Microsoft.NET BLOG(YunYang): Blog

security 4 ASP.NET -编写安全的ASP.NET应用

Thu, 04 Sep 2008 09:14:18 GMT

Hi,everybody:

I hav't written article for a long period until busy working.As my msn said:"My head grew heavy and my sight grew dim".

so I bring a new session about "security 4 ASP.NET",it will be a series subjects.

Today let me post the vol.1.

Event Log
The Windows event log is probably the most widely known logging facility, and its API is nicely
wrapped in the Microsoft .NET Framework. You simply call EventLog.WriteEntry and pass in the
event source (that is, the name of your application), a message, and an event type (warning, error,
or critical). This will write the event to the application log.
public static void LogToEventLog(string message,
EventLogEntryType type, int id)
{
EventLog.WriteEntry("Accounting Application",message, type, id);
}
An event source must be registered before it can be used. Only an administrator can create new
event sources; the ASP.NET worker process does not have the required privileges to do so. The
easiest solution is to write a simple console application that pre.creates the event source at
application installation time. Afterward, your least privilege daemon account can write to the event
log.
Creating an Event Source
static void Main(string[] args)
{
EventLog.CreateEventSource(args[0], "Application");
}
If you need more control, you can also create your own event log. Name the log after the
application, for example, Accounting Application, and register event sources such as Front End and
Data Access Component.
Creating a Custom Event Log
static void Main(string[] args)
{
string logName = "Accounting Application";
if (!EventLog.Exists(logName))
{
EventLog.CreateEventSource("Front End", logName);
EventLog.CreateEventSource("Data Access Component", logName);
EventLog.CreateEventSource("Financial Component", logName);
}
}
The code for writing to a custom event log changes only slightly.
Writing to a Custom Event Log
public static void LogToEventLog(string message,
EventLogEntryType type, int id)
{
EventLog evt =
new EventLog("Accounting Application", ".", "Front End");
evt.WriteEntry(message, type, id);
}

no end ,just waitting more!

This photo make me remember a lovely girl who give me reailty love,but I hurted her.Sorry!

新书预告-《.NET Framework 3.5开发指南》（暂定名）

Fri, 27 Jun 2008 12:20:49 GMT

《.NET Framework 3.5开发指南》

该书历时一年编撰而成，该书由美国MYSPACE公司高级工程编写，我负责全书的统筹和编撰总指导。

全书序由东北大学计算机博士生导师执笔。

全书内容简介

第1 章本章介绍了.NET 3.0/3.5的作用和在.NET体系结构中的作用，并对.NET 3.0/3.5各个主要的模块做了概要性的介绍。

第2章介绍.NET 3.5新的功能。包括C# 3.5新增的语法功能、Visual Studio 2008的使用、结合实例介绍了LINQ的使用以及ASP.NET 3.5的新特性和控件。

第3 章详细介绍了WPF的由来，以及基本知识。基本知识包括XAML语言简述、WPF相关命名空间、WPF应用程序的分类以及演示了如何创建一个WPF应用程序。

第4章本章讲解了WPF的窗口布局方式，通过详尽的示例结合讲解，将WPF窗口的布局相关的控件的特点以及如何使用进行了讲述。

第5章从WPF控件的基本概念入手，对WPF控件的要点进行了逐一的介绍，包括WPF的控件模型、RoutedEvent、Dependency Property和控件如何处理用户事件等知识，最后对.NET 3.0中内置的WPF控件逐一进行了举例说明。

第6章本章对如何在WPF中定义资源、使用资源、数据绑定的知识结合示例进行了讲解。

第7章对于如何使用WPF的样式，本章从WPF样式的优点、样式的分类、样式的定义和使用和样式触发器深入的介绍了WPF样式的知识，并结合示例讲解了控件模板的实现。

第8章本章按照由图形学的基础知识开始到WPF的绘图对象，再到WPF的视口变化，再从2D到3D的顺序对WPF的基础绘图机制和对象有个全面的了解。

第9章 WPF对多种媒体内容的支持

第10章对WPF的一些高级应用做了一个介绍，包含了自定义控件的编写、与Winform程序的互操作、异步操作的支持和界面自动化技术的支持。

第11章面向服务构架（SOA）已经成为了一种趋势，本章对SOA的本质进行了一些解说，让读者对SOA的作用和趋势有一定的了解，同时介绍了WCF与SOA的关系、WCF的优点和基础知识

第12章介绍了WCF的3种契约：服务契约、操作契约和数据契约的作用和使用方法，同时也演示了如何创建WCF的服务端和客户端程序。

第13 章本章对WCF的通信基础——消息交换做了详尽的解说，包括了消息交换的各个方面的概念——信道、终结点、契约、绑定，以及它们之间的关系都进行了说明；另外，对WCF消息系统支持的消息交换、数据传输方式都进行了说明。

