Code:
/ FXUpdate3074 / FXUpdate3074 / 1.1 / untmp / whidbey / QFE / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. // Copyright (c) Microsoft Corporation. All rights reserved.
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- BindingUtils.cs
- Certificate.cs
- ExtensionDataObject.cs
- ImportedPolicyConversionContext.cs
- typedescriptorpermissionattribute.cs
- ScriptModule.cs
- CompositionCommandSet.cs
- QilParameter.cs
- ContextBase.cs
- HtmlLabelAdapter.cs
- SamlSubjectStatement.cs
- UpdatePanel.cs
- HttpModulesSection.cs
- ServiceDesigner.cs
- SqlDependency.cs
- DataControlField.cs
- GenericEnumConverter.cs
- Padding.cs
- EventLogPermissionEntry.cs
- panel.cs
- GradientStop.cs
- DataServicePagingProviderWrapper.cs
- ConnectionStringSettingsCollection.cs
- DesignerAttribute.cs
- ManagementBaseObject.cs
- XsltQilFactory.cs
- QilFunction.cs
- XmlMemberMapping.cs
- DataSysAttribute.cs
- TreeViewImageKeyConverter.cs
- ComponentTray.cs
- XamlSerializerUtil.cs
- StorageSetMapping.cs
- MouseEventArgs.cs
- ConfigurationManagerHelperFactory.cs
- CompoundFileStreamReference.cs
- DeclaredTypeValidatorAttribute.cs
- Literal.cs
- Tokenizer.cs
- KnownColorTable.cs
- NavigateEvent.cs
- LinqExpressionNormalizer.cs
- BitmapSizeOptions.cs
- HandlerBase.cs
- UnsafeNativeMethods.cs
- DataGridViewCellConverter.cs
- WhiteSpaceTrimStringConverter.cs
- DataGridViewMethods.cs
- ArrayTypeMismatchException.cs
- DataViewManager.cs
- ReferenceEqualityComparer.cs
- StorageBasedPackageProperties.cs
- CompositeDuplexBindingElementImporter.cs
- SqlRowUpdatedEvent.cs
- NotifyCollectionChangedEventArgs.cs
- StateWorkerRequest.cs
- SHA1CryptoServiceProvider.cs
- DataGridViewCellParsingEventArgs.cs
- OleDbConnectionFactory.cs
- Ref.cs
- TTSEvent.cs
- FontSource.cs
- ContentWrapperAttribute.cs
- XmlDataSourceNodeDescriptor.cs
- OneOf.cs
- SessionPageStatePersister.cs
- CqlBlock.cs
- UnaryNode.cs
- ObjectConverter.cs
- DataSourceCacheDurationConverter.cs
- IImplicitResourceProvider.cs
- RegistrySecurity.cs
- DbDataAdapter.cs
- FontStyle.cs
- SubMenuStyle.cs
- Events.cs
- TextServicesPropertyRanges.cs
- TdsValueSetter.cs
- wgx_render.cs
- TypeHelpers.cs
- COSERVERINFO.cs
- login.cs
- ArraySegment.cs
- ToolBar.cs
- ResourceDisplayNameAttribute.cs
- WebCategoryAttribute.cs
- CLRBindingWorker.cs
- MetadataCacheItem.cs
- EdgeProfileValidation.cs
- ExpandoClass.cs
- WorkflowNamespace.cs
- EnvelopedSignatureTransform.cs
- SSmlParser.cs
- ContextMenuStripGroupCollection.cs
- PageOrientation.cs
- XmlHierarchicalDataSourceView.cs
- Knowncolors.cs
- Image.cs
- AdPostCacheSubstitution.cs
- DataGridViewCellParsingEventArgs.cs