Join the p2p.wrox.com. Wrox Programmer to Programmer. Professional ASP.NET 4. in C# and VB. Bill Evjen, Scott Hanselman, Devin Rader

Transcription

1 Join the p2p.wrox.com Wrox Programmer to Programmer Professional ASP.NET 4 in C# and VB Bill Evjen, Scott Hanselman, Devin Rader

2 Programmer to Programmer Get more out of wrox.com Interact Take an active role online by participating in our P2P p2p.wrox.com Wrox Online Library Hundreds of our books are available online through Books24x7.com Wrox Blox Download short informational pieces and code to keep you up to date and out of trouble! Join the Community Sign up for our free monthly newsletter at newsletter.wrox.com Browse Ready for more Wrox? We have books and e-books available on.net, SQL Server, Java, XML, Visual Basic, C#/ C++, and much more! Contact Us. We always like to get feedback from our readers. Have a book idea? Need community support? Let us know by ing wrox-partnerwithus@wrox.com

3 PROFESSIONAL ASP.NET 4 INTRODUCTION xxxix CHAPTER 1 Application and Page Frameworks CHAPTER 2 ASP.NET Server Controls and Client-Side Scripts CHAPTER 3 ASP.NET Web Server Controls CHAPTER 4 Validation Server Controls CHAPTER 5 Working with Master Pages CHAPTER 6 Themes and Skins CHAPTER 7 Data Binding CHAPTER 8 Data Management with ADO.NET CHAPTER 9 Querying with LINQ CHAPTER 10 Working with XML and LINQ to XML CHAPTER 11 Introduction to the Provider Model CHAPTER 12 Extending the Provider Model CHAPTER 13 Site Navigation CHAPTER 14 Personalization CHAPTER 15 Membership and Role Management CHAPTER 16 Portal Frameworks and Web Parts CHAPTER 17 HTML and CSS Design with ASP.NET CHAPTER 18 ASP.NET AJAX CHAPTER 19 ASP.NET AJAX Control Toolkit CHAPTER 20 Security CHAPTER 21 State Management CHAPTER 22 Caching CHAPTER 23 Debugging and Error Handling CHAPTER 24 File I/O and Streams CHAPTER 25 User and Server Controls CHAPTER 26 Modules and Handlers

4 CHAPTER 27 ASP.NET MVC CHAPTER 28 Using Business Objects CHAPTER 29 ADO.NET Entity Framework CHAPTER 30 ASP.NET Dynamic Data CHAPTER 31 Working with Services CHAPTER 32 Building Global Applications CHAPTER 33 Confi guration CHAPTER 34 Instrumentation CHAPTER 35 Administration and Management CHAPTER 36 Packaging and Deploying ASP.NET Applications APPENDIX A Migrating Older ASP.NET Projects APPENDIX B ASP.NET Ultimate Tools APPENDIX C Silverlight 3 and ASP.NET APPENDIX D Dynamic Types and Languages APPENDIX E ASP.NET Online Resources INDEX

5 PROFESSIONAL ASP.NET 4

6

7 PROFESSIONAL ASP.NET 4 IN C# AND VB Bill Evjen Scott Hanselman Devin Rader

8 Professional ASP.NET 4: In C# and VB Published by Wiley Publishing, Inc Crosspoint Boulevard Indianapolis, IN Copyright 2010 by Wiley Publishing, Inc., Indianapolis, Indiana Published simultaneously in Canada ISBN: Manufactured in the United States of America No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923, (978) , fax (978) Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201) , fax (201) , or online at Limit of Liability/Disclaimer of Warranty: The publisher and the author make no representations or warranties with respect to the accuracy or completeness of the contents of this work and specifically disclaim all warranties, including without limitation warranties of fitness for a particular purpose. No warranty may be created or extended by sales or promotional materials. The advice and strategies contained herein may not be suitable for every situation. This work is sold with the understanding that the publisher is not engaged in rendering legal, accounting, or other professional services. If professional assistance is required, the services of a competent professional person should be sought. Neither the publisher nor the author shall be liable for damages arising herefrom. The fact that an organization or Web site is referred to in this work as a citation and/or a potential source of further information does not mean that the author or the publisher endorses the information the organization or Web site may provide or recommendations it may make. Further, readers should be aware that Internet Web sites listed in this work may have changed or disappeared between when this work was written and when it is read. For general information on our other products and services please contact our Customer Care Department within the United States at (877) , outside the United States at (317) or fax (317) Wiley also publishes its books in a variety of electronic formats. Some content that appears in print may not be available in electronic books. Library of Congress Control Number: Trademarks: Wiley, the Wiley logo, Wrox, the Wrox logo, Programmer to Programmer, and related trade dress are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates, in the United States and other countries, and may not be used without written permission. All other trademarks are the property of their respective owners. Wiley Publishing, Inc., is not associated with any product or vendor mentioned in this book.

