<style type="text/css">

#test

    {

        width:300px;

        height:300px;

        

        background-color:blue;     /*全部, firefox*/

        background-color:red\9;     /*all ie*/

        background-color:yellow\0;    /*ie8*/

        +background-color:pink;        /*ie7*/

        _background-color:orange;     /*ie6*/

    }

    :root #test { background-color:purple\9; } /*ie9*/

    @media all and (min-width:0px){ #test {background-color:black\0;} } /*opera*/

    @media screen and (-webkit-min-device-pixel-ratio:0){ #test {background-color:gray;} } /*chrome and safari*/

</style>

由上到下的順序，目前看起來愈通用的應該放上面。
然後下面寫下特殊瀏覽器+版本的項目。

 ASP.NET 在處理 HTTP POST 要求時最多只能接受 1,000 個參數，一般來說不會有人透過 POST 傳遞表單資料超過 1,000 個欄位 ( 以筆者的經驗來說，傳過最多的一次是 700 個欄位，當時是個問卷系統 )，如果傳數參數超過 1,000 筆的話，就會出現 Operation is not valid due to the current state of the object. (英文) 或 由於該物件目前的狀態，導致作業無效。 (中文) 例外狀況，細部的例外訊息會有 HttpException (0x80004005): The URL-encoded form data is not valid. (英文) 或 HttpException (0x80004005): URL 編碼型式資料無效。
參考：http://blog.miniasp.com/post/2012/01/01/Efficient-Denial-of-Service-Attacks-on-Web-Application-Platforms.aspx

解：
web.config加下面這個設定

<appSettings>

     <add key="aspnet:MaxHttpCollectionKeys" value="5000" />

</appSettings>

 

各瀏覽器中cookie個數和大小限制

由於網站的user來自全世界各地，而我們網站產生的時間卻是Server的時間
因此需要使用javascript來做一些轉換，讓user看到是他當地的時間

1. Server端產生具有時區的時間字串，用特定的span + class把它包起來, 時間格式 DateTime.ToUniversalTime().ToString("r")
     

<span class="timeString">Fri, 31 Aug 2012 10:57:04 GMT</span>

2. Client端利用jQuery於網頁load的時候將所有時間轉換成當地時間
    這個地方我用了  date.format.js 來轉換成當地時間 (參考  http://blog.stevenlevithan.com/archives/date-time-format  )
   

     $(".timeString").each(function () {
            var content = $(this).text();

            var d = new Date(content);

            if (!isNaN(d)) $(this).text(d.format("yyyy-mm-dd hh:MM tt"));

        }); 
    

這樣user看到的時間就不會錯了

當使用 WebRequest 來 Get 網址時，出現"已經嘗試太多次自動重新導向"。

通常為對方網站有進行某種判斷。以下為試過的項目。

上次是將 CookieContainer 設定一個 New Net.CookieContainer 即可。

            Dim http As Net.HttpWebRequest = Net.WebRequest.Create(Url)

            http.Method = "GET"

            http.ContentType = "application/x-www-form-urlencoded;"



            http.UserAgent = "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Win64; x64; Trident/5.0)"

            http.CookieContainer = New Net.CookieContainer

            http.Referer = Url

在 Application_BeginRequest 可以加入 BlockHacker

    void Application_BeginRequest(object sender, EventArgs e)

    {

        UW.WU.BlockHacker();

    }

可以做一些基本的防駭.

在 Sys_Coonfig 中有兩個參數要設定: WEB_ERROR_ExceptionCountBeforeBlock, WEB_ERROR_ExceptionCountingIntervalInMinutes

另外還有一個參數: WEB_ERROR_DangerousKeywords, 內容請用逗號分隔, 若是發生 Exception 時, Form 或 QueryString 中含有指定的文字, 收到的警告信會標示為高重要性.

從 http://blog.ie-soft.de/post/2007/12/globalasax-events.aspx  抄來的. 留作參考

HttpApplication Events:

Application_AcquireRequestState
Occurs when ASP.NET acquires the current state (for example, session state) that is associated with the current request. 

Application_AuthenticateRequest
Occurs when a security module has established the identity of the user. 

Application_AuthorizeRequest
Occurs when a security module has verified user authorization. 

Application_BeginRequest
Occurs as the first event in the HTTP pipeline chain of execution when ASP.NET responds to a request. 

Application_Disposed
Adds an event handler to listen to the Disposed event on the application. 

