Forum  Commercial Foru...  Commercial Foru...  Using Aurigma In 6.3.xxx
Previous Previous
 
Next Next
New Post 3/14/2010 11:33 AM
  derekmhart@yahoo.com
685 posts
1st Level Poster


Re: Using Aurigma In 6.3.xxx 

I am passing the variables from the main VWG form into the VWG popup form. These are properties of the VWG popup form. I suspect this is as secure as the session variable way of doing things because it is internal to VWG. One of the properties passed is a GUID. Since it is VWG that is passing it, I believe there is no way to sniff out a GUID. Is this clear? Is it clear how I am passing the variables? If this is in HTTPS, can the page be intercepted somehow, and somehow is there a way to not introduce new parameters, which I am not worried about, but is there a way for a hacker to see the VWG properties that were passed into the popup form, and then read by the aspx page? I read the variable from the popup form properties with this code... can you tell me if there are holes in this?

Dim f As UploadAurigma = DirectCast(Me.PageContext.Parent, UploadAurigma)
somevalue = f.MyVariableFromVWGPopupForm

I am not able to relate the usage of AspControlBoxBas, AspPageBox and AspPageBase to the practicality of how they are used. Is one used with the asp.net wrapper? Is one used with custom control? And the AspPageBox is used to simply load in an aspx page with the path property? I see that AspPageBase is used in the aspx page to inherit from VWG, so I can read variables like I do in the above code. I really need this stuff cleared up for me.

 
New Post 3/15/2010 2:33 AM
  ori.cohen
4383 posts
1st Level Poster




Re: Using Aurigma In 6.3.xxx 
Modified By ori.cohen  on 3/15/2010 4:34:37 AM)

Hello Derek,

As you can probably realize by now, the imprtant thing is not how you send the parameters to the pop-up Form from the MainForm but how you send them from the pop-up Form to the ASP.NET page.
As the ASP.NET page is on the same virtual directory as the Visual WebGui application, they run on the same Session object and so you can store specific information on the Session object for the specific ASP.NET page to use.
You can use a time stamp that will invalidate the variable after 4 seconds for example.
When the ASP.NET will be loaded on server-side it will check for a Session variable meant specifically for it. If it will find expired variables, it will also remove them at the same time.

If you use HTTPS, even if the page is intercepted before reaching the client machine, reading the requests and responses will be useless and any changes in them will only cause the destruction of the content of the internal TCP packets, causing the browser not to be able to render the resonse.

There is no way a hacker will be able to view and or change the parameters sent between Forms on your application, unless this hacker hacks into the server itself and gains access to the ASP.NET run-time on your IIS.

You can find some information about the AspPageBase class and use in this forum thread here.
The AspControlBoxBase is the base class for any Wrapper class generated by our wrapper tool.
And by now you probably know some about the AspPageBox...


Regards,

Ori Cohen
Support Manager, the Visual WebGui team

 
New Post 3/15/2010 3:16 PM
  derekmhart@yahoo.com
685 posts
1st Level Poster


Re: Using Aurigma In 6.3.xxx 
Modified By derekmhart@yahoo.com  on 3/15/2010 7:33:29 PM)

OK, you stated that the important thing was how I sent the parameters to the ASP.NET page. This is how I am doing it inside the aspx.vb page.

Dim f As UploadAurigma = DirectCast(Me.PageContext.Parent, UploadAurigma)
somevalue = f.MyVariableFromVWGPopupForm

That is not exactly using session variables.

Am I safe with this method?


A slightly different topic. Now that I have gone down this path of using the asppagebox with Aurigma, I would like to know if it IS possible to communicate back to VWG? I have tried calling a public function in the popup form, but I cannot. Is there a way?

 
New Post 3/16/2010 2:23 PM
  palli
11189 posts
1st Level Poster




Re: Using Aurigma In 6.3.xxx 

Hi Derek,

If you provide the necessary checks for if Me.PageContext.Parent is valid, then I would say this is pretty much ok, and should prevent the aspx page from loading, if not invoked from a dialog with the fitting signature of being DirectCast-able to UploadAurigma. Local variables on a dialog form are stored within the session anyway.

Communications of data between the aspx page and your VWG application you have actually answered yourself with the above suggestion of transfering the parameters. In terms of JavaScript communications, please take a look at the links on the AspPageBox wiki page. You should find a few links to that subject there, and I recommend you read at least the one labeled "Communicating between AspPageBox and Visual WebGui form".

Hope this helps,

Palli

 

 


Páll Björnsson - Visual WebGui support team - Email: support@visualwebgui.com
 
Previous Previous
 
Next Next
  Forum  Commercial Foru...  Commercial Foru...  Using Aurigma In 6.3.xxx
Assessment Bottom
.NET Web, Cloud and Mobile application delivery platform | Sitemap | Terms of Use | Privacy Statement | Copyright © 2005-2011 Visual WebGui®       Visual WebGui weblog on ASP.NET Visual WebGui Group on LinkedIn Visual WebGui updates on Twitter Visual WebGui Page on Facebook Visual WebGui YouTube Channel Visual WebGui Platform News RSS