Product Description
ASP.NET Website Programming shows you how to build an interactive website from design to deployment.

Packed with solutions to website programming problems, this book will have you building well-engineered, extendable ASP.NET websites quickly and easily.

With ASP.NET Website Programming you will learn to:

*Establish a solid, scalable website foundation
*Provide flexible user accounts integrating with ASP.NET’s built-in security
*Create message forums that enable formatted messages but defend against cross-site scripting
*Generate revenue from advertising
*Build a web interface for uploading, downloading, editing, and managing the files on your site
*Add opinion polls, email newsletters, and news management
*Deploy the finished site on a live server
*Build websites using good, n-tier coding techniques

The site we build is modular. You can slot the modules into your own website, modify them, or use them as examples of particular ASP.NET techniques.

The book’s P2P forum is a platform for exchanging code and ideas, helping to extend the website with new modules and modifications.

ASP.NET Website Programming: Problem – Design – Solution C# Edition

Product Description
Delivering rich, Web 2.0-style experiences has never been easier. This book gives you a complete hands-on introduction to Microsoft ASP.NET AJAX 1.0, the new framework that offers many of the same benefits for Ajax development that ASP.NET provides for server-side development. With Programming ASP.NET AJAX, you’ll learn how to create professional, dynamic web pages with Ajax in no time.Loaded with code and examples that demonstrate key aspects of the framework, this book is ideal not only for ASP.NET developers who want to take their applications a step further with Ajax, but for any web developers interested in ASP.NET AJAX, no matter what technology they use currently. That includes JavaScript programmers who would like to avoid the headaches of writing cross-browser code.Programming ASP.NET AJAX offers you:A high-level overview of the ASP.NET AJAX frameworkFunctional code that you can cut and paste for use in your own applicationsThe essentials of JavaScript and Ajax to help you understand individual technologies used by the frameworkAn organization that reflects the framework’s packages, including Extensions, Control Toolkit, the Futures CTP, and the AJAX LibrarySidebars throughout the book that identify and propose solutions to potential security breachesWays to use the standards-based AJAX Library with other platforms, such as PHPA complete chapter on the UpdatePanel control for making individual parts of a web page independently updateable — one of the framework’s most important elementsReleased previously as Programming Atlas to cover the beta version of the Microsoft framework, this edition is fully up-to-date and expanded for the official 1.0 release of ASP.NET AJAX. Written by Christian Wenz — Microsoft MVP for ASP/ASP.NET and AJAX Control Toolkit Contributor — Programming ASP.NET AJAX contains many hard-to-find details, along with a few unofficial ways to accomplish things.

Programming ASP.NET AJAX

• ISBN13: 9780596515812
• Condition: USED – Very Good
• Notes: BUY WITH CONFIDENCE, Over one million books sold! 98% Positive feedback. Compare our books, prices and service to the competition. 100% Satisfaction Guaranteed

Product Description
Building on the success of its storefront and fulfillment services, Amazon now allows businesses to “rent” computing power, data storage and bandwidth on its vast network platform. This book demonstrates how developers working with small- to mid-sized companies can take advantage of Amazon Web Services (AWS) such as the Simple Storage Service (S3), Elastic Compute Cloud (EC2), Simple Queue Service (SQS), Flexible Payments Service (FPS), and SimpleDB to build web-scale business applications.With AWS, Amazon offers a new paradigm for IT infrastructure: use what you need, as you need it, and pay as you go. Programming Amazon Web Services explains how you can access Amazon’s open APIs to store and run applications, rather than spend precious time and resources building your own. With this book, you’ll learn all the technical details you need to: Store and retrieve any amount of data using application servers, unlimited data storage, and bandwidth with the Amazon S3 serviceBuy computing time using Amazon EC2′s interface to requisition machines, load them with an application environment, manage access permissions, and run your image using as many or few systems as neededUse Amazon’s web-scale messaging infrastructure to store messages as they travel between computers with Amazon SQSLeverage the Amazon FPS service to structure payment instructions and allow the movement of money between any two entities, humans or computersCreate and store multiple data sets, query your data easily, and return the results using Amazon SimpleDB.Scale up or down at a moment’s notice, using these services to employ as much time and space as you needWhether you’re starting a new online business, need to ramp up existing services, or require an offsite backup for your home, Programming Amazon Web Services gives you the background and the practical knowledge you need to start using AWS. Other books explain how to build web services. This book teaches businesses how to take make use of existing services from an established technology leader.Amazon.com Review
Product Description
Building on the success of its storefront and fulfillment services, Amazon now allows businesses to “rent” computing power, data storage and bandwidth on its vast network platform. This book demonstrates how developers working with small- to mid-sized companies can take advantage of Amazon Web Services (AWS) such as the Simple Storage Service (S3), Elastic Compute Cloud (EC2), Simple Queue Service (SQS), Flexible Payments Service (FPS), and SimpleDB to build web-scale business applications. With AWS, Amazon offers a new paradigm for IT infrastructure: use what you need, as you need it, and pay as you go. Programming Web Services explains how you can access Amazon’s open APIs to store and run applications, rather than spend precious time and resources building your own. With this book, you’ll learn all the technical details you need to: Store and retrieve any amount of data using application servers, unlimited data storage, and bandwidth with the Amazon S3 service Buy computing time using Amazon EC2′s interface to requisition machines, load them with an application environment, manage access permissions, and run your image using as many or few systems as needed Use Amazon’s web-scale messaging infrastructure to store messages as they travel between computers with Amazon SQS Leverage the Amazon FPS service to structure payment instructions and allow the movement of money between any two entities, humans or computers Create and store multiple data sets, query your data easily, and return the results using Amazon SimpleDB. Scale up or down at a moment’s notice, using these services to employ as much time and space as you need Whether you’re starting a new online business, need to ramp upexisting services, or require an offsite backup for your home, Programming Web Services gives you the background and the practical knowledge you need to start using AWS. Other books explain how to build web services. This book teaches businesses how to take make use of existing services from an established technology leader.

