WebmasterHub.net Blog

Securing a SharePoint Application Page

2011-10-26T21:38:00.000-07:00

References for information about securing Application Pages in SharePoint, and implementing permission based content in SharePoint pages.

SharePoint Application Page Security

Choosing the correct class to inherit from when developing an Application Page
Validating a page request:
Programmatic Validation of User Permissions
SPBase Permissions Enumeration
Code Access Security (CAS) Policy

Securing Application Pages in Windows SharePoint Services 3.0

Application Pages: The What and Why
Validating Page Requests
Validating User Permissions

SPBasePermissions - Uses of SharePoint built-in permissions

Programmatic uses of SPBasePermissions to check for or set permissions on various objects in SharePoint
Get or set the Base Permissions for a Role Definition in a Web
Get the current or specified user’s effective SPBasePermissions on an object (SPWeb, SPList, SPListItem, etc.) Username passed as String to GetUserEffectivePermissions():
Check if the current or specified user has the specified permissions and throws UnauthorizedAccessException if not:
Layout Page Base - Permissions required to access a LayoutPageBase
Trimmed Content on a Page (Get or set permissions)
Base permissions associated with a SPPermission object
Get base permissions required to use a ConsoleAction object or ConsoleNode
Get permissions required to see the developer dashboard
Get or set the permissions for a web application
Permissions required to access a Mobile Page
Toolbar Menu Button Permissions
Show / Hide content in SharePoint based on the built-in permissions in SharePoint without code.

Examples of implementing permission based content in SharePoint

Show content to only a user with full permissions on the site:
Show content to only users who can manage lists
Show Content to users with access to manage permissions
Show Content to users who can Add, Edit or Delete List Items in the Current List
Show a link to Anonymous (not authenticated) users only
Show a link to Authenticated users only

SharePoint: Show or Hide Content based on Permissions

Show Content to Site Managers & Owners

Application Page Security for SharePoint

SPSecurityTrimmedControl class

SPBasePermissions Enumeration

Php Feed Generator - Free Php Class (Custom feed in 5 Simple Steps)

2011-09-12T08:59:00.000-07:00

How to generate custom Atom and RSS feeds with Php

Php FeedWriter is a free Php package that allows RSS and Atom feeds to be generated using a single script. Build and populate your feed from your database or static content once, then allow users of your website to subscribe to view the feed in many common formats, including Atom 1.0 and RSS 2.0. Other output formats are also supported as well making your custom feeds highly compatible with feed readers and aggregators.

Below is a simple step by step tutorial to create a basic feed using the free class that build upon the sample scripts available to download from the official website. Class documentation is provided to help use the class when constructing your feed from database or static content.

Tutorial Steps: Generate Feed using Php:

1. Download the free Php Feed Generator Class, and extract the contents of the package to your web server.

In this tutorial, I have extracted the contents of the package into a "includes" directory accessible from the root of the web server. The package contains a FeedWriter.php file and FeedWriter directory that contains the other class files.

2. Create a new Php file named "feed.php" that will be used to serve the feed content.
3. Copy the following code into the feed.php file to get started.

<?php
require_once("includes/FeedWriter.php");
$feed = new FeedWriter('Feed Title', 'Description', 'http://webmasterhub-blog.blogspot.com/');

This instantiates a new FeedWriter object with the title, description and link. The link should point to the hompage of your website.

4. Add an item to the feed:

$feed->add_item('Item Title' , 'Item Content', 'Item Link');

This will add an item to the feed. The link should point to the page containing the content included in the item.

5. Display the feed

echo $feed->getXML('RSS_0_92');

This will display a RSS 9.92 compatible feed. Other formats supported include:

Atom_1 (Atom 1.0)

RSS_2_0 (RSS 2.0)

RSS_1_0 (RSS 1.0)

RSS_0_91 (RSS 0.91)

Depending on the format used, you may need to include additional information in the feed or items in the feed for it to be valid. This can be done easily using the functions provided by the FeedWriter class. The class documentation can assist with adding other (optional) information to the feed if required, which is available from the Php FeedWriter website.

The Php FeedWriter website also provides a range of sample scripts that allow the format to be determined from a query string parameter.