第14章对服务在并发环境下的行为进行了描述，并对影响服务的并发行为的因素进行了逐一讲解，务求是读者了解到各个不同的选择对并发的影响。

第15章讲解了WCF对事务支持，并配以示例对事务的使用进行了讲解。

第16章对WCF的安全策略和机制进行了细致的讲解，并针对具体的环境的安全侧路的选择给出了建议。

第17章从服务和客户端的运行时特性、传输信道、元数据、序列化等方面对WCF的扩展性进行了一次较为全面的讲述。

第18章对WCF服务在不同环境下（IIS、控制台程序、Windows程序、Windows服务和WAS）运行的方式一一进行了举例说明，并对每种运行环境给出了示例。

第19章对工作流在.net framekwork中的作用、工作流的基本类型、如何使用工作流等内容进行了讲解，务求使读者在本章的内容中对工作流有个大概认识，并能开始开发简单的工作流程序。

杨云

内容截图预览：

致尊敬的读者

Wed, 21 May 2008 04:05:28 GMT

由于《ASP.NET2.0典型项目开发》一书在发行之后，光盘代码广泛流传于网络。每天都有读者通过该BLOG联系我，需要索取光盘代码。

在这里对大家表示感谢，如果您遗失光盘或者是图书馆借阅无光盘，请按照书中邮箱写信，我会及时向你提供资料。请不要直接通过该BLOG索取。

特别提醒：该书配套光盘不光含有项目代码，还有我录制的视频教程。请选择正规渠道获取本书技术支持通道。

再次感谢大家。

IIS7管理工具包新特性

Wed, 26 Mar 2008 09:59:35 GMT

IIS要发布最新的管理包了。功能还算不错，添加了网管非常期待的站点初步流量统计功能，具体还是看Soctt的表达吧：

IIS 7 Admin Pack Preview 1 Released

Last week the IIS team shipped the first technical preview of some really cool administration modules that I think web developers will find super useful. This preview adds several new features to the IIS7 Admin Tool:

Database Manager: Built-in SQL Server database management, including the ability to create, delete, and edit tables and indexes, create/edit SPROCs and execute custom queries. Because it is integrated in the IIS administration tool it all works over HTTP/SSL - which means you can use the module to remotely manage your hosted applications (even with low-cost shared hosting accounts), without having to expose your database directly on the Internet.

Log Reports: Built-in report visualization with charting support for log files data. Full range selection and custom chart creation is supported, as well as the ability to print or save reports. Like the database manager you can use this module remotely over HTTP/SSL - which means it works in remote shared hosting scenarios.

Configuration Editor: This is a power module that provides complete control over editing all web.config settings within the admin tool. You can configure it to track the changes you make using the UI and have it auto-generate configuration change scripts that you can then save and tweak to re-run later in an automated way.

Request Filtering UI: This admin module provides more control over the new request filtering feature in IIS7. Check out Carlos' blog post here for details on how to use it.

.NET Authorization: This admin module provides a custom authorization rules editor which allows you to more easily manage the ASP.NET <authorization> configuration section.

FastCGI UI: This admin module provides more support for editing all the new <fastCGI> settings (for when you use FastCGI modules with IIS7 like PHP).

Below are some screen-shots and simple walkthroughs of the Log Reporting and Database Manager administration UI modules:

Log Reporting Admin Module

Have you ever deployed a web application onto a server and wondered how much load it is getting?, what the average response time from the server is?, or whether many server errors are occurring (and if so on what URLs)? All of these settings are carefully logged by IIS in a text based log file. Today most people use command-line tools like the IIS Log Parser utility to query and analyze these files.

The IIS 7 Admin Pack and the new "IIS Reports" admin module now enable you to also query and chart your reports graphically within the IIS admin tool:

Out of the box the "IIS Reports" admin module comes with a bunch of pre-built logparser-based reports that you can easily run on your sites and applications:

Below is a simple graphical report we could pull up that looks at the HTTP status codes being returned by my "TestSite" application (note how we are using the "bar graph" visualization option):

Reports can optionally be filtered using a date range. You can also push the print or save buttons within the report page to generate a printer or a local saved version of the report.

The IIS7 Admin Tool is a rich client application (built using WinForms) - but it does all of its remote access and work using HTTP based web-services that connect to the remote web-server. This means it will work through firewalls, and a hoster does not need to open up ports in their network in order to enable it.

Once a hoster installs the IIS 7 Admin Pack on their web-servers, remote customers managing their hosted sites using the IIS admin tool (which is built-into Vista and available as a download for Windows XP clients) will automatically be prompted to enable the IIS Reports admin module (the install of the client-side module is seamless). They'll then be able to use the reports module inside their admin tool to pull up reports for their remote hosted sites.

Note: hosters can optionally disable this feature if they want, or choose to restrict or customize the list of reports provided. Hopefully most hosters will chose to just make this a standard feature of all IIS and ASP.NET plans they offer.

