I was able to remove those cookies with Javascript. Just add next script to the end of login page. This will remove all “ASPSESSIONIDXXXXXXX” cookies before user will login to website: <script type=”text/javascript”> //Clear any session cookies (function(){ var cookiesArr = document.cookie.split(“; “); for (var i = 0; i < cookiesArr.length; i++) { var cItem … Read more
I managed to get FTP access to the customer’s server and so was able to track down the problem. After the form is POSTed, I authenticate the user and then redirect to the main part of the app. Util::redirect(‘/apps/content’); The error was occurring not on the posting of the form, but on the redirect immediately … Read more
From MSDN: When a user moves back and forth between secure and public areas, the ASP.NET-generated session cookie (or URL if you have enabled cookie-less session state) moves with them in plaintext, but the authentication cookie is never passed over unencrypted HTTP connections as long as the Secure cookie property is set. So basically, the … Read more
Thank you to SLaks for pointing me in the right direction, but it still took a few hours of digging in the MVC source to figure out the solution. 1 – Need to put RazorBuildProvider in web.config <buildProviders> <add extension=”.html” type=”System.Web.WebPages.Razor.RazorBuildProvider”/> </buildProviders> And add System.Web.WebPages.Razor to assemblies if it isn’t already there. <assemblies> […] <add … Read more
When running under IIS7 and upwards there is another parameter: <system.webServer> <security> <requestFiltering> <requestLimits maxAllowedContentLength=”10485760″ /> </requestFiltering> </security> </system.webServer> The default setting is slightly less than 30 MB. For uploaded files with size between maxRequestLength and maxAllowedContentLength IIS7 will throw an HttpException with HTTP code 500 and message text Maximum request length exceeded. When this … Read more
If you want to manually add support to your site, you can just add the following to your web.config in the system.webServer section: <staticContent> <mimeMap fileExtension=”.json” mimeType=”application/json” /> </staticContent> This will add a “local” configuration under IIS. This does not work in IIS6, but does work in IIS7 and newer.
Check whether you have WebMatrix.Data.dll and/or WebMatrix.WebData.dll deployed in the bin directory of your application. If they are there (and you know you don’t use them) then try removing them and accessing a page that requires authentication.
Aahh got it… I got it working 🙂 Thanks Christopher, your suggesion is correct. But, finding “Default SMTP Virtual Server” was tricky 😉 Even if you use IIS7 to deploy your web site, you have to open IIS6 Manager to configure SMTP server (why?). I configured SMTP server as follows to make things work: Open … Read more
It is important to note for anyone trying to do this in an MVC application that ResponseRewrite uses Server.Transfer behind the scenes. Therefore, the defaultRedirect must correspond to a legitimate file on the file system. Apparently, Server.Transfer is not compatible with MVC routes, therefore, if your error page is served by a controller action, Server.Transfer … Read more
This happens because the managed dlls get shadow copied to a temporary location under the .NET Framework directory. See http://msdn.microsoft.com/en-us/library/ms366723.aspx for details. Unfortunately, the unmanaged dlls do NOT get copied and the ASP.NET process won’t be able to find them when it needs to load them. One easy solution is to put the unmanaged dlls … Read more