In this book, you’ll be introduced to the features and capabilities of ASP.NET 3.5, as well as the foundation that ASP.NET provides. Updated for the latest release of Visual Studio, this new edition adds five hundred pages of great new content compared to the original 2.0 version of the book. Including both printed and downloadable VB and C# code examples, this edition focuses even more on experienced programmers and advanced web development. New coverage includes new chapters on IIS 7 development, LINQ, ASP.NET, Silverlight, and many others.

This book is intended for developers who are already familiar with and have a solid understanding of ASP.NET 1.1 and ASP.NET 2.0 security concepts, especially in the areas of forms authentication, page security, and website authorization. It assumes that you have a good understanding of the general functionality of Membership and Role Manager. It is also assumes that you have some familiarity working with ASP.NET AJAX 3.5. The book aims to “peel back the covers” of various ASP.NET security features so you can gain a deeper understanding of the security options available to you. Explaining the new IIS 7.0 and its Integrated mode of execution is also included in the book. This book was written using the .NET 3.5 Framework along with the .NET Framework SPI on both Windows Sever 2008 and Windows Vista. The sample code in the book has been verified to work with .NET 3.5 Framework and .NET 3.5 Framework SPI on Windows Vista. To run all of the samples in the book you will need the following: Windows Server 2008 or Windows Vista Internet Information Services 7.0 (IIS 7.0) Visual Studio 2008 RTM Either SQL Server 2000 or SQL Server 2005 A Window’s Sever 2008 domain running at Windows Server 2008 functional level This book covers many topics and areas in ASP.NET 2.0 and ASP.NET 3.5. It first introduces Internet Information Services 7.0 (IIS 7.0). It goes on to explain in detail the new IIS 7.0 Integrated mode of execution. Next, detailed coverage of how security is applied when the ASP.NET application starts up and when a request is processed in the newly introduced integrated request-processing pipeline is discussed. After this, the book branches out and begins to cover security information for features such as trust levels, forms authentication, page security, and session state. This will show you how you can benefit from the IIS 7.0 Integrated mode to make better use of ASP.NET features. You will also gain an understanding of the lesser known security features in ASP.NET 2.0 and ASP.NET 3.5. In chapter 10 the book changes direction and addresses two security services in ASP.NET 2.0 and ASP.NET 3.5: Membership and Role Manager. You will learn about the provider model that underlies each of these features. The internals of the feature are also discussed, as well as the SQL- and Active Directory-based providers included with them. The discussion of ASP.NET features is continued in chapter 17, which is dedicated to the ASP.NET AJAX 3.5 security integration with ASP.NET 3.5; it will also show how to authenticate and authorize users with JavaScript code written from the client-side. The book closes with a chapter about the best practices ASP.Net developers should follow to protect their applications from attack. Chapter 1 starts by refreshing ideas on application pools and worker processes. It later gets into the major components that make up IIS 7.0. Chapter 2 begins by introducing the advantages of the IIS 7.0 and ASP.NET integrated mode. Chapter 3 gives you a walkthrough of the security processing that both IIS 7.0 and ASP.NET perform in the integrated/unified request-processing pipeline. Chapter 4 defines what an ASP.NET trust level is and how ASP.NET trust levels work to provide secure environments for running web applications. Chapter 5 covers the security features in the 2.0 and 3.5 Frameworks’ configuration systems. Chapter 6 explains ASP.NET 2.0 and ASP.NET 3.5 features for forms authentication. Chapter 7 demonstrates using IIS 7.0 wildcard mappings and ASP.NET 2.0 and ASP.NET 3.5 support for wildcard mappings to share authentication and authorization information with Classic ASP applications. Chapter 8 covers security features and guidance for session state. Chapter 9 describes some lesser known page security features from ASP.NET 1.1 and describes how ASP.NET 2.0 and ASP.NET 3.5 options for securing viewstate and postback events. Chapter 10 gives you an architectural overview of the provider model in both ASP.NET 2.0 and ASP.NET 3.5. Chapter 11 talks about the Membership feature in ASP.NET 2.0 and ASP.NET 3.5 Chapter 12 delves into both the SqlMembershipProvider as well as general database design assumptions that are included in all