Source code for web applications

[Max]

Is it possible for an ASP.net server (like IIS 6) to run web application
without having available the code behind forms in clear ascii? Can I provide
a compiled product to the customer, not an exe file of course, but some dll
compiled by my server ?
I'm asking that because 1. sometimes I am not happy to provide my source
code 2.customer is afraid of their internal security...

Thanks
Max

[Stan]

On 8 May, 20:14, "Max" <mmwrote:

Is it possible for an ASP.net server (like IIS 6) to run web application
without having available the code behind forms in clear ascii? Can I provide
a compiled product to the customer, not an exe file of course, but some dll
compiled by my server ?
I'm asking that because 1. sometimes I am not happy to provide my source
code 2.customer is afraid of their internal security...

Thanks
Max

DLL files that reside in the bin directory of the site are not
compiled by the server. They are precompiled on the development
machine using Visual Studio. VS2005 and later have a Publish option
which does this. So the answer is yes you can deploy them pre-
compiled. Make sure that they are in release form not debug which can
lay them open to reverse engineering.

If you are worried about security its worth reading the Microsoft
documentation for guidance on best practices. Beware that some files,
e.g. web.config have to remain in pain text (XML formatted) so avoid
any sensitive stuff there (e.g. use encryption for passwords).

Having said that, there is no need to worry unduly about source code
file or other plain text system file content being freely available to
anyone browsing the site. It isn't. It requires local administrative
access to the web server or special hacking tools for remote access to
get into them. IIS won't touch them.

HTH

[Mark Rae [MVP]]

"Max" <mmwrote in message
news:48******** *************** @reader1.news.t in.it...

Is it possible for an ASP.net server (like IIS 6) to run web application
without having available the code behind forms in clear ascii? Can I
provide a compiled product to the customer, not an exe file of course, but
some dll compiled by my server ?

This is one of the many features of Web Deployment Projects:
http://weblogs.asp.net/scottgu/archi...-released.aspx
--
Mark Rae
ASP.NET MVP
http://www.markrae.net

[Teemu Keiski]

Hi,

if you develop ASP.NET application with Visual Studio and using web
application project model, you essentially deploy markup files e.g aspx
(ascx,asmx etc) and dll files to the server, and there's no need to deploy
the code-behind files. Idea is that code-behind is compiled to the dll, and
therefore isn't viewable so directly (to add: you can also obfuscate dlls).

--
Teemu Keiski
AspInsider, ASP.NET MVP
http://blogs.aspadvice.com/joteke
http://teemukeiski.net

"Max" <mmwrote in message
news:48******** *************** @reader1.news.t in.it...

Is it possible for an ASP.net server (like IIS 6) to run web application
without having available the code behind forms in clear ascii? Can I
provide a compiled product to the customer, not an exe file of course, but
some dll compiled by my server ?
I'm asking that because 1. sometimes I am not happy to provide my source
code 2.customer is afraid of their internal security...

Thanks
Max

[Max]

Understand that Express version doesn't offer this option. have looked for a
"deploy" or "publish" option but in vain, while Enterprise or Pro seem to
have it, afa I can read.
MS gave us a gift, but without the red staple.
Max
"Teemu Keiski" <jo****@aspalli ance.comha scritto nel messaggio
news:O1******** ******@TK2MSFTN GP05.phx.gbl...

Hi,

if you develop ASP.NET application with Visual Studio and using web
application project model, you essentially deploy markup files e.g aspx
(ascx,asmx etc) and dll files to the server, and there's no need to deploy
the code-behind files. Idea is that code-behind is compiled to the dll,
and therefore isn't viewable so directly (to add: you can also obfuscate
dlls).

--
Teemu Keiski
AspInsider, ASP.NET MVP
http://blogs.aspadvice.com/joteke
http://teemukeiski.net

"Max" <mmwrote in message
news:48******** *************** @reader1.news.t in.it...

>Is it possible for an ASP.net server (like IIS 6) to run web application
without having available the code behind forms in clear ascii? Can I
provide a compiled product to the customer, not an exe file of course,
but some dll compiled by my server ?
I'm asking that because 1. sometimes I am not happy to provide my source
code 2.customer is afraid of their internal security...

