager, 288–89, 462

SQL Server

as backend database, 283

connecting to, 347

password storage, 149

sa account, 150

storing session state, 105, 107–8, 112

trusted connections, 182

Web services and, 437–38

xp_cmdshell, 145

SQL Server Enterprise Manager utility, 147

SQL Server.NET Data Provider, 280–81

SQL Server Query Analyzer, 577–78

SQL Server Web Assistant, 459–60

SQL statements, 317, 347

Src attribute

@Assembly directive, 205–6

@Page directive, 197

@Register directive, 205

src attribute

Web application deployment and, 473

Web services and, 414

SSL (Secure Sockets Layer), 161–65

enabling, 185

installing certificates, 162–63

protecting communications, 161

requesting certificates, 161–62

Require Secure Channel (SSL) check box, 164

Web service security, 428–29

Standard toolbar, 27

Start Page, Visual Studio .NET, 9–12, 15

STA (single-threaded apartment) process, 509

stateConnectionString attribute, <sessionState>, 547

state, defined, 91

state management

applications. See application state

ASP.NET new features, 31

custom controls, 401–2, 407

overview of, 91

scalability and, 104–5

server controls, 111

sessions. See session state

statements

break statements, 69

conditional logic statements, 66–69

else statements, 67

if statements, 66–68

looping statements, 74–77

Set statements, 509

SQL statements, 317, 347

switch case statements, 68–74

terminating with semicolons, 509

using statement, 362, 374, 404, 454

static content, 473

static variables, 56

statusCode attribute, <customErrors>, 536

statusMessage property, 387

stored procedures, ADO.NET, 299–301

storing application configuration settings, 471–72

storing session state, 105–11

in client-side cookies, 109–11

in-process, 105

out-of-process, 105–7

in SQL Server, 107–8

StreamWriter, 389

strict attribute, <compilation>, 528

Strict attribute, @Page directive, 197

StringBuilder class, 376, 380

string data type, 52, 53, 422

strings

concatenations, 376–77

variable declaration and, 55

Web services, 422

string variables, RegLogin control, 375

struct data type, 52

structured exception handling, 78–80, 224

Structured Generalized Markup Language (SGML), 115

styles, server controls, 244–46, 277

subdirectories

IIS permissions, 475–76

overriding, 126

switch case statements, 68–74

syntax errors, 77, 491, 496

system administrator. See sa (system administrator) account

System.Attribute, 415

SYSTEM built-in account, 181

System Properties dialog box, 578–79

System.Text namespace, 376–77

System.Web.Mail, 249

System.Web.UI.HtmlControls, 230

System.Web.UI namespace

Page class, 6, 209–11

specialization of controls and, 352

using statement, 404

System.Web.UI.WebControls, 237, 354, 357

System.Xml.XmlDocument, 263

System.Xml.XslTransform, 263