of ASP.NET 2.0’s and ASP.NET 3.5’s SQL-based features. Chapter 13 covers other membership provider that ships in ASP.NET 2.0 and ASP.NET 3.5-ActiveDirectoryMembershipProvider. Chapter 14 describes the Role Manager feature that provides built-in authorization support for ASP.NET 2.0 and ASP.NET 3.5. Chapter 15 discusses the SqlRoleProvider and its underlying SQL schema. Chapter 16 covers the AuthorizationStoreRoleProvider, which is a provider that maps Role Manager functionality to the Authorization Manager. Chapter 17 discusses how ASP.NET AJAX 3.5 integrates with ASP.NET 3.5 Membership and Role management features through newly introduced web services. Chapter 18 covers the best practices that can be followed to secure ASP.NET applications. Bilal Haidar has authored several online articles for www.aspalliance.com, www.code-magazine.com, and www.aspnetpro.com. He is one of the top posters at the ASP.NET forums. He has been a Microsoft MVP in ASP.NET since 2004 and is also a Microsoft certified trainer. Currently, Bilal works as a senior developer for Consolidated Contractors Company (CCC), whose headquarters are based in Athens, Greece. Stefan Schackow, the previous author of this book, is a Program Manager on the Web Platform and Tools Team at Microsoft. He worked on the new application services stack in Visual Studio 2005 and owned the Membership, Role Manager, Profile, Personalization, and Site Navigation features in ASP.NET 2.0. Currently he is working on Silverlight for Microsoft. Stefan is a frequent speaker at Microsoft developer conferences.

* Completely up to date with the ASP.NET 2.0 technology and demonstrates the new best-practices and coding styles that it requires * Focuses on developer’s needs, explaining the technology in a manner applicable to development projects * Provides comprehensive coverage of ASP.NET 2.0 (with C# .NET 2.0), providing thorough understanding of the subject area

* Completely up to date with the ASP.NET 2.0 technology and demonstrates the new best-practices and coding styles that it requires * Focuses on developer’s needs, explaining the technology in a manner applicable to development projects * Provides comprehensive coverage of ASP.NET 2.0 (with C# .NET 2.0), providing thorough understanding of the subject area

Professional ASP.NET 3.5 SP1 In C# and VB ASP.NET 3.5 brings the power of Visual Studio 2008 along with the multitude of language improvements in C# 2008 and Visual Basic 2008 as well as powerful new technology called LINQ, together with the ASP.NET 2.0 Framework you already know and love. Packed with valuable coverage of ASP.NET 3.5 SP1, this essential resource offers both C# and VB examples throughout the book, and shares new and updated content on the ADO.NET Entity Framework, ADO.NET Dynamic Data, and ADO.NET Data Services. While ASP.NET 3.5 boasts server controls like the ListView and the incredibly flexible GridView, it also includes advancements in AJAX technology combined with JavaScript debugging features in Visual Studio 2008. With this book, a stellar author team covers the new controls in the AJAX toolbox, the back button history, and script combining, and they also examine the new capabilities of WCF including changes to DataContractSerializer. In addition, the accompanying CD-ROM features the entire book in PDF format. What you will learn from this book The concepts underlying the server control and its pivotal role in ASP.NET development How to create templated ASP.NET pages using the master page feature How to work with data from enterprise databases including SQL Server Ways to debug, package, and deploy ASP.NET applications, monitor their health and performance, and handle errors How to retrieve, update, and delete data quickly and logically using LINQ with side-by-side examples comparing LINQ to existing techniques Ways to localize your web site in multiple languages for a world-wide audience Methods for adding AJAX capabilities to your ASP.NET applications The many benefits of the new data access additions Ways to use and extend the Provider Model for accessing data stores, processes, and more What freeware tools you need in Scott Hanselman's ASP.NET Ultimate Developer Tools appendix Who this book is for This book is for programmers and developers who are looking to make the transition to ASP.NET 3.5 SP1 with Visual Studio 2008 and either C# 3.0 (2008) or Visual Basic 9 (2008). CD-ROM includes the full book in PDF format and a selection of 7 Wrox Blox mini e-books including: Internet Explorer 8 and Its Impact on Your ASP.NET Web Sites Jumping from ASP.NET to Silverlight 2 Leverage LINQ in ASP.NET 3.5 Projects Note: CD-ROM/DVD and other supplementary materials are not included as part of eBook file.

