Web Development

Ask something
Discussion Locked

ASP.net, is it worth it?

0 helpful
15 replies

by blj

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

When I first had a look at the ASP.Net, I was overwhelmed by its features. The first ever feature I planned to implement in the .Net is a simple page counter which stores the counter in a simple txt file and show the counter in a dynamic image. Its not too much to ask ASP.net, given its strength.
Reality is a different story, After uploading the code:
1. First error I got is, app does not have required permission to update txt file which stores the counter.
2. I raised this issue with my shared server host, but no luck and they want me to pay ?50 to do it.
3. I tried to use the impersonate feature in web.config to use my allocated username and password in that server, but ASP.net refused to compile because my username didnt have enough permission to create the files for its tempDirectory.
4. I removed the web.config, it all compiled well but still had the problem of accessing the txt file.
5. I put back the web.config again, it works smooth.
6. After some days, it stopped working. its anyones guess when the asp.net recompiles the file and permission cannot write the tempDirectory again.

Simply, I can write to the tempDirectory if I am default anonymous user, but If I identify myself by impersonation I dont have enough permission.

Who to blame?
1. Server host
2. Microsoft

Is it unreasonable to blame MS?
No, my argument is why in the first place MS not giving proper guidelines to the hosting companies?

15 replies

by jaqui

they didn't set default configuration for iis right ( another microsoft product ) to work with asp.net

microsoft active server pages require microsoft iis.

since the host is taking defaults for microsofts products, as is normal for microsoft users, then blame microsoft.

by doobiwan

Please read the free documentation on your tools before you go blundering about.

ASP.NET is secure by default, you have NO rights to ANY physical resources unless explicitly granted, it's meant to be like that. Configuration management is the responsibility of your hosting company, so speak to them to make the changes, or change hosts.

by blj

I understand that ASP.net is meant to be secure.
Lets take my situation:
Any new file uploaded will be compiled by ASP.Net and files are created in the temp directory. All happens when the page is requested for the first time.
Temp file creation:
1. works for the default anonymous user
2. does not work for the impersonated user

Is this because of default configuration or only my host?

by jaqui

since I use php, and not any microsoft controlled product, would I want to get a system to support asp.net?

both m$ active server pages, and .net framework are not something I need.
both are proprietary, corrupt microshaft unstable, incompatable products.
( microshot can't keep anything compatable when they release new version, look at the orifice tools, no compatability between versions )

I only use products where the standards are controlled by multinational committee, with no one organisation having more than one vote, not products where one person can say, change it to do this, and have completely different standard result.

by madestroitsolutions

How are they supposed to setup the default configuration for IIS to work with ASP.NET, if IIS was before ASP.NET?

Shouldn't they setup ASP.NET to work with IIS instead? and shouldn't they set the default configuration to something safe so that users like you don't end up opening a big security hole in your company's network because you are playing with something you know nothing about?

by jaqui

don't read my posts.
I do not use ANY microshaft products.
my entire system is linux based.
so I don't use either asp.net or iis.
as BOTH ARE SECURITY RISKS!!!

no microsoft product is secure.
all are designed to leave your data exposed.
after all they are designed to use an os designed for playing video games on home systems.

by d.sanders

Mine is certainly willing to allow read/write permissions on a folder upon simple request.

by dgillespie2

What's wrong with writing a simple piece of PHP to manage a visit counter? On each access, it would open a text file in the same directory as your page (counter.text), increment the number, write it back and close the file. Write another hunk of code to read the file and display the number. My point is: why hire another company's bloated technology to do what you could do on your own?

by blj

I am happy to change the host in hindsight. But my point is how many of those new customers who join this reputed hosting company will be cheated in future? They promised me ASP.NET service. It is a mirage, I cannot even do a simple page counter. I am not arguing about php or asp.net! My point is, it is MS responsiblity to make sure that the hosting companies who sell ASP.net as part of their services follow a set of guidelines or rules. Certainly my client will not be interested in knowing what technology I am using, or why there should be any downtime while I am moving my host. All they need is an IT system, which works. Requesting a page counter which keeps the data in a plain text file is not too much to demand. When the host sold me a ASP.net account, I assumed I can write to a text file. Why do I have to pay ?50 more to set permissions in my directory? All I am trying to do is write into my own directory.

by jaqui

not.

how an end user operates is not the suppliers problem.
that has been settled in court numerous times.

if you use ms sql server to serve a db driven website, that keeps passwords in an unsecured format, then use those passwords to hack into other's systems is ms responsable?
not.

end user is responsable.

even though I will not ever own any ms products, and can't stand the company, I can't agree they are responsable for end users screwups

by madestroitsolutions

Although I am an MS tech user (ASP.NET), I agree with you, why go through all the troble with ASP.NET when you can use other technologies to do simple tasks?

Which brings me to what I said in a prior post of mine... ASP.NET is not another version of FrontPage, you have to know what you are doing in order to leverage its true power (not that PHP is not powerful too, but you can accomplish simple tasks easier with it).

by madestroitsolutions

No offense of any kind but judging from your post, it sounds like you are not a programmer, or if you are one, you have no experience.

ASP.NET is not another version of FrontPage where you can make small web pages for people to visit. In fact ASP.NET has very little in common with ASP to begin with. The true power of ASP.NET lies on the framework, pre-compilation, reusable code, web controls and more...

The reason why you are experiencing problems like this is because:
1) You have not taken the time to buy yourself a good book about ASP.NET and read it.
2) Your are hosting your application somewhere else.
3) Your hosting company sucks. (no offense, consequence of point #2)

you cannot expect Microsoft to come and install the .NET Framework on every service provider now, can you?

There are more than enough books out there, documentation, examples and tutorials on the Internet on how to take advantage of ASP.NET security features, so please don't blame Microsoft, blame the hosting company bloodsuckers who don't know what they are doing but they still want to charge you for it.

Nevertheless, I respect your opinion and I hope you don't take this post in an offensive way.

Thank you.

by blj

KeyBored, Thank you for your time to respond my concern with ASP.net.
1. I admit that I host somewhere else. I would say about 80% of the websites are outsourced for hosting. ( 80% is pure guestimate and I do not have any proof )
2. From your posts, I understand you host your websites from the machine next to your desk.
3. I am still saying, I do not have anything particular to hate MS.
4. From the point 1, MS should not ignore those who outsource their hosting needs. All I wanted is MS to educate those hosting service providers what a typical configuration should be for a shared server.
5. I do not understand, why you think it is too much to ask MS to create a guideline or a recommended configuration.

by madestroitsolutions

Evidently you are another Microsoft hater...

However, if you worked for a company with at least 1,000 employees (apparently you don't) you would understand the benefits of using technology from Microsoft and would also realize that Microsoft's technologies ARE very "compatible" - as you call it - with each other, which is precisely where most of the benefit is to begin with.

Finally, to talk about open source products, if I run applications of heavy usage (at least 10,000 users a day, and I mean users, not visitors) I would be very concerned about having a phone number where I can call to get immediate help in case something goes wrong and my guys can't figure it out.

Now don't get me wrong, I do PHP, MYSQL and other products as well and I find them to be very good, but when it comes to business, I choose Microsoft.

Thank you.

This discussion is closed to new replies.