Create HTML POST Forms That Allow Your Web Site Visitors to Upload Files Into Your S3 Account Using a Standard Web Browser
By James Murty, creator of the JetS3t Java S3 library and author of Programming Amazon Web Services

Amazons Simple Storage Service (S3) provides cheap and unlimited online data storage for anyone with a credit card and an Amazon Web Service (AWS) account. If you have an AWS account, you can interact with the S3 service using specialized tools to upload and manage your files. It is very convenient to have access to this online storage resource for yourself, but there may be situations where you would like to allow others to upload files into your account.

For this purpose, S3 accepts uploads via specially-crafted and pre-authorized HTML POST forms. You can include these forms in any web page to allow your web site visitors to send you files using nothing more than a standard web browser.

In this article, I will demonstrate how to build simple S3 POST forms. I will assume that you have already signed up for the S3 service, and that you have an S3 client program for creating buckets and viewing files in your account. Before you proceed, create your own bucket to store uploaded files in the examples below I will use a bucket named s3-bucket.

POST Form Web Page

Here is a web page with an S3 POST Form that you can use as a template for your own forms:

                            







                     File to upload to S3:
 
       

         

This template demonstrates some important features of an S3 POST form, and the web page that contains it:

• The web page that contains the form has a meta tag in the head section that tells web browsers to use the UTF-8 unicode character encoding.
• The forms action parameter specifies an S3 URL that includes the name of your destination bucket, in this case the bucket called s3-bucket.
• The form contains a number of input fields with parameter names and values that will be sent to the S3 service. If any required input fields are missing, or if a field has an incorrect value, the service will not accept uploads from the form.

The S3 service uses information from the forms input fields to authorize uploads, and to set the properties of uploaded file objects. Here is a description of the most common input fields:

This overview of the forms input fields should help you to modify the template POST form to suit your own purposes. At a minimum, you will need to edit the forms action parameter to point to your own S3 bucket, and set the value of the AWSAccessKeyId field to your AWS Access Key credential.

To complete the form and make it acceptable to the S3 service, you will also need to generate a policy document and signature value.

Policy Document

S3 POST forms include a policy document that authorizes the form and imposes limits on the files that can be uploaded. When S3 receives a file via a POST form, it will check the policy document and signature to confirm that the form was created by someone who is allowed to store files in the target S3 account.

A policy document is a collection of properties expressed in JavaScript Object Notation, which simply means that the documents structure and content must conform to a certain format. Every policy document contains two top-level items:

• expiration – A Greenwich Mean Time (GMT) timestamp that specifies when the policy document will expire. Once a policy document has expired, the upload form will no longer work.
• conditions – A set of rules to define the values that may be included in the forms input fields, and to impose size limits for file uploads.

Here is a policy document corresponding to the POST form template above. This policy has an expiration date of January 1st 2009:

{"expiration": "2009-01-01T00:00:00Z",    "conditions": [       {"bucket": "s3-bucket"},       ["starts-with", "$key", "uploads/"],      {"acl": "private"},      {"success_action_redirect": "http://localhost/"},      ["starts-with", "$Content-Type", ""],      ["content-length-range", 0, 1048576]    ]  }  

To create a valid S3 POST form, you must include a policy document whose conditions section contains a rule for almost every input field in the form. At a minimum, this document must include rules for the bucket and key values of the uploaded file object. In addition to these two rules, you will need to include a rule for every other input field in the form except for AWSAccessKeyId, signature, policy and file.