9 To Tuija, always. Bill Evjen To Momo and the boys. Toot! Scott Hanselman

10

11 ABOUT THE AUTHORS BILL EVJEN is an active proponent of.net technologies and community-based learning initiatives for.net. He has been actively involved with.net since the first bits were released in In the same year, Bill founded the St. Louis.NET User Group ( one of the world s first such groups. Bill is also the founder and former executive director of the International.NET Association ( which represents more than 500,000 members worldwide. Based in St. Louis, Missouri, Bill is an acclaimed author and speaker on ASP.NET and Services. He has authored or coauthored more than 20 books including Professional C# 2010, Professional VB 2008, ASP.NET Professional Secrets, XML Web Services for ASP.NET, and Web Services Enhancements: Understanding the WSE for Enterprise Applications (all published by Wiley). In addition to writing, Bill is a speaker at numerous conferences, including DevConnections, VSLive!, and TechEd. Along with these items, Bill works closely with Microsoft as a Microsoft Regional Director and an MVP. Bill is the Global Head of Platform Architecture for Thomson Reuters, Lipper, the international news and financial services company ( He graduated from Western Washington University in Bellingham, Washington, with a Russian language degree. When he isn t tinkering on the computer, he can usually be found at his summer house in Toivakka, Finland. You can reach Bill on Twitter SCOTT HANSELMAN works for Microsoft as a Principal Program Manager Lead in the Server and Tools Online Group, aiming to spread the good word about developing software, most often on the Microsoft stack. Before this, Scott was the Chief Architect at Corillian, an efinance enabler, for 6+ years, and before Corillian, he was a Principal Consultant at Microsoft Gold Partner for 7 years. He was also involved in a few things like the MVP and RD programs and will speak about computers (and other passions) whenever someone will listen to him. He blogs at podcasts at and runs a team that contributes to and Follow Scott on DEVIN RADER works at Infragistics where he focuses on delivering great experiences to developers using their controls. He s done work on all of the.net platforms, but most recently has been focused on Web technologies ASP.NET and Silverlight. As a co-founder of the St. Louis.NET User group and a former INETA board member, and a member of the Central New Jersey.NET user group, he s an active supporter of the.net developer community. He s also co-author or technical editor of numerous books on.net, including Wrox s Silverlight 3 Programmer s Reference. Follow Devin on

12 ABOUT THE TECHNICAL EDITORS CARLOS FIGUEROA has been developing and designing Web solutions for the last 8 years, participating in international projects for the pharmaceutical industry, banking, commercial air transportation, and the government. During these years, Carlos has been deeply involved as an early adopter of Microsoft Web development technologies, such as ASP.NET and Silverlight. He has been awarded Microsoft Most Valuable Professional for the last 5 years and holds the MCAD certification. Carlos is a Senior Software Developer at Oshyn, Inc. ( a company specialized on delivering innovative business solutions for the web, mobile devices and emerging technology platforms. At Oshyn, Carlos is dedicated to help some of the most recognizable brands in the world to achieve technology success. You can reach Carlos at cfigueroa1982@hotmail.com or follow him on ANDREW MOORE is a graduate of Purdue University Calumet in Hammond, Indiana, and has been developing software since 1998 for radar systems, air traffic management, discrete-event simulation, and business communications applications using C, C++, C#, and Java on the Windows, UNIX, and Linux platforms. Andrew is also a contributor to the Wrox Blox article series. He is currently working as a Senior Software Engineer at Interactive Intelligence, Inc., in Indianapolis, Indiana, developing server-side applications for a multimedia unified business communications platform. Andrew lives in Indiana with his wife Barbara and children Sophia and Andrew.

