ASP.NET 4 核心编程：Dino Esposito的权威指南

4星 · 超过85%的资源需积分: 4 62 浏览量更新于2024-07-28 1 收藏 28.71MB PDF 举报

"Programming.Microsoft.ASP.NET.4 是一本由Dino Esposito编著的书籍，专注于介绍ASP.NET 4的核心编程技术。该书于2011年3月出版，是关于ASP.NET系列的最新版本，涵盖了ASP.NET 4的新特性和功能。此资源为英文文字版PDF格式，版权归属于作者及Microsoft Press。" 本书详细阐述了ASP.NET 4的各个方面，包括但不限于以下几个关键知识点： 1. **ASP.NET 4架构**：书中会介绍ASP.NET 4的框架结构，如改进的HTTP管道，以及如何利用这些新特性优化应用程序性能。 2. **Web Forms**：探讨了Web Forms组件模型，事件处理，以及新的控件和功能，例如控件生命周期的改进，更强大的数据绑定机制等。 3. **MVC（Model-View-Controller）**：随着ASP.NET MVC框架在ASP.NET 4中的成熟，书中会详细讲解如何构建可维护、可测试的Web应用程序，以及路由、控制器和视图的工作原理。 4. **动态数据**：涵盖ASP.NET 4中的动态数据支持，帮助开发者快速创建数据驱动的网站，包括数据验证和页面模板。 5. **AJAX**：介绍如何使用内置的AJAX工具包提高用户体验，包括异步更新面板、脚本服务和客户端脚本库。 6. **部署与配置**：详细讨论了部署ASP.NET 4应用程序的策略，包括IIS配置、调试和错误处理。 7. **安全性**：深入讨论了身份验证、授权、状态管理以及防止跨站脚本（XSS）和跨站请求伪造（CSRF）等安全问题。 8. **性能优化**：提供关于如何优化ASP.NET 4应用的内存使用、缓存策略和数据库查询的建议。 9. **集成开发环境（IDE）Visual Studio 2010**：书中可能包含有关如何利用Visual Studio 2010增强的开发工具和特性来提升开发效率的内容。 10. **面向服务的应用程序（SOA）**：可能涉及如何在ASP.NET 4中实现基于服务的架构，包括WCF（Windows Communication Foundation）服务的集成。这本书不仅适合初学者学习ASP.NET 4的基础知识，也适合有经验的开发者了解新版本的改进和最佳实践。通过深入阅读，读者可以掌握ASP.NET 4的高级概念和技术，从而能够构建高效、稳定且易于维护的Web应用程序。

Table of Contents xv

Making ASP.NET Pages Cacheable . . . . . . . . . . . . . . . . . . . . . . . . . . . . 758

The HttpCachePolicy Class

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 763

Caching Multiple Versions of a Page

. . . . . . . . . . . . . . . . . . . . . . . . . . . 765

Caching Portions of ASP.NET Pages

. . . . . . . . . . . . . . . . . . . . . . . . . . . . 768

Advanced Caching Features

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 774

Summary

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 777

19 ASP.NET Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 779

Where the Threats Come From . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 779

The ASP.NET Security Context

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 781

Who Really Runs My ASP.NET Application?

