ASP.NET MVC 1.0 Website Programming: Problem - Design - Solution (Wrox Programmer to Programmer)

This book is not an MVC intro book. This book is building a non-trivial app MVC! In this book Nick Beradi and Al Katawazi is transferring Marco Bellinaso's classic The Beerhouse app to MVC. And they do an okay job. You need this book if you don't know how to build a non-trivial app MVC, at the time of writing there is no other books as extensive as this, building a non-trivial app MVC, around. It is true that some parts of this book has been copied and pasted from the previous edition in a non-intelligent fashion. It's mostly the parts laying out the design of the app. For example on page 260 you get informed about the SPROCs of the app, but this app doesn't use SPROCs, that was previous edition! Anyway as said this copy and paste thing goes on in the design parts and it actually doesn't mean too much in the understanding of the book. It didn't bother me very much. The important thing is about the MVC implementation and in that respect the app and the book has been totally rewritten from scratch, and you get the info you need. One thing I was a little puzzled about is why Nick and Al didn't use the ModelState for validation, it seems to me that that would have been easier, and you can thereby put the actual validation in the objects themselves. Instead Nick and Al writes a custom validation using jQuery. But all in all a fine book. You need this book if you are a newbie and you are heading the MVC way! But pick one of the MVC intro books up before you embark on this book!

ASP.NET revolutionized Web application development. The platform handles many of the complexities of creating Web applications. Now ASP.NET AJAX takes the development platform even further. The lines between rich client applications and traditionally less interactive browser-based applications are being further blurred with the use of this technology.

The ASP.NET AJAX Library brings object-oriented programming to JavaScript development for modern browsers, and the ASP.NET AJAX Extensions makes it easy to write rich Web applications that communicate with the Web server asynchronously. Again, the complexities are made easy by using ASP.NET.

The new server controls that are part of ASP.NET AJAX make it simple to designate parts of the page to be updated automatically without making the user pause and wait while the data is refreshed. You can have partial page updates without writing a single line of code. Other new controls let you alert the user that background work is happening and designate regular intervals at which updates occur. In addition, the ASP.NET AJAX Control Toolkit makes it easy to make your user interface really come to life with animations, modal dialogs, transition effects, and more.

Ajax is definitely the hot buzzword in the Web application world at the moment. Ajax is an acronym for Asynchronous JavaScript and XML and, in Web application development, it signifies the capability to build applications that make use of the XMLHttpRequest object.

The creation and the inclusion of the XMLHttpRequest object in JavaScript and the fact that most upper-level browsers support the use of this object led to creation of the Ajax model. Ajax applications,although they have been around for a few years, gained greater popularity after Google released a number of notable, Ajax-enabled applications such as Google Maps and Google Suggest. These applications demonstrated the value of Ajax.

Shortly thereafter, Microsoft released a beta for a new toolkit that enabled developers to incorporate Ajax features in their Web applications. This toolkit, code-named Atlas and later renamed ASP.NET AJAX, makes it extremely simple to start using Ajax features in applications today.

Prior to Visual Studio 2008, the ASP.NET AJAX product used to be a separate application that developers were required to install on their machine and the Web server that they were working with. This release gained in popularity quite rapidly and has now been made a part of the Visual Studio 2008 offering. Not only is it a part of the Visual Studio 2008 IDE, the ASP.NET AJAX product is also baked into the .NET Framework 3.5. This means that in order to use ASP.NET AJAX, developers are not going to need to install anything if they are working with ASP.NET 3.5.

Overall, Microsoft has fully integrated the entire ASP.NET AJAX experience in that developers can easily use Visual Studio and its visual designers to work with your Ajax-enabled pages and even have the full debugging story that they would want to have with their applications. Using Visual Studio 2008, developers are now able to debug straight into the JavaScript that they are using in the pages.

In addition, it is important to note that Microsoft focused a lot of attention on cross-platform compatibility with ASP.NET AJAX. Developers will find that the Ajax-enabled applications that they build upon the .NET Framework 3.5 are able to work within all the major up-level browsers out there (e.g., FireFox and Opera).

This book is aimed at experienced ASP.NET developers looking to add AJAX to their applications, and experienced Web developers who want to move to using ASP.NET and AJAX together.