Thanks
Max

[Juan T. Llibre]

re:
!Understand that Express version doesn't offer this option. have looked for a
!"deploy" or "publish" option but in vain, while Enterprise or Pro seem to
!have it, afa I can read. MS gave us a gift, but without the red staple.

ASP.NET comes with the tools to compile any .NET code that you
write regardless of the development environment that you prefer to work in.

Sample batch file :

set frmwk=Drive:\WI NDOWS\Microsoft .NET\Framework\ v2.0.50727
set src=Drive:\vwds ite
set dest=Drive:\vwd site\compiled
del /F /Q Drive:\vwdsite\ compiled\*.*
%frmwk%\aspnet_ compiler -v /vwdsite -p %src% %dest% -c

Just substitute your actual boot drive letter anywhere "Drive" appears in the batch file.
After you compile, just upload all the files in Drive:\vwdsite\ compiled

Also, you can modify VWD's menu so you can automate
batch compiling your VWD-developed applications.

See this article for the details on how to do that :
http://safari.oreilly.com/9780789736659/ch03lev1sec2

More background info on this process is found at :
http://www.informit.com/articles/article.aspx?p=1073232

As you can see, your gift isn't maimed.

Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
=============== =============== ========
"Max" <mmwrote in message news:48******** *************** @reader1.news.t in.it...

Understand that Express version doesn't offer this option. have looked for a "deploy" or "publish" option but in vain,
while Enterprise or Pro seem to have it, afa I can read.
MS gave us a gift, but without the red staple.
Max
"Teemu Keiski" <jo****@aspalli ance.comha scritto nel messaggio news:O1******** ******@TK2MSFTN GP05.phx.gbl...

>Hi,

if you develop ASP.NET application with Visual Studio and using web application project model, you essentially deploy
markup files e.g aspx (ascx,asmx etc) and dll files to the server, and there's no need to deploy the code-behind
files. Idea is that code-behind is compiled to the dll, and therefore isn't viewable so directly (to add: you can
also obfuscate dlls).

--
Teemu Keiski
AspInsider, ASP.NET MVP
http://blogs.aspadvice.com/joteke
http://teemukeiski.net

"Max" <mmwrote in message news:48******** *************** @reader1.news.t in.it...

>>Is it possible for an ASP.net server (like IIS 6) to run web application without having available the code behind
forms in clear ascii? Can I provide a compiled product to the customer, not an exe file of course, but some dll
compiled by my server ?
I'm asking that because 1. sometimes I am not happy to provide my source code 2.customer is afraid of their internal
security...

Thanks
Max

[Max]

Juan,
you really gave me a huge help. I was unable to find such information on the
web, and I searched a lot before posting.
I've tried, and with a syntax similar to yours, I was able to compile a
application and have a server running it (with web dev express 2005!)
Only one question, it seems necessary to have IIS running on the machine
where it is compiled. A virtual IIS directory is needed. I could not compile
in any way from a physical path to a physical path.
Is that true?

Thanks
Max

"Juan T. Llibre" <no***********@ nowhere.comha scritto nel messaggio
news:e9******** ******@TK2MSFTN GP04.phx.gbl...

re:
!Understand that Express version doesn't offer this option. have looked
for a
!"deploy" or "publish" option but in vain, while Enterprise or Pro seem
to
!have it, afa I can read. MS gave us a gift, but without the red staple.

ASP.NET comes with the tools to compile any .NET code that you
write regardless of the development environment that you prefer to work
in.

Sample batch file :

set frmwk=Drive:\WI NDOWS\Microsoft .NET\Framework\ v2.0.50727
set src=Drive:\vwds ite
set dest=Drive:\vwd site\compiled
del /F /Q Drive:\vwdsite\ compiled\*.*
%frmwk%\aspnet_ compiler -v /vwdsite -p %src% %dest% -c

Just substitute your actual boot drive letter anywhere "Drive" appears in
the batch file.
After you compile, just upload all the files in Drive:\vwdsite\ compiled

Also, you can modify VWD's menu so you can automate
batch compiling your VWD-developed applications.

See this article for the details on how to do that :
http://safari.oreilly.com/9780789736659/ch03lev1sec2

More background info on this process is found at :
http://www.informit.com/articles/article.aspx?p=1073232

As you can see, your gift isn't maimed.

Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
=============== =============== ========
"Max" <mmwrote in message
news:48******** *************** @reader1.news.t in.it...