A more comprehensive tutorial on how to build custom feeds using Php FeedWriter can be found here: How to Generate Feed Using Php (Atom 1.0 and RSS 2.0 Compatible)

SharePoint 2007 Hosting

2011-06-14T07:49:00.000-07:00

SharePoint 2007 and WSS for Hosting - Collections Site Sorting Out ...

SharePoint 2007 Hosting

Others

SharePoint 2007 Hosting, which is becoming harder to find with the release of SharePoint 2010.

SharePoint 2010 Central Administration URL

2011-06-14T07:43:00.000-07:00

SharePoint 2010 Central Administration URL

How to retrieve the URL for the SharePoint 2010 Central Administration site.

SharePoint 2010 Central Administration:
Issues with SharePoint 2010 Central Administration running on SSL ...

Others:

Encoding ASP.NET, JavaScript Attacks

2011-06-14T07:33:00.000-07:00

The post ASP.NET MVC, Javascript, Security/Attacks, Encoding includes a rage of resources relating to the ASP.NET MVC and managing Javascript Encoding Attacks, including:

Razor MVC partial view cannot find end of code blocks and LI tags
Problem with LogOn page loading inside div on membership redirection
Is this javascript encoding properly written?
DOM Based XSS Attack and InnerHTML (Php)
XSS attack prevention (Java)
Javascript injection attack prevention for textboxes (C# / ASP.NET)

The resources are mostly from Stackoverflow questions that have been answered.

----
Preventing Javascript Encoding XSS attacks in ASP.NET MVC
Encoding ASP.NET

AppFabric Access Control Service

2011-06-14T07:29:00.000-07:00

Windows Azure AppFabric Access Control Service - Various:

Access Control Service 1.0
Windows Azure AppFabric
Introduction to the AppFabric Access Control Service 2.0
Access Control Service Samples and Documentation
Authenticate Orchard users with AppFabric Access Control Service
Windows Azure AppFabric Access Control Service released!
Windows Azure AppFabric Access Control Service 2.0 Supports New Identity Providers
Understanding Windows Azure AppFabric Access Control Service
Windows Azure AppFabric: Access Control

Authenticate Orchard users with AppFabric Access Control Service
"From the initial release of Orchard, the new .NET CMS, I have been wondering how difficult (or easy) it would be to integrate external (“federated”) authentication like Windows Azure AppFabric Access Control Service with it. After a few attempts, I managed to wrap-up a module for Orchard which does that: Authentication.Federated."

The main steps in this tutorial are:

Configuring Authentication.Federated – Windows Azure AppFabric sideIdentity Providers
Relying Party Applications
Edit Rule Group
Configuring Authentication.Federated – Orchard side

Find references the "Authenticate Orchard users with AppFabric Access Control Service" tutorial and many quality ASP.NET development tutorials resources on DevelopASP.NET:

Authenticate Orchard users with AppFabric Access Control Service.

Javascript Query String Manipulation

2011-06-13T22:48:00.000-07:00

Javascript Query String Manipulation

A set of Javascript functions that can be used to modify the query string and hyperlinks on the current page.
The Javascript Query String functions provide the following capabilities:

Add a Query String Parameter and value
Check if a Query String parameter exists
Remove a parameter from the current url
Get the value of a specific parameter from the query string of the current page.
Get an array of all query string parameters and values.
Strip all parameters from the current url
Add query string parameters to all hyperlinks on the current page that point to a page on the same website.

Javascript Query String Manipulation

Get Started with Visual Studio LightSwitch

2011-06-12T07:17:00.000-07:00

LightSwitch Developer Center
Visual Studio LightSwitch (MSDN)
Visual Studio LightSwitch Development Tutorials
Information about Visual Studio LightSwitch

Get Started with Visual Studio LightSwitch.

VS LightSwitch beta 2 available.

Titanium Mobile Android - Development Tutorials & Resources

2011-06-12T07:11:00.000-07:00

Configuring Android SDK and Titanium Developer

Installing and configuring Titanium Developer for developing native mobile apps for iPhone and Android with JavaScript.

Titanium Mobile Android Development: First Application

In this series of tutorials we use Appcelerator’s Titanium Mobile platform to create Android applications. This tutorial walks you through developing and packaging your first Titanium application. Full source and packaged application is available on github.