In this book, I assume that you already have an understanding of how ASP.NET works. For an in-depth discussion of ASP.NET, I recommend Professional ASP.NET 3.5 by Bill Evjen, et al. (Wrox, 2008). The focus here is on how you can extend ASP.NET applications to update portions of the page asynchronously and to add richer UI elements to a page. ASP.NET AJAX makes it easy to enrich your existing application or to design a new application to provide a better experience for users. The differences among modern browsers have been abstracted, allowing you to write to a common set of APIs and trust that the user will get the correct behavior whether they are using Internet Explorer, Firefox, or Safari.

If you know how to author ASP.NET pages, you can easily start using the Microsoft AJAX library to manipulate the browser’s Document Object Model and communicate with the server to update the user’s view of data without forcing them to wait for the entire page to be refreshed.

This book covers ASP.NET 3.5 AJAX. It does not cover ASP.NET 3.5, on which ASP.NET AJAX is built. The examples lead you from the core of what is included in the ASP.NET AJAX Library through the core controls you would first start using. You build on that using the core JavaScript library and the ASP.NET AJAX Toolkit before covering debugging, deployment, and custom control development.

The ASP.NET 3.5 release includes the Microsoft AJAX Library as well as the server controls that can be used in ASP.NET pages to extend applications, making them more rich and interactive. It does so by leveraging the ASP.NET AJAX Library, which is JavaScript that runs in the browser. The server controls and JavaScript Library work together to let you update HTML with data obtained asynchronously from the server. The ASP.NET application services are exposed to JavaScript classes in the ASP.NET AJAX Library, making authentication and personalization accessible from the browser.

Chapter 1 introduces you to ASP.NET AJAX. This book discusses the need for AJAX Libraries and explain how ASP.NET AJAX compares to other AJAX Libraries. You will see how ASP.NET AJAX is composed of client and server pieces and that you can use the client library with any server platform you choose. In Chapter 2, the focus is on the most popular and easily applied feature of ASP.NET, the UpdatePanel control. This control allows you to automatically update portions of a page asynchronously, without subjecting the user to a visible pause while the page refreshes. Chapters 3 and 4 give you some key information about working with JavaScript and how the ASP.NET AJAX Library makes development with JavaScript easier. The book then works through several key features, including control of script resources and working with the ScriptManager control in Chapter 5, the new ASP.NET 3.5 ability to work with the back button in Chapter 6, and the ASP.NET AJAX Toolkit in Chapter 7 and all it has to offer for creating rich user interfaces. The next chapter, Chapter 8, looks at how to use ASP.NET’s application services (such as the Membership and Role management systems) with ASP.NET AJAX. Chapter 9 looks at networking objects. Chapter 10 looks at working with animations in ASP.NET AJAX. Chapter 11 shows you how to develop custom AJAX controls. Chapters 12, 13, and 14 shows the reader how to incorporate Ajax in some other ASP.NET core features such as Web Parts, localization, and state management. Chapter 15 looks at what is required to test and debug Ajax applications, and finally, Chapter 16 explores how to deploy ASP.NET AJAX applications.

