Group items tagged

In this post I want to show how to address a missing feature that was a part of "old" lucene index implementation. This article will provide an example how one can customize Lucene search configuration so that it's possible to add custom fields to the index.

"Cross Site Request Forgery (CSRF) This article assumes you already understand what CSRF is and how it works. If you don't, do a quick Google search and it will clear it up. CSRF can be done using POST or GET, but GET is much easier to implement. By default, ASP.Net forms and other functionality work via the POST method. If we could submit a GET instead of a POST it would open up the attack surface a great deal. No longer do we need someone to visit a page with a form on it, but we could actually embed the GET request (a link) in emails or other medium. Fortunately for the attacker, unfortunately for the developer, .Net uses Value Shadowing for its controls. This means all server side controls, ie. Viewstate, EventValidation, EventCommand, EventArguments, etc.. It is possible to take the values that would be submitted as part of the form and just add them to the Querystring instead. Now there is a GET request that is comparable to the POST request. ASP.Net Webforms does not check whether a post back comes from GET or POST. The one thing to keep in mind is that the URL in a GET is limited in size. If the form is large and the viewstate is very large, this could block this technique from working. This depends on the way the application is configured (more later)."

Joyride is extremely flexible and lets you take control of how people interact with your tour. We programmed it to be cross-browser compatible with modern browsers and even used some fancy CSS to avoid images. Now let's see just how easy it is to take your first ride without getting the fuzz involved.

In this post I will show you how to troubleshoot Web Resource related problems and how to deal with them.

"How To Use Control Alt Delete in Remote Desktop"

How to configure SQL 2005 Database Mail sp_send_dbmail

How to configure SQL 2005 Database Mail sp_send_dbmail

Can anyone explain how to remove the orange border around text/input boxes? I think it only happens on Chrome to show that the input box is active.

On the server you need to install a Role Service called Management Service. You find this by going to ServerManager->Roles->WebServer(IIS) and then looking in right panel, section RoleServices. There it is, and there you can click to add it to the config.

How to allow access to the sitecore context in a WCF service.

How to create a debugger console using Sitecore and Log4net. Can be used to trap 404s and to log them.

Page Speed is an open-source Firefox/Firebug Add-on. Webmasters and web developers can use Page Speed to evaluate the performance of their web pages and to get suggestions on how to improve them.

oCanvas is a JavaScript library intended to make development with HTML5 Canvas easier. Instead of working with pixels, you work with objects. It's very straightforward and easy to get started with. Please have a look at the examples to see just how easy it is.

"How to Run Eseutil /R in Recovery Mode"

"How to recover a Corrupted NTDS.dit file in windows 2003 Server?"

"How to move Exchange databases and logs in Exchange Server 2003"

"How to make a Flash movie with a transparent background"

"How To: Prevent Cross-Site Scripting in ASP.NET"

"How To: Protect From Injection Attacks in ASP.NET"

Nice hack to make the default dataFolder path work without any config changes