RickAndMSFT on Azure & MVC

Executive Overview You cannot use routing or web.config files to secure your MVC application. The only supported way to secure your MVC application is to apply the [ Authorize ] attribute to each controller and action method (except for the login/register...

2 March 2013 Update: Added security links 20 June 2012 Update: Cookieless Session and Authentication not supported in ASP.NET MVC.     Executive Overview You cannot use routing or web.config files to secure your MVC application. The only...

I have written a simple sample showing how to implement cascading drop down lists in ASP.Net MVC.   In this sample the user is presented with a list of countries. Once a country is selected, a new drop down list is appears showing the states...

Please post corrections/submissions to the MVC Forum . Include MVC FAQ in the title. MSDN articles with Full project samples (vb and c#) (MVC 2) MVC Best Practices Kazi Manzur Rashid's MVC Best Practices   (great 2 part series) Performance Security...

There are three ways to pass information from a controller to a view in ASP.NET MVC 3: As a strongly typed model object. As a dynamic type (using @model dynamic) Using the ViewBag I’ve written a simple MVC 3  Top Blog application to compare and contrast...

A frequent complaint in the ASP.NET forums is that an application works fine with Cassini (AKA, the built in Visual Studio Development Server), but fails when deployed to a real IIS server. The two most common reasons for this failure are: Cassini runs...

To set up IIS to run ASP.NET applications (including MVC 3 and Web Matrix): Install the Microsoft Web Platform Installer 3.0  from here . Run the Web Platform Installer (WPI) and select Products on the top and Server in the left pane.  Click...

This blog post shows how to Install SQL Server Data Tools on Visual Studio 2010 and Visual Web Developer/2010. This MSDN article, also shows how to install Install SQL Server Data Tools. Launch WPI 4.0 ( Web Platform Installer ) Select All in the left...

The InitializeSimpleMembership Attribute ensures that before any membership (login/register) related functionality is run, that the membership database has been created. If the database is not yet created, the code will automatically create one. If the...

The most frequently posted question in the ASP.NET MVC forums is about how to use the DropDownList ( DDL ) helper. To address this question, I wrote the tutorial Using the DropDownList Helper with ASP.NET MVC , which covers most DropDownList scenarios...

My   B/M tutorial provides a good introduction to benefits of Bundling and Minification. You should read it to become familiar with the bundling and minification. This blog will focus on using B/M with Web Forms, my B/M tutorial focused on ASP...

The default constructor for the ObjectContext class in the Entity Data Model (EDM) retrieves the construction string from the web.config or app.config file. If you have multiple data models or need to pass in the the construction string at run time you...

ScottHa has a great blog Working with SSL at Development Time is easier with IISExpress , but I’ve got what I think is a better approach. Please weigh in. In this blog entry I’ll show you how to test SSL on your ASP.NET MVC & WebForms  applications...

Update 28 November 2012: The combination of await, async, and the Task object makes it much easier for you to write asynchronous code in .NET 4.5.  Now that EF 6 is supporting Async Query and Save , you should take advantage of asynchronous programming...

Tom Dykstra and I have just published an Azure multi-tier tutorial with the complete source. It has many valuable programming tips and best practices you can’t find anywhere else. Learn how to use Windows Azure Storage tables, queues, and blobs in a multi...

Much has been written on the advantages of using a  Content Delivery Network (CDN) to deliver static content ( jQuery , images, CSS files, etc.). (If you’re not familiar with CDNs, read ScottGu’s blog post Announcing the Microsoft AJAX CDN  ...

Update 28 November 2012 : HttpResponse.Clear is safe but not recommended since it is a violation of the MVC pattern.  If you’re calling Clear(), then by definition you started doing one thing (like setting headers, writing to the response, etc.)...

When you run into an issue or have a question about ASP.NET MVC the best place for it is the MVC Forum .  When you write your question, there are a few simple things that you can do to make it easier for the ‘experts’ to answer (and hence to get...

Adding bundling and minification (B/M) in a Web Pages site follows the same formula ASP.NET MVC and Web Forms use: Declare and register bundles. Consume bundles from within your views.  This blog entry describes the basics of using B/M in a Web Page...

I've written a simple MVC 3 application to demonstrate handing optimistic concurrency exceptions with Entity Framework (EF). Browsers make it easy to test optimistic concurrency; right click on an edit link and select Open in New Tab , then select the...

Creating an update-able view with ADO Entity Framework (EF) or LINQ to SQL (L2S) is a fairly advanced topic and not directly associated with Dynamic Data. At the end of the article I have a sample console application to verify the modified L2S data model...

I’m pleased to announce two new asynchronous tutorials for ASP.NET 4.5: Using Asynchronous Methods in ASP.NET MVC 4 Using Asynchronous Methods in ASP.NET 4.5 The .NET Framework 4.5 builds on this asynchronous support with the await and async keywords...

LiveJournal Tags: MVC , MVC 2 , session Why a session less controller? Update 5 Feb 2010 – The latest MVC 2 futures on CodePlex contains the the RenderAction() fix – this sample is no longer needed for a session less controller. Use the futures version...

  Motivated by Rachel Appel’s terrific blog post Create user friendly date fields with ASP.NET MVC EditorTemplates & jQueryUI , I created a full featured article on the topic. You can find my article here .  In addition to the great information...

Executive Overview You cannot use routing or web.config files to secure your MVC application. The only supported way to secure your MVC application is to use a base class with an [ Authorize ] attribute,  and then have each controller type subclass...