>Understand that Express version doesn't offer this option. have looked
for a "deploy" or "publish" option but in vain,
while Enterprise or Pro seem to have it, afa I can read.
MS gave us a gift, but without the red staple.
Max
"Teemu Keiski" <jo****@aspalli ance.comha scritto nel messaggio
news:O1******* *******@TK2MSFT NGP05.phx.gbl.. .

>>Hi,

if you develop ASP.NET application with Visual Studio and using web
application project model, you essentially deploy
markup files e.g aspx (ascx,asmx etc) and dll files to the server, and
there's no need to deploy the code-behind
files. Idea is that code-behind is compiled to the dll, and therefore
isn't viewable so directly (to add: you can
also obfuscate dlls).

--
Teemu Keiski
AspInsider, ASP.NET MVP
http://blogs.aspadvice.com/joteke
http://teemukeiski.net

"Max" <mmwrote in message
news:48****** *************** **@reader1.news .tin.it...
Is it possible for an ASP.net server (like IIS 6) to run web
applicatio n without having available the code behind
forms in clear ascii? Can I provide a compiled product to the customer,
not an exe file of course, but some dll
compiled by my server ?
I'm asking that because 1. sometimes I am not happy to provide my
source code 2.customer is afraid of their internal
security.. .

Thanks
Max

[Max]

Correction.
I was able to compile the application from a physical path to another
physical path (C:\aaaa\ to C:\bbb\)
No IIS or virtual path involved. Really happy with that.
Gift is perfectly maimed, and now you can't look inside!!!!
Thanks again
"Max" <mmha scritto nel messaggio
news:48******** *************** @reader4.news.t in.it...

Juan,
you really gave me a huge help. I was unable to find such information on
the web, and I searched a lot before posting.
I've tried, and with a syntax similar to yours, I was able to compile a
application and have a server running it (with web dev express 2005!)
Only one question, it seems necessary to have IIS running on the machine
where it is compiled. A virtual IIS directory is needed. I could not
compile in any way from a physical path to a physical path.
Is that true?

Thanks
Max

"Juan T. Llibre" <no***********@ nowhere.comha scritto nel messaggio
news:e9******** ******@TK2MSFTN GP04.phx.gbl...

>re:
!Understand that Express version doesn't offer this option. have looked
for a
!"deploy" or "publish" option but in vain, while Enterprise or Pro seem
to
!have it, afa I can read. MS gave us a gift, but without the red
staple.

ASP.NET comes with the tools to compile any .NET code that you
write regardless of the development environment that you prefer to work
in.

Sample batch file :

set frmwk=Drive:\WI NDOWS\Microsoft .NET\Framework\ v2.0.50727
set src=Drive:\vwds ite
set dest=Drive:\vwd site\compiled
del /F /Q Drive:\vwdsite\ compiled\*.*
%frmwk%\aspnet _compiler -v /vwdsite -p %src% %dest% -c

Just substitute your actual boot drive letter anywhere "Drive" appears in
the batch file.
After you compile, just upload all the files in Drive:\vwdsite\ compiled

Also, you can modify VWD's menu so you can automate
batch compiling your VWD-developed applications.

See this article for the details on how to do that :
http://safari.oreilly.com/9780789736659/ch03lev1sec2

More background info on this process is found at :
http://www.informit.com/articles/article.aspx?p=1073232

As you can see, your gift isn't maimed.

Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
============== =============== =========
"Max" <mmwrote in message
news:48******* *************** *@reader1.news. tin.it...

>>Understand that Express version doesn't offer this option. have looked
for a "deploy" or "publish" option but in vain,
while Enterprise or Pro seem to have it, afa I can read.
MS gave us a gift, but without the red staple.
Max
"Teemu Keiski" <jo****@aspalli ance.comha scritto nel messaggio
news:O1****** ********@TK2MSF TNGP05.phx.gbl. ..
Hi,

if you develop ASP.NET application with Visual Studio and using web
applicatio n project model, you essentially deploy
markup files e.g aspx (ascx,asmx etc) and dll files to the server, and
there's no need to deploy the code-behind
files. Idea is that code-behind is compiled to the dll, and therefore
isn't viewable so directly (to add: you can
also obfuscate dlls).