Titanium Mobile’s Android development now less painful than Prostate Exam – Mobile SDK 1.8 (!) + Fastdev
A few days ago, Appcelerator announced a really cool new feature: Fastdev for Titanium Mobile. This thing cuts dramatically development times for Android apps as all the wait time spent recompiling and re-publishing the app to the emulator simply disappears!

Titanium Mobile Android Development: Installation

In this series of tutorials we use Appcelerator’s Titanium Mobile platform to create Android applications. This tutorial goes over the installation and configuration of the Android SDK and Titanium Mobile on a Windows 7.

Starting with Titanium and Android

Appcelerator Titanium is one of the 3 cross-platform mobile frameworks (the other 2 are Rhodes and PhoneGap). Similar to PhoneGap, it exposes devices capabilites through Javascript and you write your app using HTML, CSS and of course, Javascript.

Titanium Mobile 1.3 Android Preview Part 3: Vertical Layouts
This is Part 3 of a series of posts about what’s coming up for Android development in the new Appcelerator Titanium Mobile SDK 1.3, which should be pushed out this week

Titanium Mobile Programming GuidesThe following are programming guides that provide a more in-depth set of documentation for a particular feature area or capability. The guides are currently being migrated from the old documentation site and should be available soon. Check out the following... (See page for list of Titanium Mobile Programming Guides from developer.appcelerator.com).

Titanium DevelopmentNews and tips for Titanium Mobile developers.

Build a Titanium Mobile Pizza Ordering App: Crust Selection In this multi-part tutorial series, I’ll be teaching you how to build a Titanium Mobile app from start to finish. Specifically, you’ll learn how to build a Pizza Shop app that will allow customers to order a custom pizza on the go. In this tutorial, I will demonstrate how to setup the project and create a “Crust Selection” screen.

More:

---------------
In this series of tutorials we use Appcelerator’s Titanium Mobile platform to create Android applications. Titanium Mobile Android

Windows Presentation Foundation (WPF)

2011-06-12T07:03:00.001-07:00

Windows Presentation Foundation (WPF)
Registration is now open for the patterns & practices Prism, Unity, WPF, MVVM training event, 27-29 June in Boise, ID...

MVC Music Store - ASP.NET Web Application Development

2011-06-12T06:59:00.000-07:00

The following post provides a range of tutorials and videos relating to the ASP.NET MVC Music Store tutorial designed to help you learn how to build rich web applications using ASP.NET MVC. Carious customisations and integration of additional features into the Music Store application are included.

MVC Music Store - Additional Resources, Customisations & Videos

MVC Music Store (DevelopASP.NET).

OCR Resources: Free Online Optical Character Recognition + Windows GUI for GOCR Downloads

2011-06-12T05:38:00.000-07:00

Windows GUI for GOCR Download Links and sites providing information about the Character Recognition Software:

Download Windows GUI for GOCR on Brothersoft:
GOCR Windows Frontend 1.0 - A free Optical Character Recognition (OCR) program
Brothersoft Editor: GOCR is an open source Optical Character Recognition (OCR) program that runs on Windows, Linux and MacOSX.
Download via Softpedia:
Download the GOCR Windows Frontend 1.0
"GOCR is an open source Optical Character Recognition (OCR) program that runs on Windows, Linux and MacOSX. It is a command line program that allows you to recognise characters from an image file."

Download via downv.com:
GOCR Windows Frontend Free Download
"A free Optical Character Recognition (OCR) program GOCR is an open source Optical Character Recognition (OCR) program that runs on Windows, Linux and MacOSX. It is a command line program that allows you to recognise characters from an image file."

More information and resources for Optical Character Recognition:
Optical character recognition: Wikipedia
Optical character recognition, usually abbreviated to OCR, is the mechanical or electronic translation of scanned images of handwritten, typewritten or printed text into machine-encoded text. It is widely used to convert books and documents into electronic files, to computerize a record-keeping system in an office, or to publish the text on a website.

Optical Character Recognition (Webopedia)
Often abbreviated OCR, optical character recognition refers to the branch of computer science that involves reading text from paper and translating the images into a form that the computer can manipulate (for example, into ASCII codes)

Free online Optical Character Recognition Tool: Free OCR
Free-OCR.com is a free online OCR (Optical Character Recognition) tool. You can use this service to extract text from any image you supply.

