.Net DLL security headache

Page 1 of 1

0 Replies - 478 Views - Last Post: 28 April 2009 - 06:18 AM Rate Topic: -----

#1 ferroariel  Icon User is offline

  • New D.I.C Head

Reputation: 0
  • View blog
  • Posts: 1
  • Joined: 28-April 09

.Net DLL security headache

Post icon  Posted 28 April 2009 - 06:18 AM

Hi u all!!!

I have a website, dedicated to beauty products for women, ok? Sometime ago a friend of mine told me "hey! why donīt you send that info through MSN?". I liked that, so I downloaded an autoresponder code from here:

http://nayyeri.net/b...live-messenger/

So I simply added this routine to get search results from my site:

Code:

public string getSiteSearchResults()
		{   string reader = "";
			string search = "[the received message text goes here]";
			string url = "[the URL of my website search page]?query="+ search;
			try			
			{
				WebPermission pWeb = new WebPermission(NetworkAccess.Connect, url);
				SecurityPermission pSec = new SecurityPermission(SecurityPermissionFlag.AllFlags);
				PermissionSet set = new PermissionSet(PermissionState.None);
				set.AddPermission(pWeb);
				set.AddPermission(pSec);
				set.Assert();
				HttpWebRequest URLReq = (HttpWebRequest)WebRequest.Create(url);				
				URLReq.Credentials = CredentialCache.DefaultCredentials;
				URLReq.AuthenticationLevel = System.Net.Security.AuthenticationLevel.None;
				URLReq.AllowAutoRedirect = true;
				URLReq.Timeout = 60000;				
				HttpWebResponse URLRes = (HttpWebResponse)URLReq.GetResponse();				
				Encoding enc = Encoding.GetEncoding(1252); 
				StreamReader sStream =   new StreamReader(URLRes.GetResponseStream(), enc);			
				reader = sStream.ReadToEnd();				
			}
			catch (Exception ex)
			{
				reader = ex.Message;
			}					   
			return (reader);				
		}


So when somebody asks for some product, the addin (working on one of my pcs) do a search on my site, get the results and send īem in response as plain text.

Well, instead of that, all I get is this:


"Request for the permission of type 'System.Security.Permissions.SecurityPermission, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed."


I read about gacutil, regasm, caspol, trust zones, trusted assembly, security zones...... but donīt have a clue where to start to get rid of this thing, really.

Any help is truly appreciated

Txs in adv

Ariel

Is This A Good Question/Topic? 0
  • +

Page 1 of 1