Because our template POST form includes the input fields acl, success_action_redirect, and Content-Type, our policy document includes rules corresponding to these fields. Our policy document also includes an extra content-length-range rule that limits the size of files that can be uploaded.

There are three kinds of rules you can apply in your policy document:

1. Equality rule, which checks that an input fields value is set to a given string. An equality rule is expressed as a name and value pair within brace characters, for example: {"acl": "private"}
2. Starts-With rule, which checks that an input fields value begins with a given string. If the given string is empty, S3 will check only that the field is present in the form and will not care what value it contains. A starts-with rule is expressed as a three-element array that contains the term starts-with, followed by the name of the input field preceded by a $ symbol, then the prefix string value for comparison.
   In the policy document above, we use starts-with rules for the key and Content-Type fields because we do not know in advance the name of the file a user will upload, or what type of file it will be. The rule for the Content-Type field uses an empty string for comparison, which means it will permit any content type value. The rule for the objects key name uses the prefix string upload/, which means that the key value must always start with the upload/ subdirectory path.
3. Content length rule, which checks that the size of an uploaded file is between a given minimum and maximum value. If this rule is not included in a policy document, users will be able to upload files of any size up to the 5GB limit imposed by S3.
   A content length rule is expressed as a three-element array that contains the term content-length-range, followed by integer values to set the minimum and maximum file size. The policy document above includes a content length rule that will prevent the form from uploading files larger than 1MB in size (1,048,576 bytes).

It is important to make sure that your policy document corresponds exactly to your S3 POST form. If there are any discrepancies between the input field values in your form and the rule values in your policy document, or if your form contains input fields that do not have corresponding rules in your policy, the S3 service will reject the form and return an incomprehensible XML error message to your users.

Sign Your S3 POST Form

To complete your S3 POST form, you must sign it to prove to S3 that you actually created the form. If you do not sign the form properly, or if someone else tries to modify your form after it has been signed, the service will be unable to authorize it and will reject the upload.

To sign your form you need to perform two steps:

1. Base64-encode the policy document, and include it in the forms policy input field.
2. Calculate a signature value (SHA-1 HMAC) from the encoded policy document using your AWS Secret Key credential as a password. Include this value in the forms signature input field after Base64-encoding it.

Almost all programming languages include libraries for performing these two steps. Here are some example code fragments to do the job with different languages, assuming you have already defined the variables policy_document and aws_secret_key.

Ruby

require 'base64'  require 'openssl'  require 'digest/sha1'    policy = Base64.encode64(policy_document).gsub("n","")    signature = Base64.encode64(      OpenSSL::HMAC.digest(          OpenSSL::Digest::Digest.new('sha1'),           aws_secret_key, policy)      ).gsub("n","")  

Java

import sun.misc.BASE64Encoder;  import javax.crypto.Mac;  import javax.crypto.spec.SecretKeySpec;    String policy = (new BASE64Encoder()).encode(      policy_document.getBytes("UTF-8")).replaceAll("n","");    Mac hmac = Mac.getInstance("HmacSHA1");  hmac.init(new SecretKeySpec(      aws_secret_key.getBytes("UTF-8"), "HmacSHA1"));  String signature = (new BASE64Encoder()).encode(      hmac.doFinal(policy.getBytes("UTF-8")))      .replaceAll("n", "");  

Python

import base64  import hmac, sha    policy = base64.b64encode(policy_document)    signature = base64.b64encode(      hmac.new(aws_secret_key, policy, sha).digest())  

Once you have calculated the values for the policy and signature input fields and included these values in your form, the form should be complete. Save the web page and form document as an .html file, open it in your favorite web browser, and test it by uploading some files to your S3 bucket.

Conclusion

The form web page and policy document templates in this article should give you a starting point for creating your own upload forms. With some minor modifications to the template documents and a little coding, you will be able to create authorized forms that make it easy for your web site visitors to upload files to your S3 account.

The S3 services POST support is a powerful feature with many potential uses. You could create a single upload form to allow your friends and colleagues to send you files that are too large for email, or you could modify your web applications to generate forms on-demand so your users can store their data in S3 rather than on your own server. Just remember that you will be liable for any S3 data transfer and storage fees incurred by the people who use your forms.

Programming Amazon Web Services: S3, EC2, SQS, FPS, and SimpleDB