Free Online OCR
without installation on your computer. Recognize text and characters from PDF scanned documents (including multipage files), photographs and digital camera captured images. Free Online OCR service supports 32 recognition languages.

NewOCR
NewOCR.com is a free online OCR (Optical Character Recognition) service. NewOCR.com can analyze the text in any image file that you upload, and then convert the text from the image into text that you can easily edit on your computer.

QuickStudy: Optical Character Recognition
By Sami Lais - Computerworld - Suppose you wanted to digitize the novel Moby Dick overnight. You could stay up all night typing and still not finish. Or you could use a high-end scanner and in minutes scan all of author Herman Melville's works into a computer using optical character recognition (OCR) technology.

Visual Studio 2010 Slow

2011-06-11T21:52:00.000-07:00

Network Installation may impact o performance of Visual Studio.
Visual Studio 2010 Slow

C++ 2010 SP1

2011-06-11T21:49:00.000-07:00

Windows SDK 7.1 - Visual C++ 2010 SP1 Compiler Update.

Some experienced issues with x64 or IA64 compilers after installing Service Pack 1 for Visual Studio.

Close Outlook - VB Macro Development

2011-06-11T18:57:00.000-07:00

Outlook Close loop issue where the close event was called during the startup sequence from a macro, which prevent Outlook from opening to fix/disable the macro.

Close Outlook - VB Macro Development

KB2478063 Microsoft .NET Framework 4 Platform Update

2011-06-11T18:45:00.000-07:00

KB2478063 Microsoft .NET Framework 4 Platform Update

Internet Explorer 9 for Mobile

2011-06-11T18:40:00.000-07:00

Internet Explorer 9 for Mobile

Internet Explorer 9 Mobile lacks touch support?

MSDN Subscription

2011-06-11T06:48:00.001-07:00

MSDN Subscription - Information about changes to MSDN subscriptions as a result of ongoing pressure from security attacks.

SharePoint Designer Tutorials

2011-06-10T21:51:00.000-07:00

Tutorials and courses using SharePoint Designer 2010 to design and customize SharePoint 2010.

Learn how to customize SP2010 sites with SharePoint Designer 2010 by Critical Path Training

Are you looking to learn how to leverage SharePoint Designer 2010 to customize and create robust solutions with no code or physical access to the SharePoint 2010 server? We at Critical Path Training have a new course devoted to using SharePoint Designer 2010...

http://www.andrewconnell.com/blog/archive/2010/02/24/learn-how-to-customize-sp2010-sites-with-sharepoint-designer-2010.aspx

Andrew Connell

SharePoint Designer 2010 Online Course

I’ll be teaching the SharePoint Designer 2010 course again online next week. It’s a 5 day online course packed with info on SPD 2010. Hope you can join me.
http://blog.sharepointelearning.com/sharepoint-designer-2010-online-course/

SharePoint Designer 2010 Workflows DVD

We just released the new SharePoint Designer 2010 Workflows DVD. The complete information on this DVD package is available here: http://www.sharepoint-videos.com/sharepoint-designer-2010-workflows-training-dvd/ There are four ways to implement workflows in your SharePoint sites: 1) Use the browse

http://blog.sharepointelearning.com/sharepoint-designer-2010-workflows-dvd/

SharePoint Designer 2010 Video Tutorial DVD - SharePoint 2010 Tutorial

The SharePoint Designer 2010 Training DVD-ROM containing 4+ hours of video tutorials was released for sale yesterday. This DVD contains demonstrations showing you exactly..

http://blog.sharepointelearning.com/sharepoint-designer-2010-video-tutorial-dvd/

Asif Rehmani

Microsoft SharePoint Designer 2010 (64-bit)

SharePoint Designer 2010 is the tool of choice for the rapid development of SharePoint applications. Using SharePoint Designer, advanced users and developers alike can rapidly create SharePoint solutions in response to business needs.

http://sharepointerol.blogspot.com/2010/04/microsoft-sharepoint-designer-2010-64_28.html

Pierre Erol GIRAUDY

From the Master-SharePoint.com Resource Archive in the SharePoint Designer 2010 category.

