c# - How do I properly set up a REST API page with ASP.NET WebPages? -


i'm pretty new server-side programming, decided i'd test of out small website , database. far, working asp.net , cshtml has been absolute breeze, i'm getting actual web api part (making pages can get/post $.ajax real-time results) , i'm having little bit of trouble finding adequate resources on internet. lot of information find extremely vague, not right version of asp.net, or not specific question.

here's run-down of website:

i plan use website medium game development. game developed on ugc gaming platform, , i'd able connect website in-game use various features such player ranking, messaging boards, developer blog, , developer inbox. have design of website planned out, i'm starting work on actual server-side code. there's database contains profiles , profile information of people play game.

if wanted to, example, retrieve list of users play game (for leaderboard), i'd send post request /api/pgiprofiledata.cshtml specific headers , it'd give me json list of people play game (depending on specific parameters). problem is, don't entirely know how configure files accept formatted requests.

here's code have far /api/pgiprofiledata.cshtml. i've commented of explain logic there won't confusion.

@using webmatrix.data; @{     if (request.requesttype != "post")     { //require post request type. not sure if there's another/more efficient way this.         response.statuscode = 400; //web.config executes ~/error.cshtml page automatically         return; //prevent further code running     };     //so request type post, have check if both headers aren't null     if (request.headers["robloxuserid"].isempty() && request.headers["pgirole"].isempty()) {         response.statuscode = 400; //both headers null, display error         return;     }     var db = database.open("pgiconnectionstring"); //connecting w/ connectionstring works fine     ienumerable<dynamic> result; //datatype after querying database table     if (!request.headers["robloxuserid"].isempty()) { //if parameter isn't empty         result = db.query("select * userdata robloxuserid=@0", request.headers["robloxuserid"]); //query specific parameter     } else { //otherwise, use other 1         result = db.query("select * userdata pgirole=@0", request.headers["pgirole"]);     };     var data = result.select(x => new { //convert result json array         pgiprofileid = x.pgiprofileid,         robloxuserid = x.robloxuserid,         pgirole = x.pgirole,     }).toarray();      response.contenttype = "application/json; charset=utf-8"; //set content type     json.write(data, response.output); //return }

the main concern have code security. i'm not entirely sure can capable malicious intent. can't if method i'm using secure http requests valid or not. far i've tested it, it's been fine, i'd have opinion on. thanks!


Comments

Post a Comment

Popular posts from this blog

python Tkinter Capturing keyboard events save as one single string -

is possible store keyboard events 1 string? code below stores 1 char , prints it. card reader or bar code reader, contains collection of character/ string not 1 character @ time. goal save char pressed text variable. from tkinter import * root = tk() def key(event): text= event.char text+= event.char print ("pressed", text) def callback(event): frame.focus_set() print ("clicked at", event.x, event.y) frame = frame(root, width=100, height=100) frame.bind("<key>", key) frame.bind("<button-1>", callback) frame.pack() root.mainloop() currently, creating text variable , everytime key() function gets called, , text stores last character typed. you can define text module level variable , , use module level text inside key function - text = '' def key(event): global text text+= event.char print("pressed", text)
Read more

android - InAppBilling registering BroadcastReceiver in AndroidManifest -

i'm implementing inapp billing in android app. works well, however, i'm trying decouple broadcast receiver activity manifest. suggestion in android's trivialdrive sample: // important: dynamically register broadcast messages updated purchases. // register receiver here instead of <receiver> in manifest // because call getpurchases() @ startup, therefore can ignore // broadcasts sent while app isn't running. // note: registering listener in activity bad idea, done here // because sample. regardless, receiver must registered after // iabhelper setup, before first call getpurchases(). currently there's class extends broadcastreceiver : public class iabbroadcastreceiver extends broadcastreceiver { /** * intent action receiver should filter for. */ public static final string action = "com.android.vending.billing.purchases_updated"; private final iabbroadcastlistener mlistener; public iabbroadcastreceiver(iabbroadcastlistener listener) { m
Read more

javascript - Z-index in d3.js -

i have map , when hover effect on region of map below yellow line , circle, last ones disappear. how can solve problem? http://jsfiddle.net/ot21n9qx/ var arc = g.append("path") .style("fill", "none") .style("stroke", "yellow") .style("stroke-width", 2) .attr("d", "m" + pathorigin[0] + "," + pathorigin[1] + " q" + svgpoint[0] + "," + pathorigin[1] + " " + svgpoint[0] + "," + svgpoint[1]); var circlesize = d3.scale.linear() .domain([0, 0.5, 1]) .range([4, 10, 4]); svg not have z order draws objects in order created. need create path , circle after create highlight regions. here forked fiddle: http://jsfiddle.net/o00fzgaf/1/
Read more