ASP.NET revolutionized Web application development. The platform handles many of the complexities of creating Web applications. Now ASP.NET AJAX takes the development platform even further. The lines between rich client applications and traditionally less interactive browser–based applications are being further blurred with the use of this technology. The ASP.NET AJAX Library brings object–oriented programming to JavaScript development for modern browsers, and the ASP.NET AJAX Extensions makes it easy to write rich Web applications that communicate with the Web server asynchronously. Again, the complexities are made easy by using ASP.NET. The new server controls that are part of ASP.NET AJAX make it simple to designate parts of the page to be updated automatically without making the user pause and wait while the data is refreshed. You can have partial page updates without writing a single line of code. Other new controls let you alert the user that background work is happening and designate regular intervals at which updates occur. In addition, the ASP.NET AJAX Control Toolkit makes it easy to make your user interface really come to life with animations, modal dialogs, transition effects, and more. Ajax is definitely the hot buzzword in the Web application world at the moment. Ajax is an acronym for Asynchronous JavaScript and XML and, in Web application development, it signifies the capability to build applications that make use of the XMLHttpRequest object. The creation and the inclusion of the XMLHttpRequest object in JavaScript and the fact that most upper–level browsers support the use of this object led to creation of the Ajax model. Ajax applications, although they have been around for a few years, gained greater popularity after Google released a number of notable, Ajax–enabled applications such as Google Maps and Google Suggest. These applications demonstrated the value of Ajax. Shortly thereafter, Microsoft released a beta for a new toolkit that enabled developers to incorporate Ajax features in their Web applications. This toolkit, code–named Atlas and later renamed ASP.NET AJAX, makes it extremely simple to start using Ajax features in applications today. Prior to Visual Studio 2008, the ASP.NET AJAX product used to be a separate application that developers were required to install on their machine and the Web server that they were working with. This release gained in popularity quite rapidly and has now been made a part of the Visual Studio 2008 offering. Not only is it a part of the Visual Studio 2008 IDE, the ASP.NET AJAX product is also baked into the .NET Framework 3.5. This means that in order to use ASP.NET AJAX, developers are not going to need to install anything if they are working with ASP.NET 3.5. Overall, Microsoft has fully integrated the entire ASP.NET AJAX experience in that developers can easily use Visual Studio and its visual designers to work with your Ajax–enabled pages and even have the full debugging story that they would want to have with their applications. Using Visual Studio 2008, developers are now able to debug straight into the JavaScript that they are using in the pages. In addition, it is important to note that Microsoft focused a lot of attention on cross–platform compatibility with ASP.NET AJAX. Developers will find that the Ajax–enabled applications that they build upon the .NET Framework 3.5 are able to work within all the major up–level browsers out there (e.g., FireFox and Opera). This book is aimed at experienced ASP.NET developers looking to add AJAX to their applications, and experienced Web developers who want to move to using ASP.NET and AJAX together. In this book, I assume that you already have an understanding of how ASP.NET works. For an in–depth discussion of ASP.NET, I recommend Professional ASP.NET 3.5 by Bill Evjen, et al. (Wrox, 2008). The focus here is on how you can extend ASP.NET applications to update portions of the page asynchronously and to add richer UI elements to a page. ASP.NET AJAX makes it easy to enrich your existing application or to design a new application to provide a better experience for users. The differences among modern browsers have been abstracted, allowing you to write to a common set of APIs and trust that the user will get the correct behavior whether they are using Internet Explorer, Firefox, or Safari. If you know how to author ASP.NET pages, you can easily start using the Microsoft AJAX library to manipulate the browser’s Document Object Model and communicate with the server to update the user’s view of data without forcing them to wait for the entire page to be refreshed. This book covers ASP.NET 3.5 AJAX. It does not cover ASP.NET 3.5, on which ASP.NET AJAX is built. The examples lead you from the core of what is included in the ASP.NET AJAX Library through the core controls you would first start using. You build on that using the core JavaScript library and the ASP.NET AJAX Toolkit before covering debugging, deployment, and custom control development. The ASP.NET 3.5 release includes the Microsoft AJAX Library as well as the server controls that can be used in ASP.NET pages to extend applications, making them more rich and interactive. It does so by leveraging the ASP.NET AJAX Library, which is JavaScript that runs in the browser. The server controls and JavaScript Library work together to let you update HTML with data obtained asynchronously from the server. The ASP.NET application services are exposed to JavaScript classes in the ASP.NET AJAX Library, making authentication and personalization accessible from the browser. Chapter 1 introduces you to ASP.NET AJAX. This book discusses the need for AJAX Libraries and explain how ASP.NET AJAX compares to other AJAX Libraries. You will see how ASP.NET AJAX is composed of client and server pieces and that you can use the client library with any server platform you choose. In Chapter 2, the focus is on the most popular and easily applied feature of ASP.NET, the UpdatePanel control. This control allows you to automatically update portions of a page asynchronously, without subjecting the user to a visible pause while the page refreshes. Chapters 3 and 4 give you some key information about working with JavaScript and how the ASP.NET AJAX Library makes development with JavaScript easier. The book then works through several key features, including control of script resources and working with the ScriptManager control in Chapter 5, the new ASP.NET 3.5 ability to work with the back button in Chapter 6, and the ASP.NET AJAX Toolkit in Chapter 7 and all it has to offer for creating rich user interfaces. The next chapter, Chapter 8, looks at how to use ASP.NET’s application services (such as the Membership and Role management systems) with ASP.NET AJAX. Chapter 9 looks at networking objects. Chapter 10 looks at working with animations in ASP.NET AJAX. Chapter 11 shows you how to develop custom AJAX controls. Chapters 12, 13, and 14 shows the reader how to incorporate Ajax in some other ASP.NET core features such as Web Parts, localization, and state management. Chapter 15 looks at what is required to test and debug Ajax applications, and finally, Chapter 16 explores how to deploy ASP.NET AJAX applications