13 CREDITS ACQUISITIONS EDITOR Paul Reese SENIOR PROJECT EDITOR Kevin Kent TECHNICAL EDITORS Carlos Figueroa Andrew Moore PRODUCTION EDITOR Daniel Scribner COPY EDITOR Paula Lowell EDITORIAL DIRECTOR Robyn B. Siesky EDITORIAL MANAGER Mary Beth Wakefi eld ASSOCIATE DIRECTOR OF MARKETING David Mayhew PRODUCTION MANAGER Tim Tate VICE PRESIDENT AND EXECUTIVE GROUP PUBLISHER Richard Swadley VICE PRESIDENT AND EXECUTIVE PUBLISHER Barry Pruett ASSOCIATE PUBLISHER Jim Minatel PROJECT COORDINATOR, COVER Lynsey Stanford PROOFREADERS Word One INDEXER J & J Indexing COVER DESIGNER Michael E. Trent COVER IMAGE Jon Feingersh Photography Inc / Blend Images / Jupiter Images

14

15 ACKNOWLEDGMENTS THANKS TO KEVIN KENT, PAUL REESE, AND JIM MINATEL for the opportunity to work on such a great book. In addition to my co-authors, I would like to thank my family for putting up with all the writing. Thank you Tuija, Sofia, Henri, and Kalle! Bill Evjen

16

17 CONTENTS INTRODUCTION xxxix CHAPTER 1: APPLICATION AND PAGE FRAMEWORKS 1 Application Location Options 1 Built-in Web Server 2 IIS 3 FTP 3 Web Site Requiring FrontPage Extensions 4 The ASP.NET Page Structure Options 4 Inline Coding 6 Code-Behind Model 7 ASP.NET 4 Page Directives ASP.NET Page Events 19 Dealing with Postbacks 20 Cross-Page Posting 21 ASP.NET Application Folders 26 App_Code Folder 27 App_Data Folder 30 App_Themes Folder 31 App_GlobalResources Folder 31 App_LocalResources Folder 31 App_WebReferences Folder 31 App_Browsers Folder 31 Compilation 32 Build Providers 35

18 CONTENTS Using the Built-in Build Providers 36 Using Your Own Build Providers 36 Global.asax 41 Working with Classes Through Visual Studio Summary 47 CHAPTER 2: ASP.NET SERVER CONTROLS AND CLIENT-SIDE SCRIPTS 49 ASP.NET Server Controls 49 Types of Server Controls 50 Building with Server Controls 51 Working with Server Control Events 53 Applying Styles to Server Controls 54 Examining the Controls Common Properties 54 Changing Styles Using Cascading Style Sheets 56 CSS Changes in ASP.NET 4 58 HTML Server Controls 59 Looking at the HtmlControl Base Class 60 Looking at the HtmlContainerControl Class 61 Looking at All the HTML Classes 61 Using the HtmlGenericControl Class 62 Identifying ASP.NET Server Controls 63 Manipulating Pages and Server Controls with JavaScript 65 Using Page.ClientScript.RegisterClientScriptBlock 66 Using Page.ClientScript.RegisterStartupScript 68 Using Page.ClientScript.RegisterClientScriptInclude 69 Client-Side Callback 69 Comparing a Typical Postback to a Callback 70 Using the Callback Feature A Simple Approach 72 Using the Callback Feature with a Single Parameter 75 Using the Callback Feature A More Complex Example 78 Summary 83 CHAPTER 3: ASP.NET WEB SERVER CONTROLS 85 An Overview of Web Server Controls 85 The Label Server Control 86 The Literal Server Control 88 The TextBox Server Control 88 Using the Focus() Method 89 Using AutoPostBack 89 Using AutoCompleteType 90 xvi

