Code:
/ FXUpdate3074 / FXUpdate3074 / 1.1 / untmp / whidbey / QFE / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. // Copyright (c) Microsoft Corporation. All rights reserved.
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- SqlServer2KCompatibilityAnnotation.cs
- MultiAsyncResult.cs
- WebPartConnectionsCloseVerb.cs
- TypeDescriptionProviderAttribute.cs
- RadioButtonDesigner.cs
- WmpBitmapDecoder.cs
- CheckPair.cs
- JournalNavigationScope.cs
- SingleObjectCollection.cs
- CollectionCodeDomSerializer.cs
- PersistenceProviderBehavior.cs
- CollectionViewGroupInternal.cs
- TiffBitmapEncoder.cs
- TextEditorCharacters.cs
- BuildProvider.cs
- UnsafeNativeMethods.cs
- DbConnectionInternal.cs
- InputProviderSite.cs
- UInt16Storage.cs
- HttpHostedTransportConfiguration.cs
- FileSystemWatcher.cs
- AssemblyHelper.cs
- ReadOnlyCollectionBuilder.cs
- SharedDp.cs
- PlatformCulture.cs
- TransformProviderWrapper.cs
- WebRequestModuleElementCollection.cs
- TypePropertyEditor.cs
- login.cs
- HttpWriter.cs
- AppSettingsSection.cs
- SourceSwitch.cs
- Privilege.cs
- SignerInfo.cs
- AutomationPattern.cs
- AnnotationResourceChangedEventArgs.cs
- RemotingConfigParser.cs
- UnknownWrapper.cs
- PriorityRange.cs
- PreviousTrackingServiceAttribute.cs
- OdbcRowUpdatingEvent.cs
- ComponentRenameEvent.cs
- TextBoxRenderer.cs
- IdentityModelStringsVersion1.cs
- IdlingCommunicationPool.cs
- MemberHolder.cs
- ContentAlignmentEditor.cs
- ProcessModelInfo.cs
- ClientEventManager.cs
- OperatorExpressions.cs
- DataControlImageButton.cs
- ChildrenQuery.cs
- Base64Encoder.cs
- Filter.cs
- XmlWriter.cs
- _LocalDataStore.cs
- IdentityNotMappedException.cs
- EngineSiteSapi.cs
- SizeChangedInfo.cs
- MergablePropertyAttribute.cs
- SqlBuilder.cs
- PrintPageEvent.cs
- WindowsRebar.cs
- ZoneIdentityPermission.cs
- ClientConfigurationSystem.cs
- ToolStripScrollButton.cs
- IISUnsafeMethods.cs
- PerfService.cs
- ThemeableAttribute.cs
- DataSourceXmlClassAttribute.cs
- ServiceEndpoint.cs
- ApplicationDirectory.cs
- DataGridViewRow.cs
- ContentElementAutomationPeer.cs
- GridLength.cs
- CodeGenerator.cs
- IisTraceWebEventProvider.cs
- SecurityUtils.cs
- linebase.cs
- DataBindingCollection.cs
- RegisteredDisposeScript.cs
- KeyValueConfigurationCollection.cs
- BitmapSourceSafeMILHandle.cs
- WebPartConnectionsConnectVerb.cs
- Utils.cs
- MetadataProperty.cs
- StateChangeEvent.cs
- HttpApplication.cs
- MimeFormatExtensions.cs
- SqlCacheDependencySection.cs
- PKCS1MaskGenerationMethod.cs
- ThreadAttributes.cs
- FromReply.cs
- PathFigureCollection.cs
- Size.cs
- XmlExtensionFunction.cs
- MULTI_QI.cs
- DisposableCollectionWrapper.cs
- SqlTypeSystemProvider.cs
- DataSetUtil.cs