This book is intended for developers who are already familiar with and have a solid understanding of ASP.NET 1.1 and ASP.NET 2.0 security concepts, especially in the areas of forms authentication, page security, and website authorization. It assumes that you have a good understanding of the general functionality of Membership and Role Manager. It is also assumes that you have some familiarity working with ASP.NET AJAX 3.5. The book aims to “peel back the covers” of various ASP.NET security features so you can gain a deeper understanding of the security options available to you. Explaining the new IIS 7.0 and its Integrated mode of execution is also included in the book.

This book was written using the .NET 3.5 Framework along with the .NET Framework SPI on both Windows Sever 2008 and Windows Vista. The sample code in the book has been verified to work with .NET 3.5 Framework and .NET 3.5 Framework SPI on Windows Vista. To run all of the samples in the book you will need the following:

• Windows Server 2008 or Windows Vista
• Internet Information Services 7.0 (IIS 7.0)
• Visual Studio 2008 RTM
• Either SQL Server 2000 or SQL Server 2005
• A Window’s Sever 2008 domain running at Windows Server 2008 functional level

This book covers many topics and areas in ASP.NET 2.0 and ASP.NET 3.5. It first introduces Internet Information Services 7.0 (IIS 7.0). It goes on to explain in detail the new IIS 7.0 Integrated mode of execution. Next, detailed coverage of how security is applied when the ASP.NET application starts up and when a request is processed in the newly introduced integrated request-processing pipeline is discussed. After this, the book branches out and begins to cover security information for features such as trust levels, forms authentication, page security, and session state. This will show you how you can benefit from the IIS 7.0 Integrated mode to make better use of ASP.NET features. You will also gain an understanding of the lesser known security features in ASP.NET 2.0 and ASP.NET 3.5.

In chapter 10 the book changes direction and addresses two security services in ASP.NET 2.0 and ASP.NET 3.5: Membership and Role Manager. You will learn about the provider model that underlies each of these features. The internals of the feature are also discussed, as well as the SQL- and Active Directory-based providers included with them. The discussion of ASP.NET features is continued in chapter 17, which is dedicated to the ASP.NET AJAX 3.5 security integration with ASP.NET 3.5; it will also show how to authenticate and authorize users with JavaScript code written from the client-side.

The book closes with a chapter about the best practices ASP.Net developers should follow to protect their applications from attack.

Chapter 1 starts by refreshing ideas on application pools and worker processes. It later gets into the major components that make up IIS 7.0. Chapter 2 begins by introducing the advantages of the IIS 7.0 and ASP.NET integrated mode. Chapter 3 gives you a walkthrough of the security processing that both IIS 7.0 and ASP.NET perform in the integrated/unified request-processing pipeline. Chapter 4 defines what an ASP.NET trust level is and how ASP.NET trust levels work to provide secure environments for running web applications. Chapter 5 covers the security features in the 2.0 and 3.5 Frameworks’ configuration systems. Chapter 6 explains ASP.NET 2.0 and ASP.NET 3.5 features for forms authentication. Chapter 7 demonstrates using IIS 7.0 wildcard mappings and ASP.NET 2.0 and ASP.NET 3.5 support for wildcard mappings to share authentication and authorization information with Classic ASP applications. Chapter 8 covers security features and guidance for session state. Chapter 9 describes some lesser known page security features from ASP.NET 1.1 and describes how ASP.NET 2.0 and ASP.NET 3.5 options for securing viewstate and postback events. Chapter 10 gives you an architectural overview of the provider model in both ASP.NET 2.0 and ASP.NET 3.5. Chapter 11 talks about the Membership feature in ASP.NET 2.0 and ASP.NET 3.5 Chapter 12 delves into both the SqlMembershipProvider as well as general database design assumptions that are included in all of ASP.NET 2.0’s and ASP.NET 3.5’s SQL-based features. Chapter 13 covers other membership provider that ships in ASP.NET 2.0 and ASP.NET 3.5-ActiveDirectoryMembershipProvider. Chapter 14 describes the Role Manager feature that provides built-in authorization support for ASP.NET 2.0 and ASP.NET 3.5. Chapter 15 discusses the SqlRoleProvider and its underlying SQL schema. Chapter 16 covers the AuthorizationStoreRoleProvider, which is a provider that maps Role Manager functionality to the Authorization Manager. Chapter 17 discusses how ASP.NET AJAX 3.5 integrates with ASP.NET 3.5 Membership and Role management features through newly introduced web services. Chapter 18 covers the best practices that can be followed to secure ASP.NET applications.

