Index Special Characters AddAttributesToRender method, overriding, & (ampersand) character, QueryString 681, 691, 724, 777 encryption, 635 AddBezier method, 793 & operator, 499 AddBeziers method, 793 * (asterisk) character, XPath expression, 476 AddClosedCurve method, 793 * wildcard operator, 500, 505 AddCurve method, 793 @ (at sign) character, XPath expression, 477 AddEllipse method, 793 | (pipe) character, XPath expression, 477 AddLine method, 793 < > (brackets) characters, XPath expression, AddLines method, 793 477 AddNew method, 315 = (equal sign) character, QueryString AddParsedSubObject method, 706, 749 encryption, 635 AddPath method, 793 : (colon) character, namespace prefix, xmlns, AddPie method, 793 458 AddPolygon method, 793 . (dot) character, XPath expression, 477 AddRectangle method, 793 / (forward slash) character, XPath expression, AddRectangles method, 793 477 AddString method, 793 . (period) character, XPath expression, 477 AddStyleAttribute method, 674 \ in Path, 503 Administrator enumeration, ? wildcard operator, 500, 505 WindowsBuiltInRole, 592 ADO vs. ADO.NET, 276–78 A ADO.NET, 407–24, 426, 428, 431, 433–44, Abandon session state settings, 248 446–51 abstract encryption classes, 624 advanced grids, 433–41, 443 AcceptChanges, DataSet Version-Tracking, overview, 433 313, 334–36 parent/child view, 433–36 access, anonymous, 589, 596, 617 parent/child view in single table, access control lists (ACLs), 608 440–41, 443 AccessKey property, 149 parent/child/detail view, 437–38 account tokens, 596–97 summaries in DataGrid, 438–40 AccountOperator enumeration, architecture of, 273–81, 289, 292, 294 WindowsBuiltInRole, 592 ADO worse than ADO.NET, 276–78 ACID properties, 408 ADO.NET data providers, 274–75, 289, AcquireRequestState, 188 292, 294 Acrobat (PDF) files, 619 disconnected data, 279 Act as Part of the Operating System fundamental ADO.NET classes, 276, permission, 595 280–81 ActiveX components, PDF files, 619 overview, 273 ActiveXControls property, standardization in ADO.NET, 278 HttpBrowserCapabilities, 685 web applications and DataSet, 279 AdCreated, AdRotator event, 177 XML integration, 280 Add method building shopping carts, 443–44, 446–51 database, 329 multiple selection, 451 hashtable, 355–56 overview, 443–44 Add Web Reference dialog box, 846 shopping cart classes, 444, 446–47 AddArc method, 793 test page, 447–51 AddAttribute method, HtmlTextWriter, 674 classes, 276, 280–81 941 942 ■INDEX Command and DataReader classes, advanced credential storage, 562–74, 576–77 285–94, 296–300 adding information to authentication calling stored procedures, 298–300 ticket, 573–74, 576–77 command basics, 285–86 adding user-specific data to credential DataReader class, 286–87 store, 573–74 ExecuteNonQuery( ) method, 293 attaching user-specific data, 576–77 ExecuteReader( ) method and limits of UserData property, 577 DataReader, 287–92 overview, 573 ExecuteScalar( ) method, 292–93 hashing passwords for storage, 562–65 overview, 285 creating password hashes, 564–65 SQL injection attacks, 294, 296–97 hashing passwords for web.config, using parameterized commands, 563–64 297–98 overview, 562–63 Connection class, 281–85 overview, 562 connection-based classes, 281 using other credentials stores, 565–73 data binding structures, 350 interface for credential stores, 566–67 data providers, 274–75, 289, 292, 294 overview, 565–66 database component, 301–2, 304–5, storing credentials in database, 570–73 309–10 storing credentials in XML file, 567–70 overview, 301–2 advanced digest Windows authentication, sample database component, 302, 586–87 304–5, 308 AdvertisementFile, AdRotator, 177–78 testing components, 308–10 algorithms, hash, 552, 562–63, 569 DataSet mapping, 421–23 AllowCustomPaging property, DataGrid disconnected access model, 311, 333 control, 395 JOIN queries vs. DataRelation, 323 allowOverride, Web.Config location, 196 overview, 273 AllowPaging property, DataGrid control, 393, serving images from Database, 416–21 395 displaying binary data, 416–17 AllowSorting property, DataGrid control, integrating images with other content, 387–88 419–21 AllowWeekendSelection property, 699 overview, 416 AlternateText, AdvertisementFile, 177 reading binary data efficiently, 418 alternating item template, 712 transactions, 407–15 AlternatingItemStyle property, 370–71, 386 and ASP.NET applications, 408–12 AlternatingItemTemplate template, 363, 365, isolation levels, 412–14 367 nested transactions, 415 ampersand (&) character, QueryString overview, 407–8 encryption, 635 savepoints, 414–15 anonymous access, 589, 596, 603, 617 using transactions with DataAdapter, anonymous users, denying access to, 553, 415 590 typed DataSets, 424–28, 431–32 antialiasing, 789 creating typed in Visual Studio .NET, AOL property, 685 426–27 Apache