Application_EndRequest
Occurs as the last event in the HTTP pipeline chain of execution when ASP.NET responds to a request. 

Application_Error
Occurs when an unhandled exception is thrown. 

Application_PostAcquireRequestState
Occurs when the request state (for example, session state) that is associated with the current request has been obtained. 

Application_PostAuthenticateRequest
Occurs when a security module has established the identity of the user. 

Application_PostAuthorizeRequest
Occurs when the user for the current request has been authorized. 

Application_PostMapRequestHandler
Occurs when ASP.NET has mapped the current request to the appropriate event handler. 

Application_PostReleaseRequestState
Occurs when ASP.NET has completed executing all request event handlers and the request state data has been stored. 

Application_PostRequestHandlerExecute
Occurs when the ASP.NET event handler (for example, a page or an XML Web service) finishes execution. 

Application_PostResolveRequestCache
Occurs when ASP.NET bypasses execution of the current event handler and allows a caching module to serve a request from the cache. 

Application_PostUpdateRequestCache
Occurs when ASP.NET completes updating caching modules and storing responses that are used to serve subsequent requests from the cache. 

Application_PreRequestHandlerExecute
Occurs just before ASP.NET begins executing an event handler (for example, a page or an XML Web service). 

Application_PreSendRequestContent
Occurs just before ASP.NET sends content to the client. 

Application_PreSendRequestHeaders
Occurs just before ASP.NET sends HTTP headers to the client. 

Application_ReleaseRequestState
Occurs after ASP.NET finishes executing all request event handlers. This event causes state modules to save the current state data. 

Application_ResolveRequestCache
Occurs when ASP.NET completes an authorization event to let the caching modules serve requests from the cache, bypassing execution of the event handler (for example, a page or an XML Web service). 

Application_UpdateRequestCache
Occurs when ASP.NET finishes executing an event handler in order to let caching modules store responses that will be used to serve subsequent requests from the cache. 

Application_Init
This method occurs after _start and is used for initializing code. 

Application_Start
As with traditional ASP, used to set up an application environment and only called when the application first starts.

Application_End
Again, like classic ASP, used to clean up variables and memory when an application ends.

Session Events:

Session_Start
As with classic ASP, this event is triggered when any new user accesses the web site.

Session_End
As with classic ASP, this event is triggered when a user's session times out or ends. Note this can be 20 mins (the default session timeout value) after the user actually leaves the site.

Profile Events:

Profile_MigrateAnonymous
Occurs when the anonymous user for a profile logs in.

Passport Events:

PassportAuthentication_OnAuthenticate
Raised during authentication. This is a Global.asax event that must be named PassportAuthentication_OnAuthenticate.
 

Possibly more events defined in other HttpModules like:

System.Web.Caching.OutputCacheModule
System.Web.SessionState.SessionStateModule
System.Web.Security.WindowsAuthentication
System.Web.Security.FormsAuthenticationModule
System.Web.Security.PassportAuthenticationModule
System.Web.Security.UrlAuthorizationModule
System.Web.Security.FileAuthorizationModule
System.Web.Profile.ProfileModule

Squid Proxy 相關處理

主站
http://www.squid-cache.org/

Windows 版本
http://squid.acmeconsulting.it/

解壓縮至 c:\squid

指令
\sbin\squid.exe
squid -?
squid -z d:\squid\var\cache 暫存目錄設定
squid -i 加入服務
squid -n Squid -k reconfigure 設定檔更新可重置，重啟服務也可以

設定檔
\etc\squid.conf
建議co個用過的來抄

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
將某一檔案更新做法
C:\squid\bin>squidclient -h localhost -p 80 -m PURGE http://bserver.img.photosharp.com.tw/Image/Advert/360x120_v1_260x87s120.jpg

若不行需設定 squid.conf
參考 http://help.getbusi.com/kb/getbusi-alert-advance/removing-individual-objects-from-squid-cache
acl manager proto cache_object 後加入一行 acl Purge method PURGE
http_access allow manager localhost 後加入一行 http_access allow localhost Purge
http_access deny manager 後加入一行 http_access deny Purge

設定檔重置
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Web & Squid 共存(不同 IP 共用80Port)