Bilal Haidar has authored several online articles for www.aspalliance.com, www.code-magazine.com, and www.aspnetpro.com. He is one of the top posters at the ASP.NET forums. He has been a Microsoft MVP in ASP.NET since 2004 and is also a Microsoft certified trainer. Currently, Bilal works as a senior developer for Consolidated Contractors Company (CCC), whose headquarters are based in Athens, Greece.

Stefan Schackow, the previous author of this book, is a Program Manager on the Web Platform and Tools Team at Microsoft. He worked on the new application services stack in Visual Studio 2005 and owned the Membership, Role Manager, Profile, Personalization, and Site Navigation features in ASP.NET 2.0. Currently he is working on Silverlight for Microsoft. Stefan is a frequent speaker at Microsoft developer conferences.

This book is intended for developers who are already familiar with and have a solid understanding of ASP.NET 1.1 and ASP.NET 2.0 security concepts, especially in the areas of forms authentication, page security, and website authorization. It assumes that you have a good understanding of the general functionality of Membership and Role Manager. It is also assumes that you have some familiarity working with ASP.NET AJAX 3.5. The book aims to peel back the covers of various ASP.NET security features so you can gain a deeper understanding of the security options available to you. Explaining the new IIS 7.0 and its Integrated mode of execution is also included in the book. This book was written using the .NET 3.5 Framework along with the .NET Framework SPI on both Windows Sever 2008 and Windows Vista. The sample code in the book has been verified to work with .NET 3.5 Framework and .NET 3.5 Framework SPI on Windows Vista. To run all of the samples in the book you will need the This book covers many topics and areas in ASP.NET 2.0 and ASP.NET 3.5. It first introduces Internet Information Services 7.0 (IIS 7.0). It goes on to explain in detail the new IIS 7.0 Integrated mode of execution. Next, detailed coverage of how security is applied when the ASP.NET application starts up and when a request is processed in the newly introduced integrated request-processing pipeline is discussed. After this, the book branches out and begins to cover security information for features such as trust levels, forms authentication, page security, and session state. This will show you how you can benefit from the IIS 7.0 Integrated mode to make better use of ASP.NET features. You will also gain an understanding of the lesser known security features in ASP.NET 2.0 and ASP.NET 3.5. In chapter 10 the book changes direction and addresses two security services in ASP.NET 2.0 and ASP.NET 3.5: Membership and Role Manager. You will learn about the provider model that underlies each of these features. The internals of the feature are also discussed, as well as the SQL- and Active Directory-based providers included with them. The discussion of ASP.NET features is continued in chapter 17, which is dedicated to the ASP.NET AJAX 3.5 security integration with ASP.NET 3.5; it will also show how to authenticate and authorize users with JavaScript code written from the client-side. The book closes with a chapter about the best practices ASP.Net developers should follow to protect their applications from attack. Chapter 1 starts by refreshing ideas on application pools and worker processes. It later gets into the major components that make up IIS 7.0. Chapter 2 begins by introducing the advantages of the IIS 7.0 and ASP.NET integrated mode. Chapter 3 gives you a walkthrough of the security processing that both IIS 7.0 and ASP.NET perform in the integrated/unified request-processing pipeline. Chapter 4 defines what an ASP.NET trust level is and how ASP.NET trust levels work to provide secure environments for running web applications. Chapter 5 covers the security features in the 2.0 and 3.5 Frameworks configuration systems. Chapter 6 explains ASP.NET 2.0 and ASP.NET 3.5 features for forms authentication. Chapter 7 demonstrates using IIS 7.0 wildcard mappings and ASP.NET 2.0 and ASP.NET 3.5 