19 CONTENTS The Button Server Control 91 The CausesValidation Property 91 The CommandName Property 92 Buttons That Work with Client-Side JavaScript 93 The LinkButton Server Control 94 The ImageButton Server Control 95 The HyperLink Server Control 96 The DropDownList Server Control 96 Visually Removing Items from a Collection 98 The ListBox Server Control 100 Allowing Users to Select Multiple Items 100 An Example of Using the ListBox Control 100 Adding Items to a Collection 102 The CheckBox Server Control 102 How to Determine Whether Check Boxes Are Checked 103 Assigning a Value to a Check Box 104 Aligning Text Around the Check Box 104 The CheckBoxList Server Control 104 The RadioButton Server Control 106 The RadioButtonList Server Control 108 Image Server Control 109 Table Server Control 110 The Calendar Server Control 112 Making a Date Selection from the Calendar Control 112 Choosing a Date Format to Output from the Calendar 113 Making Day, Week, or Month Selections 114 Working with Date Ranges 115 Modifying the Style and Behavior of Your Calendar 116 AdRotator Server Control 119 The Xml Server Control 121 Panel Server Control 122 The PlaceHolder Server Control 124 BulletedList Server Control 124 HiddenField Server Control 129 FileUpload Server Control 130 Uploading Files Using the FileUpload Control 130 Giving ASP.NET Proper Permissions to Upload Files 132 Understanding File Size Limitations 133 Uploading Multiple Files from the Same Page 134 Placing the Uploaded File into a Stream Object 137 Moving File Contents from a Stream Object to a Byte Array 137 xvii

20 CONTENTS MultiView and View Server Controls 138 Wizard Server Control 141 Customizing the Side Navigation 142 Examining the AllowReturn Attribute 143 Working with the StepType Attribute 143 Adding a Header to the Wizard Control 143 Working with the Wizard s Navigation System 144 Utilizing Wizard Control Events 145 Using the Wizard Control to Show Form Elements 146 ImageMap Server Control 150 Chart Server Control 152 Summary 155 CHAPTER 4: VALIDATION SERVER CONTROLS 157 Understanding Validation 157 Client-Side versus Server-Side Validation 158 ASP.NET Validation Server Controls 159 Validation Causes 160 The RequiredFieldValidator Server Control 160 The CompareValidator Server Control 164 The RangeValidator Server Control 167 The RegularExpressionValidator Server Control 171 The CustomValidator Server Control 172 The ValidationSummary Server Control 176 Turning Off Client-Side Validation 179 Using Images and Sounds for Error Notifications 180 Working with Validation Groups 181 Summary 185 CHAPTER 5: WORKING WITH MASTER PAGES 187 Why Do You Need Master Pages? 187 The Basics of Master Pages 189 Coding a Master Page 190 Coding a Content Page 192 Mixing Page Types and Languages 196 Specifying Which Master Page to Use 197 Working with the Page Title 198 Working with Controls and Properties from the Master Page 199 Specifying Default Content in the Master Page 205 Programmatically Assigning the Master Page 207 xviii

21 CONTENTS Nesting Master Pages 207 Container-Specific Master Pages 211 Event Ordering 212 Caching with Master Pages 213 ASP.NET AJAX and Master Pages 214 Summary 216 CHAPTER 6: THEMES AND SKINS 217 Using ASP.NET Themes 217 Applying a Theme to a Single ASP.NET Page 217 Applying a Theme to an Entire Application 219 Removing Themes from Server Controls 219 Removing Themes from Web Pages 220 Understanding Themes When Using Master Pages 221 Understanding the StyleSheetTheme Attribute 221 Creating Your Own Themes 222 Creating the Proper Folder Structure 222 Creating a Skin 222 Including CSS Files in Your Themes 224 Having Your Themes Include Images 227 Defining Multiple Skin Options 229 Programmatically Working with Themes 231 Assigning the Page s Theme Programmatically 231 Assigning a Control s SkinID Programmatically 231 Themes, Skins, and Custom Controls 232 Summary 235 CHAPTER 7: DATA BINDING 237 Data Source Controls 237 SqlDataSource Control 239 AccessDataSource Control 247 LinqDataSource Control 247 EntityDataSource Control 253 XmlDataSource Control 255 ObjectDataSource Control 256 SiteMapDataSource Control 259 Data Source Control Caching 259 Storing Connection Information 260 Using Bound List Controls with Data Source Controls 262 GridView 262 xix