ASP.NET 3.5 is the principal standard for creating dynamic web pages on the Windows platform. Pro ASP.NET 3.5 in VB 2008: Includes Silverlight 2 raises the bar for high–quality, practical advice on learning and deploying Microsoft's dynamic web solution. Updated with everything you need to integrate Silverlight 2.0 into your ASP.NET applications, this book teaches you all about Silverlight's exciting features so that your ASP projects can be rich in visual flair and compelling to the user. You'll learn how to use the new levels of abstraction in the Entity Framework to design elegant, powerful application architectures. Seasoned .NET professionals Matthew MacDonald, Mario Szpuszta, and Vidya Vrat Agarwal explain how you can get the most from these groundbreaking technologies. They cover ASP.NET 3.5 as a whole, illustrating both the newer features and the functionality carried over from previous versions of ASP. This book will give you the knowledge you need to code real ASP.NET 3.5 applications in the best possible style.

This book was written to introduce you to the features and capabilities that ASP.NET 4 offers, as well as to give you an explanation of the foundation that ASP.NET provides. We assume you have a general understanding of Web technologies, such as previous versions of ASP.NET, Active Server Pages 2.0/3.0, or JavaServer Pages. If you understand the basics of Web programming, you should not have much trouble following along with this book's content. If you are brand new to ASP.NET, be sure to check out Beginning ASP.NET 4: In C# and VB by Imar Spaanjaars (Wiley Publishing, Inc., 2010) to help you understand the basics. In addition to working with Web technologies, we also assume that you understand basic programming constructs, such as variables, For Each loops, and object-oriented programming. You may also be wondering whether this book is for the Visual Basic developer or the C# developer. We are happy to say that it is for both! When the code differs substantially, this book provides examples in both VB and C#. This book explores the 4 release of ASP.NET. It covers each major new feature included in ASP.NET 4 in detail. The following list tells you something about the content of each chapter. Chapter 1, ″Application and Page Frameworks.″ The first chapter covers the frameworks of ASP.NET applications as well as the structure and frameworks provided for single ASP.NET pages. This chapter shows you how to build ASP.NET applications using IIS or the built-in Web server that comes with Visual Studio 2010. This chapter also shows you the folders and files that are part of ASP.NET. It discusses ways to compile code and shows you how to perform cross-page posting. This chapter ends by showing you easy ways to deal with your classes from within Visual Studio 2010. Chapters 2, 3, and 4. These three chapters are grouped together because they all deal with server controls. This batch of chapters starts by examining the idea of the server control and its pivotal role in ASP.NET development. In addition to looking at the server control framework, these chapters delve into the plethora of server controls that are at your disposal for ASP.NET development projects. Chapter 2, ″ASP.NET Server Controls and Client-Side Scripts,″ looks at the basics of working with server controls. Chapter 3, ″ASP.NET Web Server Controls,″ covers the controls that have been part of the ASP.NET technology since its initial release and the controls that have been added in each of the ASP.NET releases. Chapter 4, ″Validation Server Controls,″ describes a special group of server controls: those for validation. Chapter 5, ″Working with Master Pages.″ Master pages provide a means of creating templated pages that enable you to work with the entire application, as opposed to single pages. This chapter examines the creation of these templates and how to apply them to your content pages throughout an ASP.NET application. Chapter 6, ″Themes and Skins.″ The Cascading Style Sheet files you are allowed to use in ASP.NET 1.0/1.1 are simply not adequate in many regards, especially in the area of server controls. This chapter looks at how to deal with the styles that your applications require and shows you how to create a centrally managed look-and-feel for all the pages of your application by using themes and the skin files that are part of a theme. Chapter 7, ″Data Binding.″ One of the more important tasks of ASP.NET is presenting data, and this chapter looks at the underlying capabilities that enable you to work with the data programmatically before issuing the data to a control. Chapter 8, ″Data Management with ADO.NET.