Workflow Tutorial - SharePoint 2010

2011-04-05T06:02:00.000-07:00

SharePoint Designer 2010 Workflow Tutorial

Intro to SharePoint Designer Workflow Editor
SharePoint Designer Blog

Creating Workflows for SharePoint 2010
Part 1 of a 15 (SharePoint 2010 Workfows): Step by Step Tutorial by Serge Luca on how to create Workflows for SharePoint 2010.

Creating workflows for SharePoint 2010: Retrieving list items
Part 2: Get values from list items in a SharePoint 2010 Workflow

SharePoint Workflow Security: Restrict Workflow Access
A simple method to prevent a SharePoint Designer Workflow from running if a user should not have access to the Workflow is to use a separate secured list to check the users access…

SharePoint 2010 Tutorial for Pluggable Workflow Services

Human Workflow Overview (SharePoint 2010)
Workflow capabilities of SharePoint 2010

SharePoint Designer Keyboard Shortcuts
Common and useful keyboard shortcuts for SharePoint Designer.

SharePoint 2010 - Workflow Tutorial

InfoPath & SharePoint Development Reosurces

2011-01-16T06:52:00.000-08:00

InfoPath Data Connection Performance Issues

Using web services instead of SharePoint list data connections in an InfoPath form to improve performance.

SharePoint Development News & Resources

Daily SharePoint Development resources and news.

SharePoint 2010 Development
Learn SharePoint 2010. Daily SharePoint 2010 & MOSS 2007 news resources.

Generate SharePoint Site Permissions Report Using Excel

2010-11-23T01:38:00.000-08:00

Using an Excel spreadsheet and a data connection to the site permissions page of a site in SharePoint, you can display the permissions from the site on a worksheet. By adding multiple data connections to the spreadsheet to the site permissions page on other site in the SharePoint farm, or another SharePoint farm, you can list the permissions for multiple sites on one worksheet, or in the same file on separate sheets.

A data connection that can be used to retrieve the permissions from a site in SharePoint is to 'scrape' the data directly from the site permissions page of the using the web interface proved by SharePoint and a “Web Query” data connection in Excel. Each data connection can be configured to refresh at intervals, when the spreadsheet loads, or to only allow manual refreshes. If there are many connections in one sheet, you should consider staggering the refresh for each so that they are not all executed at the same time. As a separate web request to the SharePoint site must be completed for each connection, the SharePoint server may experience periods of high load if all connections are refreshed at the same time. Configuring each connection to refresh at intervals so that no two are refreshed at the same time should balance the load on the server. Sheets with a small or moderate number of connections can be configured to refresh at the same time if required, but you should test the impact on performance when refreshing data connections if the spreadsheet is to be used frequently or by a large number of users.

SharePoint Site Permissions Report Using Excel

Remove Characters from String Using VBScript

2010-11-23T00:16:00.000-08:00

The article referenced below provides details and examples of various methods that can be used to remove or replace characters in a string using VBScript. Some of the methods include using the replace method and an array of characters to remove and replace, or regular expressions.

Scenarios where certain characters need to be removed from a string may be when the truing is being used as a file name. Different platforms support various characters in filenames, but each have a set of special characters that are illegal when used in filenames. Removing or replacing these characters before saving the file will help prevent errors from occurring.

Characters can be removed explicitly or by exclusion depending on the preferred configuration. For example, a set of characters can be added to an array, that will be removed from or replaced in the input string, or a set or range of characters to remain in the output string can be provided, and any others will be removed or replaced.

For more information, see: VBScript Remove Characters from String

Windows Phone 7 Development

2010-08-29T08:10:00.000-07:00

The following page lists some good Windows Phone 7 Development articles and resources: Local database support for Windows Phone 7, Windows Phone 7 SDK, SharePoint & Windows Phone 7, Windows Phone 7 Development Training, Developer Tools and much more.

See: Windows Phone 7 Development

InfoPath SharePoint

2010-08-21T05:20:00.000-07:00

InfoPath SharePoint

Integrate InfoPath Forms with SharePoint lists, libraries and workflows. The following blog provides various tutorials and resources relating in InfoPath form development & integration with SharePoint. Use InfoPath Forms as an interface or input mechanism for business data and workflow.

blog-sharepoint.blogspot.com/