--
Teemu Keiski
AspInsider , ASP.NET MVP
http://blogs.aspadvice.com/joteke
http://teemukeiski.net

"Max" <mmwrote in message
news:48***** *************** ***@reader1.new s.tin.it...
Is it possible for an ASP.net server (like IIS 6) to run web
applicati on without having available the code behind
forms in clear ascii? Can I provide a compiled product to the
customer, not an exe file of course, but some dll
compiled by my server ?
I'm asking that because 1. sometimes I am not happy to provide my
source code 2.customer is afraid of their internal
security. ..
>
Thanks
Max
>
>
>

[Juan T. Llibre]

re:
!Really happy with that
!Thanks again

You're quite welcome, Max. It's great when obstacles can be removed.

I hope you get a zillion hits a day on your site... ;-)


Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
=============== =============== ========
"Max" <mmwrote in message news:48******** *************** @reader4.news.t in.it...

Correction.
I was able to compile the application from a physical path to another physical path (C:\aaaa\ to C:\bbb\)
No IIS or virtual path involved. Really happy with that.
Gift is perfectly maimed, and now you can't look inside!!!!
Thanks again
"Max" <mmha scritto nel messaggio news:48******** *************** @reader4.news.t in.it...

>Juan,
you really gave me a huge help. I was unable to find such information on the web, and I searched a lot before
posting.
I've tried, and with a syntax similar to yours, I was able to compile a application and have a server running it
(with web dev express 2005!)
Only one question, it seems necessary to have IIS running on the machine where it is compiled. A virtual IIS
directory is needed. I could not compile in any way from a physical path to a physical path.
Is that true?

Thanks
Max

"Juan T. Llibre" <no***********@ nowhere.comha scritto nel messaggio news:e9******** ******@TK2MSFTN GP04.phx.gbl...

>>re:
!Understand that Express version doesn't offer this option. have looked for a
!"deploy" or "publish" option but in vain, while Enterprise or Pro seem to
!have it, afa I can read. MS gave us a gift, but without the red staple.

ASP.NET comes with the tools to compile any .NET code that you
write regardless of the development environment that you prefer to work in.

Sample batch file :

set frmwk=Drive:\WI NDOWS\Microsoft .NET\Framework\ v2.0.50727
set src=Drive:\vwds ite
set dest=Drive:\vwd site\compiled
del /F /Q Drive:\vwdsite\ compiled\*.*
%frmwk%\aspne t_compiler -v /vwdsite -p %src% %dest% -c

Just substitute your actual boot drive letter anywhere "Drive" appears in the batch file.
After you compile, just upload all the files in Drive:\vwdsite\ compiled

Also, you can modify VWD's menu so you can automate
batch compiling your VWD-developed applications.

See this article for the details on how to do that :
http://safari.oreilly.com/9780789736659/ch03lev1sec2

More background info on this process is found at :
http://www.informit.com/articles/article.aspx?p=1073232

As you can see, your gift isn't maimed.

Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
============= =============== ==========
"Max" <mmwrote in message news:48******** *************** @reader1.news.t in.it...
Understand that Express version doesn't offer this option. have looked for a "deploy" or "publish" option but in
vain,
while Enterprise or Pro seem to have it, afa I can read.
MS gave us a gift, but without the red staple.
Max
"Teemu Keiski" <jo****@aspalli ance.comha scritto nel messaggio news:O1******** ******@TK2MSFTN GP05.phx.gbl...
Hi,
>
if you develop ASP.NET application with Visual Studio and using web application project model, you essentially
deploy
markup files e.g aspx (ascx,asmx etc) and dll files to the server, and there's no need to deploy the code-behind
files. Idea is that code-behind is compiled to the dll, and therefore isn't viewable so directly (to add: you can
also obfuscate dlls).
>
--
Teemu Keiski
AspInside r, ASP.NET MVP
http://blogs.aspadvice.com/joteke
http://teemukeiski.net
>
>
>
"Max" <mmwrote in message news:48******** *************** @reader1.news.t in.it...
>Is it possible for an ASP.net server (like IIS 6) to run web application without having available the code behind
>forms in clear ascii? Can I provide a compiled product to the customer, not an exe file of course, but some dll
>compiled by my server ?
>I'm asking that because 1. sometimes I am not happy to provide my source code 2.customer is afraid of their
>internal
>security.. .
>>
>Thanks
>Max
>>
>>
>>
>
>