如 192.168.0.203(Web), 192.168.0.201(Squid)
IIS 的網站需指定(192.168.0.203)

squid.conf 設定檔需修改 IP 位置
http_port 192.168.0.201:80 transparent

改變 IIS 監聽 IP 的範圍
=-=-=-= Windows Server 2003 =-=-=-=
Windows Server 2003 CD\Support\Tools\Support.msi 安裝後
C:\Program Files\Support Tools 下有程式 httpcfg
httpcfg delete iplisten -i 0.0.0.0
httpcfg set iplisten -i 192.168.0.203
=-=-=-= Windows Server 2008 =-=-=-=
netsh 進入指令模式
netsh>http
netsh http>add iplisten ipaddress=192.168.0.203:80 (會取代 0.0.0.0)

重啟指令
net stop http /y
net start w3svc查看指令

netstat -an
tcp 0.0.0.0:80 需沒有
tcp 192.168.0.203:80 需有

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HTTP\Parameters\ListenOnlyList
會列出開機時會載入的 httpcfg set iplisten，若 ip 有設錯 iis 可能會出現 "指定的網路名稱格式不正確"
 

Client Side 的 HTML 如下: (若要在 CKEditor 中使用, 請參考: CKEditor 中貼上剪貼簿(clipboard) 中的圖片)

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">



<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<title></title>

<script type="text/javascript" src="/Scripts/jquery-1.7.1.min.js"></script>



<script type="text/javascript">

$(document).ready(function () {

$(window).bind("paste", function () {

if (event.clipboardData) {

var clipboardData, found;

found = false;

clipboardData = event.clipboardData;



Array.prototype.forEach.call(clipboardData.items, function (item, i) {

if (item.type.indexOf("image") !== -1) {

var blob = clipboardData.items[i].getAsFile();

var URL = window.URL || window.webkitURL;

var source = URL.createObjectURL(blob);



pastedImage = new Image();

pastedImage.src = source;

pastedImage.onload = function () {

var canvas = document.createElement("canvas");

var ctx = canvas.getContext("2d");



canvas.width = pastedImage.width;

canvas.height = pastedImage.height;

ctx.drawImage(pastedImage, 0, 0);



var base64 = canvas.toDataURL();

base64 = base64.substring(base64.indexOf("iVBOR"));



$.ajax({

url: "/API/AddTaskImages.aspx",

async: false,

type: "POST",

data: ({

Image: base64

}),

dataType: "html",

success: function (msg) {

var oRes;

try {

oRes = eval(msg);

}

catch (err) {

alert("無法解析傳回資料 !");

alert(msg);

alert(err);

}

if (oRes.success) {

alert("Upload Success..");

//alert(oRes.msg);

$("#MyImageDataLoadDemo").attr("src", oRes.msg);

} else {

alert(oRes.msg);

}

},

error: function (xhr, ajaxOptions, thrownError) {

alert(xhr.status);

alert(thrownError);

}

})

};



return false;

}

});

}

});

});

</script>

</head>

<body>







<div id="hold">

<div id="imgHold"><img src="" id="MyImageDataLoadDemo"></div>

<div>Click on the area above and ctrl+p an image to paste</div>

</div>

</body>

</html>

Server Side 的程式碼如下:

Partial Class API_AddTaskImages

Inherits System.Web.UI.Page



Protected Sub Page_Load(sender As Object, e As System.EventArgs) Handles Me.Load

'DB.sysconfig.Path.TaskAttachment



Dim Base64 As String = Me.Request("Image")

'UW.JSON.WriteErrorMessage(Base64)



'Return





Dim imageBytes As Byte() = Convert.FromBase64String(Me.Request("Image"))



Dim ms As System.IO.MemoryStream = New System.IO.MemoryStream(imageBytes, 0, imageBytes.Length)



ms.Write(imageBytes, 0, imageBytes.Length)

Dim image As System.Drawing.Image = System.Drawing.Image.FromStream(ms, True)



Dim map As Bitmap





Dim Filename As String = Now.ToString("yyyyMMddHHmmssfff") & ".png"



Try

System.IO.Directory.CreateDirectory(DB.sysconfig.Path.TaskAttachment & "UploadImages")

image.Save(DB.sysconfig.Path.TaskAttachment & "UploadImages\" & Filename, System.Drawing.Imaging.ImageFormat.Png)



UW.JSON.WriteSuccessMessage(DB.sysconfig.URL.TaskAttachment & "UploadImages/" & Filename)

Catch ex As Exception

UW.JSON.WriteErrorMessage(ex.ToString)

End Try



End Sub

End Class