22 CONTENTS Editing GridView Row Data 275 Deleting GridView Data 281 Other GridView Formatting Features 283 DetailsView 283 Inserting, Updating, and Deleting Data Using DetailsView 287 ListView 289 FormView 296 Other Databound Controls 300 TreeView 300 AdRotator 301 Menu 301 Inline Data-Binding Syntax 302 Data-Binding Syntax 302 XML Data Binding 303 Expressions and Expression Builders 303 Summary 308 CHAPTER 8: DATA MANAGEMENT WITH ADO.NET 309 Basic ADO.NET Features 310 Common ADO.NET Tasks 310 Basic ADO.NET Namespaces and Classes 314 Using the Connection Object 315 Using the Command Object 317 Using the DataReader Object 318 Using DataAdapter 320 Using Parameters 322 Understanding DataSet and DataTable 325 Using Oracle as Your Database with ASP.NET 329 The DataList Server Control 330 Looking at the Available Templates 331 Working with ItemTemplate 331 Working with Other Layout Templates 334 Working with Multiple Columns 336 The ListView Server Control 336 Connecting the ListView to a Database 337 Creating the Layout Template 338 Creating the ItemTemplate 340 Creating the EditItemTemplate 341 Creating the EmptyItemTemplate 341 Creating the InsertItemTemplate 341 Viewing the Results 342 xx

23 CONTENTS Using Visual Studio for ADO.NET Tasks 344 Creating a Connection to the Data Source 344 Working with a Dataset Designer 345 Using the CustomerOrders DataSet 348 Asynchronous Command Execution 352 Asynchronous Methods of the SqlCommand Class 352 IAsyncResult Interface 353 AsyncCallback 354 WaitHandle Class 354 Approaches of Asynchronous Processing in ADO.NET 355 Canceling Asynchronous Processing 370 Asynchronous Connections 370 Summary 370 CHAPTER 9: QUERYING WITH LINQ 371 LINQ to Objects 371 Understanding Traditional Query Methods 371 Replacing Traditional Queries with LINQ 378 Data Grouping 384 Using Other LINQ Operators 385 Making LINQ Joins 385 Paging Using LINQ 386 LINQ to XML 387 Joining XML Data 390 LINQ to SQL 391 Making Insert, Update, and Delete Queries through LINQ 399 Extending LINQ 403 Summary 403 CHAPTER 10: WORKING WITH XML AND LINQ TO XML 405 The Basics of XML 406 The XML InfoSet 408 XSD XML Schema Defi nition 409 Editing XML and XML Schema in Visual Studio XmlReader and XmlWriter 413 Using XDocument Rather Than XmlReader 415 Using Schema with XmlTextReader 416 Validating Against a Schema Using an XDocument 417 Including NameTable Optimization 419 Retrieving.NET CLR Types from XML 420 xxi

24 CONTENTS ReadSubtree and XmlSerialization 422 Creating CLR Objects from XML with LINQ to XML 423 Creating XML with XmlWriter 424 Creating XML with LINQ for XML 426 Improvements for XmlReader and XmlWriter 429 XmlDocument and XPathDocument 429 Problems with the DOM 429 XPath, the XPathDocument, and XmlDocument 430 DataSets 434 Persisting DataSets to XML 434 XmlDataDocument 435 The XmlDataSource Control 437 XSLT 441 XslCompiledTransform 442 XSLT Debugging 445 Databases and XML 446 FOR XML AUTO 446 SQL Server and the XML Data Type 451 Summary 456 CHAPTER 11: INTRODUCTION TO THE PROVIDER MODEL 457 Understanding the Provider 458 The Provider Model in ASP.NET Setting Up Your Provider to Work with Microsoft SQL Server 7.0, 2000, 2005, or Membership Providers 466 Role Providers 469 The Personalization Provider 473 The SiteMap Provider 474 SessionState Providers 476 Web Event Providers 478 Confi guration Providers 485 The Web Parts Provider 487 Configuring Providers 489 Summary 489 CHAPTER 12: EXTENDING THE PROVIDER MODEL 491 Providers Are One Tier in a Larger Architecture 491 Modifying Through Attribute-Based Programming 492 Simpler Password Structures Through the SqlMembershipProvider 492 Stronger Password Structures Through the SqlMembershipProvider 495 xxii

