Browse by Tags

All Tags » AJAX

Hacker's Challenge #2: Crack the AJAX Login Control (Plain text provided)

April 02, 2007

[ This is a follow up to the first AJAX Login Control Hacker's Challenge . You will find more details and instructions there. ] Well, so far, the hackers are not doing so well. Here are some numbers. Out of ~517 downloads, ~108 accounts created on the test site, and ~617 page views over the past two weeks, the AJAX Login Control has yet to be cracked. Yes, I know, those aren't great numbers... but hey, at least there is some indication that the armour is being tested. Okay. So, I've decided...  ... Read the full post or  the first comment. Filed under: ,

PageMethods Not Found (or Defined)?

March 19, 2007

If you are seeing this javascript error (or similar) while trying to use Page Methods with ASP.NET AJAX, here is a checklist that should save you some time. The page method must have the System.Web.Services.WebMethod attribute. [ WebMethod ] ... The page method must be public. [ WebMethod ] public ... The page method must be static. [ WebMethod ] public static ... The page method must be defined on the page (either inline or in the code-behind). It cannot be defined in a control, master page, or...  ... Read the full post or  the 2 comments. Filed under: ,

Hacker's Challenge: Crack the AJAX Login Control

March 19, 2007

So, you think you are an expert AJAX hacker? Want to earn a quick $100? Then you've come to the right place. Here's the challenge. Go to http://snipgen.com/secure and sign in as hacker@snipgen.com . Yeah, I'm even giving you the username. And I've given you a whole series of posts on how it works. Not to mention that the source is even available . How hard can it be. In order to get the money, you have to successfully sign in with the afore mentioned email. In addition, you have to...  ... Read the full post or  the 5 comments. Filed under: ,

[AJAX Login] Compatibility with ASP.NET Authentication

February 26, 2007

[ Update: March 20, 2007 ] Before putting the finishing touches on this AJAX Login System / Control, I've decided to see just how secure it is by issuing a challenge . See if you can crack it... In Simplifying the Sign In Experience with AJAX , I brainstormed about how an AJAX Login control could improve a user's web application sign in experience. If you have been following the more detailed posts of each attribute, you will remember that my last post was on making sure the functionality...  ... Read the full post or  the 6 comments. Filed under: , ,

ASP.NET AJAX RTM Changes, The Short List

January 25, 2007

Some changes of note from the ASP.NET AJAX 1.0 RC to RTM release; some of which may break your application after upgrading. Yes, I'm a bit behind the announcements about the RTM release which I'm sure you could not have missed from Scott Guthrie , Nikhil Kothari , Shawn Burke , and Brian Goldfarb . However, I am just now working through all of the changes in the latest release. I just finished reading the Changes between the ASP.NET AJAX ("Atlas") CTP and the RTM Releases whitepaper...  ... Read the full post or  be the first to comment. Filed under: ,

[AJAX Login] Secure Without SSL

January 14, 2007

[ Update: January 15, 2007 ] For information about the live AJAX Login demo which implements the attributes described in this post see the third post in the series - Unique URLs and Live Demo . In Simplifying the Sign In Experience with AJAX , I brainstormed about how an AJAX Login control could improve a user's web application sign in experience. The second item on the list of desired attributes for such a control was Secure Without SSL . This post dives into the details of that attribute and...  ... Read the full post or  the 2 comments. Filed under: , ,

[AJAX Login] Unique URLs and Live Demo

January 14, 2007

In Simplifying the Sign In Experience with AJAX , I brainstormed about how an AJAX Login control could improve a user's web application sign in experience. The third item on the list of desired attributes for such a control was URL Accessible Functionality . This post explains that attribute and gives an example of how I implemented it. The Goal The primary focus of this attribute is to provide users with a unique URL for each distinct state of the AJAX Login control. Ajax Patterns contains a...  ... Read the full post or  the 2 comments. Filed under:

[AJAX Login] Very, Very Intuitive User Interface

January 05, 2007

[ Update: January 15, 2007 ] For information about the live AJAX Login demo which implements the attributes described in this post see the third post in the series - Unique URLs and Live Demo . In Simplifying the Sign In Experience with AJAX , I brainstormed about how an AJAX Login control that could improve a user's web application sign in experience. The first item on the list of desired attributes for such a control was Very, Very Intuitive User Interface . This post dives into the details...  ... Read the full post or  be the first to comment. Filed under: , ,

Simplifying the Sign In Experience with AJAX

December 30, 2006

[ Update: March 20, 2007 ] Before putting the finishing touches on this AJAX Login System / Control, I've decided to see just how secure it is by issuing a challenge . See if you can crack it... [ Update: February 26, 2007 ] For source code and an updated demo of the AJAX Login System described here, see - Compatibility with ASP.NET . Let’s be honest, the sign in / login process that most web applications use is not extremely complex. Yet, most people would agree that it is more complex than...  ... Read the full post or  the 5 comments. Filed under: , ,

ASP.net and ASP.net AJAX as Design Tools?

December 11, 2006

I ran across the Microsoft.com Design pages via Shawn Burke’s blog . He has a post gloating the use of his teams’ most excellent ASP.net AJAX Control Toolkit on the site (If you haven’t given the toolkit a spin, you definitely should!). When I reached the toolbox section of the design site, I was a bit surprised. It presents tools traditionally thought of as development centric, ASP.net and ASP.net AJAX , as design tools *. An interesting perspective indeed. *Side note: Why doesn’t the URL http:...  ... Read the full post or  be the first to comment. Filed under: , ,