support for wildcard mappings to share authentication and authorization information with Classic ASP applications. Chapter 8 covers security features and guidance for session state. Chapter 9 describes some lesser known page security features from ASP.NET 1.1 and describes how ASP.NET 2.0 and ASP.NET 3.5 options for securing viewstate and postback events. Chapter 10 gives you an architectural overview of the provider model in both ASP.NET 2.0 and ASP.NET 3.5. Chapter 11 talks about the Membership feature in ASP.NET 2.0 and ASP.NET 3.5 Chapter 12 delves into both the SqlMembershipProvider as well as general database design assumptions that are included in all of ASP.NET 2.0s and ASP.NET 3.5s SQL-based features. Chapter 13 covers other membership provider that ships in ASP.NET 2.0 and ASP.NET 3.5-ActiveDirectoryMembershipProvider. Chapter 14 describes the Role Manager feature that provides built-in authorization support for ASP.NET 2.0 and ASP.NET 3.5. Chapter 15 discusses the SqlRoleProvider and its underlying SQL schema. Chapter 16 covers the AuthorizationStoreRoleProvider, which is a provider that maps Role Manager functionality to the Authorization Manager. Chapter 17 discusses how ASP.NET AJAX 3.5 integrates with ASP.NET 3.5 Membership and Role management features through newly introduced web services. Chapter 18 covers the best practices that can be followed to secure ASP.NET applications. Bilal Haidar has authored several online articles for (http://www.aspalliance.com) www.aspalliance.com , (http://www.code-magazine.com) www.code-magazine.com , and (http://www.aspnetpro.com) www.aspnetpro.com . He is one of the top posters at the ASP.NET forums. He has been a Microsoft MVP in ASP.NET since 2004 and is also a Microsoft certified trainer. Currently, Bilal works as a senior developer for Consolidated Contractors Company (CCC), whose headquarters are based in Athens, Greece. Stefan Schackow, the previous author of this book, is a Program Manager on the Web Platform and Tools Team at Microsoft. He worked on the new application services stack in Visual Studio 2005 and owned the Membership, Role Manager, Profile, Personalization, and Site Navigation features in ASP.NET 2.0. Currently he is working on Silverlight for Microsoft. Stefan is a frequent speaker at Microsoft developer conferences. This book begins with you working along as Scott Guthrie builds a complete ASP.NET MVC reference application. He begins NerdDinner by using the File->New Project menu command within Visual Studio to create a new ASP.NET MVC Application. You'll then incrementally add functionality and features. Along the way you'll cover how to create a database, build a model layer with business rule validations, implement listing/details data browsing, provide CRUD (Create, Update, Delete) data form entry support, implement efficient data paging, reuse UI using master pages and partials, secure the application using authentication and authorization, use AJAX to deliver dynamic updates and interactive map support, and implement automated unit testing. From there, the bulk of the rest of the book begins with the basic concepts around the model view controller pattern, including the little history and the state of the MVC on the web today. We'll then go into the ways that MVC is different from ASP.NET Web Forms. We'll explore the structure of a standard MVC application and see what you get out of the box. Next we dig deep into routing and see the role URLs play in your application. We'll deep dive into controllers and views and see what role the Ajax plays in your applications. The last third of the book focuses entirely on advanced techniques and extending the framework. In some places, we assume that you're somewhat familiar with ASP.NET WebForms, at least peripherally. There are a lot of ASP.NET WebForms developers out there who are interested in ASP.NET MVC so there are a number of places in this book where we contrast the two technologies. Even if you're not already an ASP.NET developer, you might still find these sections interesting for context, as well as for your own edification