25 CONTENTS Examining ProviderBase 496 Building Your Own Providers 497 Creating the CustomProviders Application 498 Constructing the Class Skeleton Required 499 Creating the XML User Data Store 502 Defi ning the Provider Instance in the web.confi g File 502 Not Implementing Methods and Properties of the MembershipProvider Class 503 Implementing Methods and Properties of the MembershipProvider Class 504 Using the XmlMembershipProvider for User Login 510 Extending Pre-Existing Providers 511 Limiting Role Capabilities with a New LimitedSqlRoleProvider Provider 511 Using the New LimitedSqlRoleProvider Provider 515 Summary 518 CHAPTER 13: SITE NAVIGATION 519 XML-Based Sitemaps 520 SiteMapPath Server Control 521 The PathSeparator Property 523 The PathDirection Property 525 The ParentLevelsDisplayed Property 525 The ShowToolTips Property 526 The SiteMapPath Control s Child Elements 526 TreeView Server Control 527 Identifying the TreeView Control s Built-In Styles 530 Examining the Parts of the TreeView Control 531 Binding the TreeView Control to an XML File 532 Selecting Multiple Options in a TreeView 534 Specifying Custom Icons in the TreeView Control 537 Specifying Lines Used to Connect Nodes 538 Working with the TreeView Control Programmatically 540 Menu Server Control 545 Applying Different Styles to the Menu Control 546 Using Menu Events 550 Binding the Menu Control to an XML File 551 SiteMap Data Provider 552 ShowStartingNode 552 StartFromCurrentNode 553 StartingNodeOffset 554 StartingNodeUrl 555 SiteMap API 555 xxiii

26 CONTENTS URL Mapping 557 Sitemap Localization 558 Structuring the Web.sitemap File for Localization 558 Making Modifications to the Web.confi g File 559 Creating Assembly Resource (.resx) Files 560 Testing the Results 561 Security Trimming 561 Setting Up Role Management for Administrators 562 Setting Up the Administrators Section 563 Enabling Security Trimming 564 Nesting SiteMap Files 566 Summary 567 CHAPTER 14: PERSONALIZATION 569 The Personalization Model 570 Creating Personalization Properties 570 Adding a Simple Personalization Property 570 Using Personalization Properties 571 Adding a Group of Personalization Properties 574 Using Grouped Personalization Properties 575 Defi ning Types for Personalization Properties 576 Using Custom Types 576 Providing Default Values 579 Making Personalization Properties Read-Only 579 Anonymous Personalization 579 Enabling Anonymous Identification of the End User 579 Working with Anonymous Identifi cation 582 Anonymous Options for Personalization Properties 583 Warnings about Anonymous User Profi le Storage 583 Programmatic Access to Personalization 584 Migrating Anonymous Users 584 Personalizing Profi les 585 Determining Whether to Continue with Automatic Saves 586 Personalization Providers 587 Working with SQL Server Express Edition 587 Working with Microsoft s SQL Server 7.0/2000/2005/ Using Multiple Providers 590 Managing Application Profiles 590 Properties of the Profi lemanager Class 591 Methods of the Profi lemanager Class 591 Building the Profi lemanager.aspx Page 592 xxiv

27 CONTENTS Examining the Profi lemanager.aspx Page s Code 594 Running the Profi lemanager.aspx Page 595 Summary 596 CHAPTER 15: MEMBERSHIP AND ROLE MANAGEMENT 597 ASP.NET 4 Authentication 598 Setting Up Your Web Site for Membership 598 Adding Users 600 Asking for Credentials 613 Working with Authenticated Users 620 Showing the Number of Users Online 622 Dealing with Passwords 623 ASP.NET 4 Authorization 627 Using the LoginView Server Control 627 Setting Up Your Web Site for Role Management 630 Adding and Retrieving Application Roles 632 Deleting Roles 634 Adding Users to Roles 635 Getting All the Users of a Particular Role 635 Getting All the Roles of a Particular User 637 Removing Users from Roles 638 Checking Users in Roles 638 Understanding How Roles Are Cached 639 Using the Web Site Administration Tool 640 Public Methods of the Membership API 640 Public Methods of the Roles API 641 Summary 642 CHAPTER 16: PORTAL FRAMEWORKS AND WEB PARTS 643 Introducing Web Parts 643 Building Dynamic and Modular Web Sites 645 Introducing the WebPartManager Control 645 Working with Zone Layouts 646 Understanding the WebPartZone Control 649 Allowing the User to Change the Mode of the Page 651 Modifying Zones 660 Working with Classes in the Portal Framework 666 Creating Custom Web Parts 669 Connecting Web Parts 674 Building the Provider Web Part 675 xxv

