Shulou(Shulou.com)06/03 Report--

This article mainly shows you the "ASP.NET Session, http, web development principles, xss vulnerability example analysis", the content is easy to understand, clear, hope to help you solve your doubts, the following let the editor lead you to study and learn "Session, http, web development principles in ASP.NET, xss vulnerability example analysis" this article.

1 、 Session

2. Verification code

YZM.ashx

The copy code is as follows:

Using System

Using System.Web

Public class YZM: IHttpHandler, System.Web.SessionState.IRequiresSessionState

{

Public void ProcessRequest (HttpContext context) {

Context.Response.ContentType = "image/JPEG"

Using (System.Drawing.Bitmap bitImage = new System.Drawing.Bitmap (130,100))

{

/ / set the canvas

Using (System.Drawing.Graphics g = System.Drawing.Graphics.FromImage (bitImage))

{

/ / Random number

Random my_random = new Random ()

Int num_01 = my_random.Next

Int num_02 = my_random.Next

Int result = num_01 + num_02

String num_string01 = num_01.ToString ()

String num_string02 = num_02.ToString ()

String result_string = result.ToString ()

/ / Save to the server's sessionid

HttpContext.Current.Session ["YZM"] = result_string

/ / set text

G.DrawString (num_string01 + "+" + num_string02+ "?", new System.Drawing.Font (Song style, 20), System.Drawing.Brushes.Red, new System.Drawing.PointF (0,0))

/ / Save to the output stream

BitImage.Save (context.Response.OutputStream, System.Drawing.Imaging.ImageFormat.Jpeg)

}

}

}

Public bool IsReusable {

Get {

Return false

}

}

}

YZM.aspx

The copy code is as follows:

3. Http protocol

4. Button to achieve the deletion effect of Standard Brothers. Hyperlink to submit the form.

5. Web development principles

6. XSS vulnerabilities

Label similar control: Literal control, if the value of text in the property is hah, it can be embedded in the link.

You can set the mode property to Encode

7. Virtual directory ~: used in ASP.net, always starts under the application root directory

These are all the contents of this article entitled "Session, http, web Development principles in ASP.NET, sample Analysis of xss vulnerabilities". Thank you for reading! I believe we all have a certain understanding, hope to share the content to help you, if you want to learn more knowledge, welcome to follow the industry information channel!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.