Foundation, digest authentication, creating typed with XSD.exe, 428 587 dissecting, 428, 430 APIs, 547 overview, 424–25 App.config, 844 using typed DataSet, 431–32 AppendHeader, PDF files, 619 and XML, 484–91 Application collection, 518 accessing DataSet as, 488–89 application directories, 31–32 converting DataSet to, 485–87 application domains, 33, 183–85 executing XML query, 490–91 application event, 188–92 overview, 484–85 application integration, 454, 456 AdRotator control, 176–77 application lifetime, 185 advanced breakpoints, 82 Application object, 118 application pool, 34 ■INDEX 943 Application property, 833 overview, 31 application server role, IIS, 41–42 process recycling, 35, 38 application state, 253–54, 515, 628 processing requests, 32, 35 application update, 185–86 URL request, 31–32 Application_Error method, in global.asax, ARGB color values, 152 190 ArrayList class, 350, 446 ApplicationConfiguration dialog box, 617 Arrays data type, 828 application-level traces, 127–28 AS keyword, 422 ApplicationPath method, Request object, 122 .asax file extension, 47 ApplicationPath property, HttpRequest ASC sorting attribute, 325 object, 119 .ascx extension, 652, 654 applications, ASP.NET, 183–206, 208–30 .ascx file, 655–56, 666, 670 anatomy of, 183–86 .ascx file extension, 47, 64 ASP.NET configuration, 192–205 .ascx text file, 654 configuration settings, 197–205 .ascx user control markup file, 666 machine.config file, 192–94 .ashx file extension, 47, 216–17 overview, 192 .asmx file, 831, 840 web.config file, 194–97 .asmx file extension, 47, 65, 184 deploying, 227–30 asp prefix, 18, 151 extending HTTP pipeline, 210–27 ASP vs. ASP.NET, 27–28 configuring custom HTTP Handler, ASPNET accounts, 35, 529, 595, 608 214–16 ASP.NET pages. See pages, ASP.NET creating advanced HTTP handler, aspnet_isapi.dll, 31 217–20 aspnet_regiis utility, 48, 51 creating custom HTTP handler, 213–14 .aspx (web form) files, 652 creating custom HTTP module, 220–22 .aspx file extension, 47, 64, 75, 184, 652, 654 extending configuration file structure, .aspx files, 608, 762, 798 223–27 .aspx page, 670 HTTP handlers and HTTP modules, assemblies, 6, 8–9, 66, 79, 186 211–13 assembly cache, global. See GAC overview, 210–11 Assembly Name project setting, 79 registering HTTP handlers without asterisk (*) character, XPath expression, 476 configuring IIS, 216–17 ASXII encoding, 513 global.asax application file, 186, 188–92 asymmetric encryption, 538–40 application events, 188–90 asymmetric key pair, 538 demonstrating application events, AsymmetricAlgorithm class, Cryptography, 191–92 622 overview, 186, 188 asynchronous calls, 909–11, 913–19 .NET components, 205–6, 208–10 asynchronous services, 918–19 overview, 183 concurrent asynchronous calls, 914–15 and transactions, 408–12 overview, 909–10 client-initiated ADO.NET transactions, proxy class, 910–11 410, 412 responsive Windows clients, 916–18 overview, 408–9 simple asynchronous call, 911–14 stored procedure transactions, 409–10 asynchronous proxy class methods, 845 applications, certified, 593 asynchronous thread, 13, 219 applications, web. See web applications at sign (@) character, XPath expression, 477 application-specific key, 628–29 attacks, script injection, 131–32 appsettingbaseurl, <baseURL> parameter, AttributeCount property, XmlTextReader, 472 Wsdl.exe, 840 attributes, 60, 139–41, 149 <appSettings> element, 203–5, 844 design-time attributes, 727–33 appsettingurkey, <key> parameter, Wsdl.exe, attributes and inheritance, 732 840 overview, 727–28 architecture of ASP.NET, 31, 38 Properties window, 728–31 account security with worker process, 35 Toolbox icon, 732–33 ASP.NET execution model, 38 File and Directory classes, 498–500 944 ■INDEX Authenticate, 563–68, 576 B Authenticate event, 533 back reference, regular expressions, 701 Authenticate Request event, 532–33 BackColor property, 149, 165 authenticated users, 602–3 BackgroundSounds property, 685 AuthenticateRequest event, 188, 221, 533, BackupOperator enumeration, 644–45, 647 WindowsBuiltInRole, 592 authentication, 16, 124, 184, 188, 197, 202, base tag, HTML, WebControl class, 679–80 528, 532–34. See also forms Base64 string, 100, 103, 241, 586, 635 authentication BaseValidator class, 164–65 built-in authentication modules, 533–34 basic Windows authentication, 585–86 database, 281–82 Begin, 410, 412, 415 overview, 532–33 BeginEdit, DataRow, 315, 332, 334 process, 527–28 BeginGetEmployeesCount method, 845 authentication mode, 646 BeginPageLoad function, 762–63 <authentication> element, 202, 533–34 BeginRequest, Application event, 188 AuthenticationType property, 536, 644 BeginTransaction, 283, 410–15 authorization, 16, 184, 197, 202, 527, 529, benchmarks, 10 601–19 Berners-Lee, Tim, 3 authorization checks in code, 609–11 Beta property, 685 overview,