28 CONTENTS Building the Consumer Web Part 677 Connecting Web Parts on an ASP.NET Page 679 Understanding the Difficulties in Dealing with Master Pages When Connecting Web Parts 681 Summary 682 CHAPTER 17: HTML AND CSS DESIGN WITH ASP.NET 683 Caveats 684 HTML and CSS Overview 684 Creating Style Sheets 685 CSS Rules 687 CSS Inheritance 694 Element Layout and Positioning 695 Working with HTML and CSS in Visual Studio 702 Working with CSS in Visual Studio 703 Managing Relative CSS Links in Master Pages 706 Styling ASP.NET Controls 706 Summary 708 CHAPTER 18: ASP.NET AJAX 709 Understanding the Need for AJAX 709 Before AJAX 710 AJAX Changes the Story 710 ASP.NET AJAX and Visual Studio Client-Side Technologies 713 Server-Side Technologies 714 Developing with ASP.NET AJAX 714 Building ASP.NET AJAX Applications 714 Building a Simple ASP.NET Page without AJAX 716 Building a Simple ASP.NET Page with AJAX 718 ASP.NET AJAX s Server-Side Controls 722 The ScriptManager Control 723 The ScriptManagerProxy Control 725 The Timer Control 726 The UpdatePanel Control 727 The UpdateProgress Control 731 Using Multiple UpdatePanel Controls 733 Working with Page History 737 Script Combining 741 Summary 745 xxvi

29 CONTENTS CHAPTER 19: ASP.NET AJAX CONTROL TOOLKIT 747 Downloading and Installing the AJAX Control Toolkit 749 The ASP.NET AJAX Controls 750 ASP.NET AJAX Control Toolkit Extenders 751 AlwaysVisibleControlExtender 751 AnimationExtender 753 AutoCompleteExtender 755 CalendarExtender 757 CollapsiblePanelExtender 758 ColorPickerExtender 760 Confi rmbuttonextender and ModalPopupExtender 761 DragPanelExtender 763 DropDownExtender 764 DropShadowExtender 766 DynamicPopulateExtender 768 FilteredTextBoxExtender 772 HoverMenuExtender 772 ListSearchExtender 774 MaskedEditExtender and MaskedEditValidator 774 MutuallyExclusiveCheckBoxExtender 776 NumericUpDownExtender 778 PagingBulletedListExtender 778 PopupControlExtender 780 ResizableControlExtender 781 RoundedCornersExtender 783 SliderExtender and MultiHandleSliderExtender 784 SlideShowExtender 785 TextBoxWatermarkExtender 788 ToggleButtonExtender 789 UpdatePanelAnimationExtender 790 ValidatorCalloutExtender 791 ASP.NET AJAX Control Toolkit Server Controls 793 Accordion Control 793 CascadingDropDown 795 NoBot Control 798 PasswordStrength Control 799 Rating Control 800 TabContainer Control 801 Summary 803 xxvii

30 CONTENTS CHAPTER 20: SECURITY 805 Applying Authentication Measures 806 The <authentication> Node 806 Windows-Based Authentication 807 Forms-Based Authentication 813 Passport Authentication 821 Authenticating Specific Files and Folders 822 Programmatic Authorization 822 Working with User.Identity 823 Working with User.IsInRole() 824 Pulling More Information with WindowsIdentity 824 Identity and Impersonation 827 Securing Through IIS 828 IP Address and Domain Name Restrictions 829 Working with File Extensions 829 Using the ASP.NET MMC Snap-In 832 Using the IIS 7.0 Manager 832 Summary 833 CHAPTER 21: STATE MANAGEMENT 835 Your Session State Choices 835 Understanding the Session Object in ASP.NET 838 Sessions and the Event Model 838 Confi guring Session State Management 839 In-Process Session State 840 Out-of-Process Session State 846 SQL-Backed Session State 851 Extending Session State with Other Providers 854 Cookieless Session State 855 Choosing the Correct Way to Maintain State 856 The Application Object 856 QueryStrings 857 Cookies 857 PostBacks and Cross-Page PostBacks 857 Hidden Fields, ViewState, and ControlState 859 Using HttpContext.Current.Items for Very Short-Term Storage 863 Summary 864 xxviii