473,326 Members | 2,815 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,326 software developers and data experts.

Image.Save(string) Security permissions

Hi all,

I was wondering if anybody knows why Image.save(pathstring) is allowed in
ASP.net without any security permissions . the user can create an image and
save it in the web page directory, but if we try to write a file to hard
disk in asp.net it needs permission. Isn't it less secure to allow images to
be saved?

Any feedback is appreciated
thnx
Nov 16 '05 #1
3 4003
Hello walid,

As long as the user that aspnet worker process runs under has a permission
to write to certain directory, it does. It all depends on how you set it up.
Hi all,

I was wondering if anybody knows why Image.save(pathstring) is allowed
in ASP.net without any security permissions . the user can create an
image and save it in the web page directory, but if we try to write a
file to hard disk in asp.net it needs permission. Isn't it less secure
to allow images to be saved?

Any feedback is appreciated
thnx

Nov 16 '05 #2
Yes, but how come if you are using the default security settings, the
image.save (string path) is allowed but IO stream write is not.

regards

"Hayato Iriumi" <hi*****@hotmail.com> wrote in message
news:33*********************@news.microsoft.com...
Hello walid,

As long as the user that aspnet worker process runs under has a permission
to write to certain directory, it does. It all depends on how you set it
up.
Hi all,

I was wondering if anybody knows why Image.save(pathstring) is allowed
in ASP.net without any security permissions . the user can create an
image and save it in the web page directory, but if we try to write a
file to hard disk in asp.net it needs permission. Isn't it less secure
to allow images to be saved?

Any feedback is appreciated
thnx


Nov 16 '05 #3
walid <wk*******@hotmail.com> wrote:
Yes, but how come if you are using the default security settings, the
image.save (string path) is allowed but IO stream write is not.


I believe it is - it just depends on where you're saving it to, and
whether the ASP.NET process has permission to write there.

--
Jon Skeet - <sk***@pobox.com>
http://www.pobox.com/~skeet
If replying to the group, please do not mail me too
Nov 16 '05 #4

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

0
by: Bob | last post by:
My understanding of the image string function is this, that it allows the display of text in Graphics As per the parameters it receives: ImageString($image,6,$xpos,$ypos,$out,$col) these...
2
by: Barry | last post by:
Hi Does anyone know why i am getting the following error message (line 64) , if i change to objBitmap.Save(Response.OutputStream, ImageFormat.Jpeg) i do not get this error Exception...
0
by: walid | last post by:
Hi all, I was wondering if anybody knows why Image.save(pathstring) is allowed in ASP.net without any security permissions . the user can create an image and save it in the web page directory,...
3
by: mike | last post by:
Hi all, I am using StreamWriter class to save string var into html file but somehow when I open the html file all formats are lost. I want to keep all formats(spaces, newline and so on)For...
10
by: byrd48 | last post by:
Hi, I haven't had much luck searching for guidance on the following challenge. I have a .NET app in which I would like to take multiple thumnail images and combine them into one flat image....
5
by: peter | last post by:
Hello all, I'm looking for an advice. Example (one block in ascii file): $------------------------ NAME='ALFA' CODE='x' $------------------------
1
by: Daniel | last post by:
what encoding does system.xml.xmldocument.save(string path) use to save the xml document if there is no <?xml... in the front of the xml document?
2
by: geertolaerts | last post by:
Hello, I have a problem with uploading off images to my webservice, i convert them to a byte at client side but something goes wrong when i try to convert them back to a image at server side....
1
by: ofzer | last post by:
Hi, Suspiciously, perl does not save file's permission when coping it. In order to implement the copy , I use : use File::Copy; and File::Copy::Recursive. The BIG problem is that the file...
0
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
1
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: Vimpel783 | last post by:
Hello! Guys, I found this code on the Internet, but I need to modify it a little. It works well, the problem is this: Data is sent from only one cell, in this case B5, but it is necessary that data...
0
by: jfyes | last post by:
As a hardware engineer, after seeing that CEIWEI recently released a new tool for Modbus RTU Over TCP/UDP filtering and monitoring, I actively went to its official website to take a look. It turned...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
1
by: Defcon1945 | last post by:
I'm trying to learn Python using Pycharm but import shutil doesn't work
1
by: Shællîpôpï 09 | last post by:
If u are using a keypad phone, how do u turn on JavaScript, to access features like WhatsApp, Facebook, Instagram....
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.