″ This chapter presents the ADO.NET data model provided by ASP.NET, which allows you to handle the retrieval, updating, and deleting of data quickly and logically. Chapter 9, ″Querying with LINQ.″ The.NET Framework 4 includes a nice access model language called LINQ. LINQ is a set of extensions to the .NET Framework that encompass language-integrated query, set, and transform operations. This chapter introduces you to LINQ and how to effectively use this feature in your Web applications today. Chapter 10, ″Working with XML and LINQ to XML.″ The .NET Framework and ASP.NET 4 have many capabilities built into their frameworks that enable you to easily extract, create, manipulate, and store XML. This chapter takes a close look at the XML technologies built into ASP.NET and the underlying .NET Framework. Chapter 11, ″Introduction to the Provider Model.″ The provider model is built into ASP.NET to make the lives of developers so much easier and more productive than ever before. This chapter gives an overview of this provider model and how it is used throughout ASP.NET 4. Chapter 12, ″Extending the Provider Model.″ After an introduction of the provider model, this chapter looks at some of the ways to extend the provider model found in ASP.NET 4. This chapter also reviews a couple of sample extensions to the provider model. Chapter 13, ″Site Navigation.″ Most developers do not simply develop single pages—they build applications. One of the application capabilities provided by ASP.NET 4 is the site navigation system covered in this chapter. Chapter 14, ″Personalization.″ Developers are always looking for ways to store information pertinent to the end user. After it is stored, this personalization data has to be persisted for future visits or for grabbing other pages within the same application. The ASP.NET team developed a way to store this information—the ASP.NET personalization system. The great thing about this system is that you configure the entire behavior of the system from the web.config file. Chapter 15, ″Membership and Role Management.″ This chapter covers the membership and role management system developed to simplify adding authentication and authorization to your ASP.NET applications. This chapter focuses on using the web.config file for controlling how these systems are applied, as well as on the server controls that work with the underlying systems. Chapter 16, ″Portal Frameworks and Web Parts.″ This chapter explains Web Parts—a way of encapsulating pages into smaller and more manageable objects. Chapter 17, ″HTML and CSS Design with ASP.NET.″ Visual Studio 2010 places a lot of focus on building a CSS-based Web. This chapter takes a close look at how you can effectively work with HTML and CSS design for your ASP.NET applications. Chapter 18, ″ASP.NET AJAX.″ AJAX is an acronym for Asynchronous JavaScript and XML. In Web application development, it signifies the capability to build applications that make use of the XMLHttpRequest object. Visual Studio 2010 contains the ability to build AJAX-enabled ASP.NET applications from the default install of the IDE. This chapter takes a look at this way to build your applications. Chapter 19, ″ASP.NET AJAX Control Toolkit.″ Along with the capabilities to build ASP.NET applications that make use of the AJAX technology, a series of controls is available to make the task rather simple. This chapter takes a good look at the ASP.NET AJAX Control Toolkit and how to use this toolkit with your applications today. Chapter 20, ″Security.″ This chapter discusses security beyond the membership and role management features provided by ASP.NET 4. This chapter provides an in-depth look at the authentication and authorization mechanics inherent in the ASP.NET technology, as well as HTTP access types and impersonations. Chapter 21, ″State Management.″ Because ASP.NET is a request-response–based technology, state management and the performance of requests and responses take on significant importance. This chapter introduces these two separate but important areas of ASP.NET development. Chapter 22, ″Caching.″ Because of the request-response nature of ASP.NET, caching (storing previous generated results, images, and pages) on the server becomes rather important to the performance of your ASP.NET applications. This chapter looks at some of the advanced caching capabilities provided by ASP.NET, including the SQL cache invalidation feature which is part of ASP.NET 4. This chapter also takes a look at object caching and object caching extensibility. Chapter 23, ″Debugging and Error Handling.