. . . . . . . . . . . . . . . . . . . . . 781

Changing the Identity of the ASP.NET Process

. . . . . . . . . . . . . . . . . . 784

The Trust Level of ASP.NET Applications

. . . . . . . . . . . . . . . . . . . . . . . . 786

ASP.NET Authentication Methods

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 789

Using Forms Authentication

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 791

Forms Authentication Control Flow

. . . . . . . . . . . . . . . . . . . . . . . . . . . . 792

The FormsAuthentication Class

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 796

Conguration of Forms Authentication

. . . . . . . . . . . . . . . . . . . . . . . . 798

Advanced Forms Authentication Features

. . . . . . . . . . . . . . . . . . . . . . 801

The Membership and Role Management API

. . . . . . . . . . . . . . . . . . . . . . . . 806

The Membership Class

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 807

The Membership Provider

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 812

Managing Roles

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 817

Quick Tour of Claims-Based Identity

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 821

Claims-Based Identity

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 822

Using Claims in ASP.NET Applications

. . . . . . . . . . . . . . . . . . . . . . . . . 824

Security-Related Controls

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 825

The Login Control

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 826

The LoginName Control

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 828

The LoginStatus Control

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 829

The LoginView Control

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 830

The PasswordRecovery Control

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 832

The ChangePassword Control

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 833

The CreateUserWizard Control

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 834

Summary

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 835

xvi Table of Contents

Part V The Client Side

20 Ajax Programming . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 839

The Ajax Infrastructure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 840

The Hidden Engine of Ajax

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 840

JavaScript and Ajax

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 845

Partial Rendering in ASP.NET

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 851

The ScriptManager Control

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 852

The UpdatePanel Control

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 860

Considerations Regarding Partial Rendering

. . . . . . . . . . . . . . . . . . . . . . . . . 865

Conguring for Conditional Refresh

. . . . . . . . . . . . . . . . . . . . . . . . . . . 866

Giving Feedback to the User

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 870

The Ins and Outs of Partial Rendering

. . . . . . . . . . . . . . . . . . . . . . . . . . 876

REST and Ajax

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 879

Scriptable Services

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 880

JSON Payloads

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 890

JavaScript Client Code

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 893

Summary

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 897

21 jQuery Programming . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 899

Power to the Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 899

Programming within the Browser

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 900

The Gist of jQuery

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 903

Working with jQuery

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 905

Detecting DOM Readiness

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 906

Wrapped Sets

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 908

Operating on a Wrapped Set

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 915

Manipulating the DOM

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 920

The jQuery Cache

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 923

Ajax Capabilities

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 925

Cross-Domain Calls

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 929

Summary

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 932

Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 933

Microsoft is interested in hearing your feedback so we can continually improve our books and learning

resources for you. To participate in a brief online survey, please visit:

www.microsoft.com/learning/booksurvey/

What do you think of this book? We want to hear from you!

xvii

Acknowledgments

As is usual for a book, the cover of this book shows only the name of the author, but in no

way can an author produce a book all alone. In fact, a large ensemble of people made this

book happen. First, I want to thank Devon Musgrave for developing the idea and scheduling

new books for me to author at an amazingly quick pace for the next two years!

Next comes Roger LeBlanc

, whom I’ve had the pleasure to have as a copy editor on previous

books of mine—including the rst edition of this Programming ASP.NET book (Microsoft

Press, 2003). This time, Roger assisted me almost every day—not just as the copy editor,

but also as the development manager. I dare to say that as my English gets a little bit better

every year, the amount of copy editing required does not amount to much for a diligent

editor like Roger. So he decided to take on extra tasks.

In the middle of this project, I had to take a short break to have back surgery. The surgery

increased the number of lengths I could swim and improved my tennis game, especially

the penetration of my rst serve and my top-spin backhand, but it put a temporary stop to

my progress on the book. As a result, Roger and I had to work very hard to get the book

completed on a very tight schedule.

Steve Sagman handled the production end of the book—things like layout, art, indexing,

proofreading, prepping les for printing, as well as the overall project management. Here,

too, the tight schedule required a greater effort than usual. Steve put in long days as well as

weekends to keep everything on track and to ensure this edition equals or exceeds the high

standards of previous editions.

Scott Galloway took the responsibility of ensuring that this book contains no huge technical

mistakes or silly statements. As a technical reviewer, Scott provided me with valuable insights,

especially about the rationale of some design decisions in ASP.NET. Likewise, he helped me

understand the growing importance JavaScript (and unobtrusive JavaScript) has today for

Web developers. Finally, Scott woke me up to the benets of Twitter, as tweeting was often

the quickest way to get advice or reply to him.