as ASP.NET MVC may not be the web technology that you're looking for. ASP.NET MVC 1.0 Website Programming: Problem – Design – Solution......Page 7 About the Authors......Page 11 Credits......Page 13 Acknowledgments......Page 15 Contents......Page 17 Introduction......Page 23 What This Book Covers......Page 24 How This Book Is Structured......Page 25 What You Need to Use This Book......Page 26 Conventions......Page 27 p2p.wrox.com......Page 28 Problem......Page 31 Design......Page 32 Solution......Page 34 Summary......Page 35 The Model-View-Controller Pattern......Page 37 ASP.NET MVC vs. ASP.NET Web Forms......Page 40 Installing the Prerequisites......Page 43 Your First ASP.NET MVC Project......Page 49 The Model......Page 55 The View......Page 56 The Controller......Page 60 Summary......Page 62 Problem......Page 63 Design......Page 64 Solution......Page 80 Summary......Page 91 Problem......Page 93 Design......Page 94 Solution......Page 113 Summary......Page 114 Problem......Page 115 Design......Page 117 Design......Page 139 Solution......Page 142 Summary......Page 179 Problem......Page 181 Design......Page 183 Solution......Page 206 Summary......Page 283 Problem......Page 285 Design......Page 287 Solution......Page 292 Summary......Page 323 Problem......Page 325 Design......Page 327 Solution......Page 340 Summary......Page 355 Problem......Page 357 Design......Page 358 Solution......Page 362 Summary......Page 402 Problem......Page 405 Design......Page 406 Solution......Page 419 Summary......Page 489 Problem......Page 491 Design......Page 492 Solution......Page 501 Summary......Page 506 Problem......Page 507 Design......Page 508 Solution......Page 510 Summary......Page 532 Index......Page 533 "This book begins with you working along as Scott Guthrie builds a complete ASP.NET MVC reference application. He begins NerdDinner by using the File->New Project menu command within Visual Studio to create a new ASP.NET MVC Application. You'll then incrementally add functionality and features. Along the way you'll cover how to create a database, build a model layer with business rule validations, implement listing/details data browsing, provide CRUD (Create, Update, Delete) data form entry support, implement efficient data paging, reuse UI using master pages and partials, secure the application using authentication and authorization, use AJAX to deliver dynamic updates and interactive map support, and implement automated unit testing. From there, the bulk of the rest of the book begins with the basic concepts around the model view controller pattern, including the little history and the state of the MVC on the web today. We'll then go into the ways that MVC is different from ASP.NET Web Forms. We'll explore the structure of a standard MVC application and see what you get out of the box. Next we dig deep into routing and see the role URLs play in your application. We'll deep dive into controllers and views and see what role the Ajax plays in your applications. The last third of the book focuses entirely on advanced techniques and extending the framework."--Product description This book is aimed at experienced ASP.NET developers looking to add AJAX to their applications, and experienced Web developers who want to move to using ASP.NET and AJAX together. The focus here is on how you can extend ASP.NET applications to update portions of the page asynchronously and to add richer UI elements to a page. ASP.NET AJAX makes it easy to enrich your existing application or to design a new application to provide a better experience for users. The differences among modern browsers have been abstracted, allowing you to write to a common set of APIs and trust that the user will get the correct behavior whether they are using Internet Explorer, Firefox, or Safari. This book covers ASP.NET 3.5 AJAX but not ASP.NET 3.5, on which ASP.NET AJAX is built. The examples lead you from the core of what is included in the ASP.NET AJAX Library through the core controls you would first start using. You build on that using the core JavaScript library and the ASP.NET AJAX Toolkit. Detailed coverage