″ This chapter tells you how to properly structure error handling within your applications. It also shows you how to use various debugging techniques to find errors that your applications might contain. Chapter 24, ″File I/O and Streams.″ This chapter takes a close look at working with various file types and streams that might come into your ASP.NET applications. Chapter 25, ″User and Server Controls.″ Not only can you use the plethora of server controls that come with ASP.NET, but you can also use the same framework these controls use and build your own. This chapter describes building your own server controls and how to use them within your applications. Chapter 26, ″Modules and Handlers.″ This chapter looks at two methods of manipulating the way ASP.NET processes HTTP requests: HttpModule and HttpHandler. Each method provides a unique level of access to the underlying processing of ASP.NET, and each can be a powerful tool for creating Web applications. Chapter 27, "ASP.NET MVC." ASP.NET MVC is the latest major addition to ASP.NET and has generated a lot of excitement from the development community. ASP.NET MVC supplies you with the means to create ASP.NET using the Model-View-Controller models that many developers expect. ASP.NET MVC provides developers with the testability, flexibility, and maintainability in the applications they build. It is important to remember that ASP.NET MVC is not meant to be a replacement to the ASP.NET everyone knows and loves, but instead is simply a different way to construct your applications. Chapter 28, ″Using Business Objects.″ Invariably, you are going to have components created with previous technologies that you do not want to rebuild but that you do want to integrate into new ASP.NET applications. If this is the case, the .NET Framework makes incorporating your previous COM components into your applications fairly simple and straightforward. This chapter also shows you how to build .NET components instead of turning to the previous COM component architecture. Chapter 29, ″ADO.NET Entity Framework.″ The inclusion of the ADO.NET Entity Framework in ASP.NET makes mapping objects from the database to the objects within your code significantly simpler. Using Visual Studio 2010, you are able to visually design your entity data models and then very easily access these models from code allowing the ADO.NET Entity Framework to handle the connections and transactions to the underlying database. Chapter 30, ″ASP.NET Dynamic Data.″ This feature in ASP.NET 4 allows you to quickly and easily put together a reporting and data entry application from your database. You are also able to take these same capabilities and incorporate them into a pre-existing application. Chapter 31, ″Working with Services.″ This chapter reveals the ease not only of building XML Web services, but consuming them in an ASP.NET application. This chapter then ventures further by describing how to build XML Web services that utilize SOAP headers and how to consume this particular type of service. Another feature in ASP.NET, ADO.NET Data Services, allows you to create a RESTful service layer using an Entity Data Model. Using this capability, you can quickly set up a service layer that allows you to expose your content as AtomPub or JSON, which will allow the consumer to completely interact with the underlying database. Chapter 32, ″Building Global Applications.″ ASP.NET provides an outstanding way to address the internationalization of Web applications. Changes to the API, the addition of capabilities to the server controls, and even Visual Studio itself equip you to do the extra work required to more easily bring your application to an international audience. This chapter looks at some of the important items to consider when building your Web applications for the world. Chapter 33, ″Configuration.″ This chapter teaches you to modify the capabilities and behaviors of ASP.NET using the various configuration files at your disposal. Chapter 34, ″Instrumentation.″ ASP.NET gives you greater capability to apply instrumentation techniques to your applications. The ASP.NET Framework includes performance counters, the capability to work with the Windows Event Tracing system, possibilities for application tracing (covered in Chapter 23 of this book), and the most exciting part of this discussion—a health monitoring system that allows you to log a number of different events over an application's lifetime. This chapter takes an in-depth look at this health monitoring system. Chapter 35, ″Administration and Management.