Code:
/ FXUpdate3074 / FXUpdate3074 / 1.1 / untmp / whidbey / QFE / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. // Copyright (c) Microsoft Corporation. All rights reserved.
Link Menu

This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- SortFieldComparer.cs
- OperationPerformanceCounters.cs
- GeneralTransformCollection.cs
- UIElementCollection.cs
- PopupRoot.cs
- Int64AnimationUsingKeyFrames.cs
- CodePrimitiveExpression.cs
- ActiveXMessageFormatter.cs
- SplitterPanel.cs
- ConfigDefinitionUpdates.cs
- OleDbMetaDataFactory.cs
- SplitContainer.cs
- PaperSource.cs
- GrowingArray.cs
- HWStack.cs
- SqlBulkCopyColumnMapping.cs
- CorePropertiesFilter.cs
- QilInvokeLateBound.cs
- MessageSecurityProtocol.cs
- XhtmlTextWriter.cs
- SmiConnection.cs
- FunctionImportElement.cs
- WebBrowserNavigatingEventHandler.cs
- TypeInitializationException.cs
- DataViewListener.cs
- JapaneseCalendar.cs
- ToolStripArrowRenderEventArgs.cs
- Configuration.cs
- PropertyReferenceSerializer.cs
- SrgsGrammarCompiler.cs
- TypeInitializationException.cs
- VisualStyleTypesAndProperties.cs
- DbConvert.cs
- StateChangeEvent.cs
- JournalEntry.cs
- ColorTranslator.cs
- EntityClassGenerator.cs
- XsltSettings.cs
- KnownBoxes.cs
- SelectionItemPattern.cs
- X509Certificate2Collection.cs
- IntSecurity.cs
- EntityContainerRelationshipSetEnd.cs
- RolePrincipal.cs
- Activator.cs
- NativeDirectoryServicesQueryAPIs.cs
- NullableFloatMinMaxAggregationOperator.cs
- DataSetMappper.cs
- TraversalRequest.cs
- DataGridViewColumnDividerDoubleClickEventArgs.cs
- ProgressBarAutomationPeer.cs
- Main.cs
- ObjectConverter.cs
- TokenBasedSetEnumerator.cs
- ColumnClickEvent.cs
- RSAPKCS1SignatureDeformatter.cs
- RichTextBoxDesigner.cs
- UnsafeNetInfoNativeMethods.cs
- BitmapEffectOutputConnector.cs
- prompt.cs
- SkinBuilder.cs
- Column.cs
- DesignerTransaction.cs
- Int32CollectionConverter.cs
- ExpressionEvaluator.cs
- Update.cs
- XhtmlBasicControlAdapter.cs
- ReachPageContentCollectionSerializerAsync.cs
- EntityContainerEmitter.cs
- Types.cs
- BamlWriter.cs
- EntityCommandDefinition.cs
- ToolBar.cs
- LinqDataSourceDisposeEventArgs.cs
- RuntimeVariableList.cs
- PreviewPageInfo.cs
- TreeNodeSelectionProcessor.cs
- DbDeleteCommandTree.cs
- EventListenerClientSide.cs
- ReadOnlyHierarchicalDataSourceView.cs
- SourceItem.cs
- DataServiceRequestOfT.cs
- DataContractSerializer.cs
- PhoneCallDesigner.cs
- MethodCallExpression.cs
- DatagramAdapter.cs
- CheckPair.cs
- TransformGroup.cs
- PeerObject.cs
- DbgCompiler.cs
- ProfilePropertySettingsCollection.cs
- WindowsProgressbar.cs
- TypeConverter.cs
- AttachmentCollection.cs
- MetadataItemEmitter.cs
- SQLSingle.cs
- StaticExtension.cs
- ContainerParagraph.cs
- UInt16.cs
- XmlLoader.cs