• Uses the popular Problem;Design;Solution format to help readers, especially those who know how to code specific ASP.NET features, learn to "put it all together" into a complete Web application
• Emphasizes n-tier ASP.NET Web application architectural design, something intermediate and advanced ASP.NET developers need and can't find anywhere else
• Current edition is the most popular and discussed book in the p2p.wrox.com reader discussion forums
• Covers registration and membership system, user-selectable themes, content management systems, polls, mailing lists, forums, e-commerce stores, shopping carts, order management with real-time credit-card processing, localization, and other site features
• Developers also learn to handle master pages, themes, profiles, Web parts, server-side UI controls, compilation, deployment, instrumentation, error handling and logging, data access with ADO.NET and LINQ, ASP.NET AJAX, and much more

"ASP.NET security covers concepts such as Web security, developing in partial trust, forms authentication, and securing configuration - just to name a few - all integral components to helping developers ensure reliable security. Addressing the ASRNET developer's security view, this book offers detailed information on every major area of ASP.NET security that you'll encounter when developing Web applications. The book covers security in ASP.NET in general and includes the new additions and changes in ASP.NET 3.5." "Microsoft MVP Bilal Haldar covers the security highlights and new features of Internet Information Services (IIS) 7.0, and offers a detailed look at the request lifecycle, as well as clear explanations of AJAX authentication and authorization. You'll explore ASP.NET Session State, Membership, and Role Management so you will have a solid ability to develop secure and robust Web sites with ASP.NET 3.5 in VB or C# code." --Book Jacket

Perfectly suited to the innovative Problem—Design—Solution approach, ASP.NET MVC is a new development model that separates code for the data, look, and business processes of a Web site. This nuts-and-bolts guide thoroughly covers creating a Web site with MVC and discusses solving the most common problems that you may encounter when creating your first application or trying to upgrade a current application. The material is based on the highly praised and widely used 'TheBeerHouse? ASP.NET Starter Kit that was developed in the bestselling ASP.NET 2.0 Website Programming: Problem-Design'Solution. Additional coverage includes registration and membership systems and user-selectable themes; content management systems for articles and photos; polls, mailing lists, and forums; e-commerce stores, shopping carts, and order management with real-time credit card processing, and more.

Perfectly suited to the innovative Problem ? Design ? Solution approach, ASP.NET MVC is a new development model that separates code for the data, look, and business processes of a Web site. This nuts-and-bolts guide thoroughly covers creating a Web site with MVC and discusses solving the most common problems that you may encounter when creating your first application or trying to upgrade a current application. The material is based on the highly praised and widely used ?TheBeerHouse? ASP.NET Starter Kit that was developed in the bestselling ASP.NET 2.0 Website Programming: Problem?Design?Solution. Additional coverage includes registration and membership systems and user-selectable themes; content management systems for articles and photos; polls, mailing lists, and forums; e-commerce stores, shopping carts, and order management with real-time credit card processing, and more. "ASP.NET MVC integrates powerful new functionality that enables you to create ASP.NET sites based on the important Model-View-Controller pattern. Beyond just understanding the key MVC benefits and coding techniques, you'll see how to implement the ASP.NET MVC pattern to build a complete real-world site." "Based on Marco Bellinaso's classic TheBeerHouse ASP.NET 2.0 site example, each chapter presents a business requirement for the site, a roadmap for designing a solution, and the code for implementing the features. By the end of the book, you'll have a complete functional site and the skills to build your own ASP.NET MVC content and e-commerce site."--BOOK JACKET Perfectly suited to the innovative Problem Design Solution approach, ASP.NET MVC is a new development model that separates code for the data, look, and business processes of a Web site. This nuts-and-bolts guide thoroughly covers creating a Web site with MVC and discusses solving the most common problems that you may encounter when creating your first application or trying to upgrade a current application. The material is based on the highly praised and widely used TheBeerHouse ASP.NET Starter Kit that was developed in the bestselling ASP.NET 2.0 Website Programming: ProblemÂ?DesignÂ?Solution. As the only book to address ASP.NET 3.5, AJAX, and IIS 7 security from the developer's point of view, this book begins with a look at the new features of IIS 7.0 and then goes on to focus on IIS 7.0 and ASP.NET 3.5 integration. You'll walk through a detailed explanation of the request life cycle for an ASP.NET application running on IIS 7.0 under the classic mode, from the moment it enters IIS 7.0 until ASP.NET generates a corresponding response. Furnishes a ready-to-use production framework for creating dynamic Web sites using ASP.NET 3.5, emphasizing n-tier ASP.NET Web application architectural design while covering such topics as content management systems, mailing lists, e-commerce stores, localization, error handling and logging, and data access. "By emphasizing n-tier ASP.NET web application architectural design, this unique book takes good website design beyond page-by-page coding to explain how to implement core features, including master pages, themes, membership, profiles, and personalization."--Books24x7 website