″ This chapter provides an overview of the GUI tools that come with ASP.NET today that enable you to manage your Web applications easily and effectively. Chapter 36, ″Packaging and Deploying ASP.NET Applications.″ So you have built an ASP.NET application—now what? This chapter takes the building process one step further and shows you how to package your ASP.NET applications for easy deployment. Many options are available for working with the installers and compilation model to change what you are actually giving your customers. Appendix A, ″Migrating Older ASP.NET Projects.″ This appendix focuses on migrating ASP.NET 1.x, 2.0, or 3.5 applications to the 4 Framework. Appendix B, ″ASP.NET Ultimate Tools.″ Based on Scott Hanselman's annual Tools pick blog posting, many of the tools here will expedite your development process and, in many cases, make you a better developer. Appendix C, ″Silverlight 3 and ASP.NET.″ Silverlight is a means to build fluid applications using XAML. This technology enables developers with really rich vector-based applications. Appendix D, "Dynamic Types and Languages." As of the release of ASP.NET 4, you can now build your Web applications using IronRuby and IronPython. This appendix takes a quick look at using dynamic languages in building your Web applications. Note: CD-ROM/DVD and other supplementary materials are not included as part of eBook file.

This book explains how to use the ASP.NET AJAX features to create richer, more responsive dynamic websites. It explains the architecture, including the ASP.NET server elements and the client-side Javascript library, and runtime. The book will walk you through examples for each feature element, demonstrating how the client and server interact to produce a better web application. The book also progresses in a way that educates you on how ASP.NET and AJAX build on each other to provide a comprehensive framework for rich application development.

Pro ASP.NET 2.0 Server Controls with ASP.NET AJAX is a reference for the serious ASP.NET developer who understands the benefits of object-oriented development and wants to apply those principles to ASP.NET 2.0, ASP.NET AJAX, and server control development. It will help readers create a powerful suite of interactive controls and enrich the design-time experience when building custom server controls. Coverage explains how to integrate client-side development technologies with server control technology, details the background on user controls, and helps the reader learn how to work with the new mobile controls in ASP.NET 2.0.

The professional’s guide to C# 7, with expert guidance on the newest features Professional C# 7 and .NET Core 2.0 provides experienced programmers with the information they need to work effectively with the world’s leading programming language. The latest C# update added many new features that help you get more done in less time, and this book is your ideal guide for getting up to speed quickly. C# 7 focuses on data consumption, code simplification, and performance, with new support for local functions, tuple types, record types, pattern matching, non-nullable reference types, immutable types, and better support for variables. Improvements to Visual Studio will bring significant changes to the way C# developers interact with the space, bringing .NET to non-Microsoft platforms and incorporating tools from other platforms like Docker, Gulp, and NPM. Guided by a leading .NET expert and steeped in real-world practicality, this guide is designed to get you up to date and back to work. With Microsoft speeding up its release cadence while offering more significant improvement with each update, it has never been more important to get a handle on new tools and features quickly. This book is designed to do just that, and more—everything you need to know about C# is right here, in the single-volume resource on every developer’s shelf. Tour the many new and enhanced features packed into C# 7 and .NET Core 2.0 Learn how the latest Visual Studio update makes developers’ jobs easier Streamline your workflow with a new focus on code simplification and performance enhancement Delve into improvements made for localization, networking, diagnostics, deployments, and more Whether you’re entirely new to C# or just transitioning to C# 7, having a solid grasp of the latest features allows you to exploit the language’s full functionality to create robust, high -quality apps. Professional C# 7 and .NET Core 2.0 is the one-stop guide to everything you need to know.