To all of you, I owe a monumental “Thank you” for being so kind, patient, and accurate.

Working with you is a privilege and a pleasure, and it makes me a better author each time.

And I still have a long line of books to author.

My nal words are for Silvia, Francesco, and Michela, who wait for me and keep me busy.

But I’m happy only when I’m busy.

—Dino

xix

Introduction

In the fall of 2004, at a popular software conference I realized how all major component

vendors were advertising their ASP.NET products using a new word—Ajax. Only a few weeks

later, a brand new module in my popular ASP.NET master class made its debut—using Ajax

to improve the user experience. At its core, Ajax is a little thing and fairly old too—as I

presented the engine of it (XmlHttpRequest) to a C++ audience at TechEd 2000, only four

weeks before the public announcement of the .NET platform.

As emphatic as it may sound, that crazy little thing called Ajax changed the way we approach

Web development. Ajax triggered a chain reaction in the world of the Web. Ajax truly repre-

sents paradigm shift for Web applications. And, as the history of science proves, a paradigm

shift always has a deep impact, especially in scenarios that were previously stable and con-

solidated. We are now really close to the day we will be able to say “the Web” without feeling

the need to specify whether it contains Ajax or not. Just the Web—which has a rich client

component, a made-to-measure layer of HTTP endpoints to call, and interchangeable styles.

Like it or not, the more we take the Ajax route, the more we move away from ASP.NET

Web Forms. In the end, it’s just like getting older. Until recently, Web Forms was a fantastic

platform for Web development. The Web, however, is now going in a direction that Web

Forms can’t serve in the same stellar manner.

No, you didn’t pick up the wrong book, and you also did not pick up the wrong technology

for your project.

It’s not yet time to cease ASP.NET Web Forms development. However, it’s already time for

you to pay a lot more attention to aspects of Web development that Web Forms specically

and deliberately shielded you from for a decade—CSS, JavaScript, and HTML markup.

In my ASP.NET master class, I have a lab in which I rst show how to display a data-bound

grid of records with cells that trigger an Ajax call if clicked. I do that in exactly the way one

would do it—as an ASP.NET developer. Next, I challenge attendees to rewrite it without inline

script and style settings. And yes—a bit perversely—I also tell anyone who knows jQuery

not to use it. The result is usually a thoughtful and insightful experience, and the code I

come up with gets better every time. ASP.NET Web Forms is not dead, no matter what

ASP.NET MVC—the twin technology—can become. But it’s showing signs of age. As a

developer, you need to recognize that and revive it through robust injections of patterns,

JavaScript and jQuery code, and Ajax features.

In this book, I left out some of the classic topics you found in earlier versions, such as

ADO.NET and even LINQ-to-SQL. I also reduced the number of pages devoted to controls.

I brought in more coverage of ASP.NET underpinnings, ASP.NET conguration, jQuery, and

patterns and design principles. Frankly, not a lot has changed in ASP.NET since version 2.0.

剩余992页未读，继续阅读

粉丝: 8
资源: 2

ASP.NET 4 核心编程：Dino Esposito的权威指南

精通Microsoft ASP.NET 4编程

权威指南：ASP.NET 4 开发教程

ASP.NET 4编程指南 - Dino Esposito

Microsoft.Press.Programming.Microsoft.ASP.NET.MVC.pdf

Microsoft.Press.Programming.Microsoft.ASP.NET.MVC.May.2010

Microsoft.Press.Programming.Microsoft.ASP.NET.MVC3.2011.2nd.Ed

MP.SignalR.Programming.in.Microsoft.ASP.NET.Feb.2014.

Microsoft.Press.Programming.ASP.NET.Core.2018

.foundations.of.object.oriented.programming.using.dot.net.2.0.patterns

Microsoft.Asp.Net.Programming.With.Microsoft.Visual.Basic..Net

最新资源