.NET Image Uploading

[dmeggs]

Hi All,

I have written some VB .NET code that takes a image file re-sizes it, water marks it and uploads it to my website. When I run the code on my local PC it works fine however when I have tried it on the catalyst2 website it fails. I have received various errors all to do with security (I believe). Here is a small snippet of code:

Dim objImage As System.Drawing.Image

objImage = objImage.FromStream(Me.fileUpload.PostedFile.Input Stream)

objImage.Save(strNewFileNameAndPathForImage)

The last line is where I get the error. If I try to upload the file to the DB folder then I get the following error message:

System.Security.SecurityException: Request for the permission of type 'System.Security.Permissions.FileIOPermission, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed.

Any help would be greatly appreciated - thank you.

Daniel Meggs

[WhiskyFudge]

Due to the security policy the Catalyst2 operate an ASP.net application can not access folders above it's application root. So you'll need to save your images somewhere other than then db folder.

[DaveLegg]

Originally Posted by WhiskyFudge

Due to the security policy the Catalyst2 operate an ASP.net application can not access folders above it's application root. So you'll need to save your images somewhere other than then db folder.

*blinks*

Isn't the point of the db folder to store databases? Therefore applications running in wwwroot would need to be able to access that folder surely?

[WhiskyFudge]

Whisky Fudge ponders this

[WhiskyFudge]

As I thought, my test site on coconut shows that I can't access anything above the app root. That includes the DB folder. However my access test (db in the db folder) works fine. I'll get my head around this logic latter.

I personally think that any asp.net application should be given access to everything below D:\Domains\domain.com\ (not full access mind, that would be a support nightmare!).

However the man at Cat2 has decided on this security policy. For the majority of users it is fine and very sensible. Especially when you think of the skill set of some of the potential users, and the fact its shared hosting.

So dmeggs I'm afraid you'll have to change where you wish to store your images.

[aMike]

same error, obove root folder
CAT3539
www.idreams3d.net

[WhiskyFudge]

Just to keep you all updated. It does appear that there is an issue with some permissions on strawberry. I've chased this up with Cat2 staff and hopefully it'll be fixed soon.

[aMike]

Request for the permission of type 'System.Security.Permissions.FileIOPermission, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed.

Demons back again ?

Strawbery!

I want to mubble something, but i will bite my tounge.

[aMike]

Balls... just remembed..

FileInfo is not allowed.. have to stop doing that!

[WhiskyFudge]

Where are you trying to access?

[aMike]

Thanks Whisky, its ok though I just forgot that fileinfo function is not allowed, so I just removed it and it works ok..

Should make a note of that really..

Cheers for reply!