Web. config file

Summary of the web. config file
1.2003The Web. config file is an XML text file used to store ASP. NET web applications.ProgramConfiguration information (for example, the most common setting of ASP. NET web application authentication method), it can appear in every directory of the application. After you create a web application using VB. NET, a default web application is automatically created in the root directory by default.
The Web. config file, including the default configuration settings, inherits the configuration settings of all subdirectories. If you want to modify the configuration settings of a subdirectory, you can create a web. config file under the subdirectory. It can provide configuration information other than the configuration information inherited from the parent directory, or rewrite or modify the settings defined in the parent directory.

Modifications to the Web. config file at runtime can take effect without restarting the Service (note: the exception in <processmodel> section ). Of course, the Web. config file can be expanded. You can customize new configuration parameters and write the configuration section handler to process them.

Ii. All of the followingCodeAll should be located

<Configuration> <System. Web>

And

</System. Web> </Configuration>

For the purpose of learning, the following examples omit this XML tag.

1. <authentication> section

Purpose: Configure ASP. NET authentication support (Windows, forms, passport, none ). This element can only be declared at the computer, site, or application level. The <authentication> element must be used with the <authorization> section.

Example:

In the following example, the website is configured for form-based authentication. When a user who does not log on to the website that requires authentication, the webpage automatically jumps to the logon webpage.

<Authentication mode = "forms"> <Forms loginurl = "Logon. aspx" name = ". formsauthcookie"/> </Authentication>

The element loginurl indicates the name of the login webpage, and name indicates the cookie name.

2. <authorization> section

Purpose: control access to URL resources from clients (for example, Anonymous Users are allowed ). This element can be declared at any level (computer, site, application, subdirectory or page. Must be used with the <authentication> section.

Example: The following example disables access by anonymous users:

<Authorization> <Deny users = "? "/> </Authorization>

Note: You can use user. Identity. Name to obtain the user name that has been verified. You can use
The Web. Security. formsauthentication. redirectfromloginpage method redirects authenticated users to the page the user just requested. For specific examples, see:

Forms verification http://www.fanvb.net/websample/dataauth.aspx

3. <compilation> section

Purpose: configure all compilation settings used by ASP. NET. The default debug attribute is "true". After the program is compiled and delivered, set it to true (the web. config file is described in detail, and the example is omitted here)

4. <customerrors>

Purpose: Provide information about custom Errors for ASP. NET applications. It is not applicable to errors in XML Web Services.

Example: When an error occurs, redirect the webpage to the custom error page.

<Customerrors defaultredirect = "errorpage. aspx" mode = "remoteonly"> </Customerrors>

The defaultredirect element indicates the name of the custom error webpage. Mode element: displays custom (friendly) information for users not running on the Local Web server.

5.

Purpose: Configure ASP. net http Runtime Library settings. This section can be declared at the computer, site, application, and subdirectory level.

For example, the maximum size of a file to be uploaded is 4 MB, the maximum time is 60 seconds, and the maximum number of requests is 100.

<Httpruntime maxrequestlength = "4096" executiontimeout = "60" apprequestqueuelimit = "100"/>

6. <pages>

Purpose: Identify page-specific configuration settings (such as whether to enable session Status, view status, and whether to detect user input ). <Pages> statements can be made at the computer, site, application, and subdirectory level.

Example: do not check whether there is potential dangerous data in the content entered by the browser (Note: This item is checked by default. If you do not check, 1. encode or verify user input). When you send a page from the client, the encrypted view status is checked to verify that the view status has been tampered with on the client. (Note: This item is not verified by default)

<Pages buffer = "true" enableviewstatemac = "true" validaterequest = "false"/>

7. <sessionstate>

Purpose: Configure session Status settings for the current application (for example, whether to enable session Status and the location where session status is saved ).

Example:

<Sessionstate mode = "inproc" cookieless = "true" timeout = "20"/> </Sessionstate>

Note:

Mode = "inproc" indicates that the session status is stored locally (you can also choose to store the session status on a remote server or Sal server or not enable the session status)

Cookieless = "true" indicates that session status is enabled if the user's browser does not support cookies (the default value is false)

Timeout = "20" indicates the number of minutes in which the session can be idle.

8. <trace>

Purpose: configure the ASP. NET tracking service, which is mainly used for program testing to identify errors.

Example: The default configuration in Web. config is as follows:

<Trace enabled = "false" requestlimit = "10" pageoutput = "false" tracemode = "sortbytime" localonly = "true"/>

Note:

Enabled = "false" indicates that tracing is not enabled; requestlimit = "10" indicates the number of Trace Requests stored on the server.

Pageoutput = "false" indicates that the trace output can only be accessed through the tracking utility;

Tracemode = "sortbytime" indicates that trace information is displayed in the order of processing traces.

Localonly = "true" indicates that the trace Viewer (trace. axd) is used only for the host web server.

Iii. custom web. config file configuration section

The configuration section of the custom web. config file consists of two steps.

First, declare the name of the configuration section and the name of the. NET Framework class that processes the configuration data in the section between the <configsections> and </configsections> labels at the top of the configuration file.

Second, make actual configuration settings for the declared section after the <configsections> area.

Example: Create a storage database connection string

<Configuration> <Configsections> <Section name = "etetction" type =" system. configuration. namevaluefilesectionhandler, system, version = 1.0.3300.0, culture = neutral, publickeytoken = b77a5c561934e089 "/> </Configsections> <Deleetask> <Add key = "scon" value = "Server = A; database = northwind; uid = sa; Pwd = 123"/> </Appsettings> <System. Web> ...... </System. Web> </Configuration>

2.2005In the Web. config file
<Configsections>Configure the associated operation class and its assembly in the node.

Attribute

Attribute	Description
Name	Required string attribute. SpecifyTypeThe name of the configuration section or element associated with the configuration section handler specified by the property. This isGroupThe name used by the element in the configuration file section Settings area.
Type	RequiredStringAttribute. Specify the name of the configuration section handler class used to perform the following operations:NameConfiguration settings in the specified section or element in the property. Use the following format: Type =" Fully Qualified Class Name , Assembly file name , Version , Culture , Public Key token " The definition must match the Assembly reference. For example, if the version number in the following sample code does not match the Assembly, an error occurs. Copy code Type = "myconfigsectionhandler. myhandler, mycustomconfigurationhandler, version = 1.0.0.0, culture = neutral, publickeytoken = NULL" The Assembly file must be in the same application directory as the Web. config file that defines it. For the root web. config or machine. config file, the Assembly file must be in % SystemRoot % \ Microsoft. NET \ framework \VersionDirectory.

Child Element

Element	Description
Section	Define the association between the configuration section handler and configuration elements.
Sectiongroup	Define the association between the configuration section handler and the configuration section.

Parent Element

Element	Description
Configuration	Specifies the root element required in each configuration file used by the Common Language Runtime Library and. NET Framework application.
Configsections	Specify the configuration section and namespace declaration.
Sectiongroup	Define the association between the configuration section handler and the configuration section.

 

The configuration class must be marked in the configsettings Node