Database Manager Module

Have you ever deployed your application and database to a remote hosting provider and wanted to make a quick change to the database (but your hosting provider didn't support accessing it using the SQL admin tool)? Using the new "database manager" module within the IIS admin tool you can now remotely access your database and make changes to it using HTTP/SSL through the web-server.

Just connect your IIS administration tool to your remote site and click the new "Database Manager" icon:

By default the Database Manager module will look at the <connectionStrings> section of your web application's web.config file, and allow you to easily access any of the databases your hosted application is using.

For example, below my TestSite application has a "NorthwindConnectionString" setting in the <connectionStrings> section of my web.config (which is why it shows up in my list of connection nodes). When I click it I can view and edit my SPROCs and Table Schema (including indexes):

We could right-click on any table to edit the row data within it, or alternatively perform a custom SQL query to retrieve a custom set of data:

What is nice is that a hoster can easily enable all of the above database admin features for both dedicated and shared hosting plans (even when there are hundreds or thousands of customers on a single server). Like all other modules in the admin tool, all communication between the rich client front-end and the backend at the hoster is done over HTTP/SSL based web-services (meaning it goes through firewalls and doesn't require the hoster to open any new ports - nor expose the SQL server directly on the Internet).

Hopefully this database administration module will just be a standard feature that all IIS hosters enable - which will make remote hosted data management much easier going forward.

Summary

Over time you'll see even more admin UI modules be shipped in the IIS 7 Admin Pack and many more features enabled (Carlos, who runs the dev team building the admin tool, is actively asking for suggestions on what you'd like to see via his blog - so drop him a comment if you have a suggestion or want to provide some encouragement).

You can download the first technical preview of IIS 7 Admin Pack release here as well as learn more about it via the online documentation here. The above modules work with both the IIS7 release in Vista SP1 as well as Windows Server 2008.

VS IDE插件网站上线

Tue, 26 Feb 2008 05:10:31 GMT

The Microsoft Visual Studio Ecosystem team would like to inform you about the upcoming Visual Studio Gallery site (http://visualstudiogallery.com) that we will be announcing on Wednesday February 27th. This new web site will a resource center for all Visual Studio extensions. It will include everything from free VS PowerToys like tools to VSIP products. Any developer will be able to post information and a link for their Visual Studio extensions. Our goal for this website is to give developers an easy way to find extensions for Visual Studio. Visual Studio extensions might include products and free applications in the form of macros, add-ins, packages, project templates, or other types of extensions to Visual Studio that are packaged up and ready to use by the developer to improve their development experience.

写在战前的2008

Mon, 28 Jan 2008 13:55:21 GMT

朋友们，眼看马上就要到中国的传统佳节--春节了。

在我眼中的2007年，是战斗的一年，是奋起的一年，是蓄势的一年。

在面对困难时，我选择战。

在面对不利条件时，我选择战。

在新的挑战前，我依旧选择战。

在新的一年忠心的祝福我妈妈身体健康，祝福支持我的朋友合家幸福，万事如意。

最近发现一个规律，凡是心怀鬼胎，拉帮结伙耍黑段的人都衰老的贼快。25，26岁的人，看上去就像个40左右的男人。可悲，可叹。应该是诡计考虑太多的结果。这可能就是报应吧？

最后我通过微软的对联系统生成一幅对联，送给朋友们也送给我自己。我们都辛苦了。2008年我来了，且战且行！

杨云

2008新春祝

Happiness and Wealth

Sat, 22 Dec 2007 22:36:33 GMT

Living standards have soared during the twentieth century, and economists expect them to continue rising in the decades ahead. Does that mean that we humans can look forward to increasing Happiness?

Not necessarily, warns Richard A. Easterlin, an economist at the University of Southern California, in his new book, Growth Triumphant: The Twenty-first Century in Historical Perspective. Easterlin concedes that richer people are more likely to report themselves as being happy than poorer people are. But steady improvements in the American economy have not been accompanied by steady increases in people's self-assessments of their own Happiness. "There has been not improvement in average Happiness in the United States over almost a half century----a period in which real GDP per capita more than doubled," Easterlin reports.

The explanation for this paradox may be that people become less satisfied over time with a given level of income. In Easterlin's word: "As incomes rise, the aspiration level does too, and the effect of this increase in aspirations is to vitiate the expected growth in Happiness due to higher income."

Money can buy Happiness, Easterlin seems to be saying, but only if one's amounts get bigger and other people aren't getting more. His analysis helps to explain sociologist Lee Rainwater's finding that Americans' perception of the income "necessary to get along" rose between 1950 and 1986 in the same proportion as actual per capita income. We feel rich if we have more than our neighbors, poor if we have less, and feeling relatively well off is equated with being happy.

Easterlin's findings, challenge psychologist Abraham Maslow's "hierarchy of wants" as a reliable guide to future human motivation.

Maslow suggested that as people's basic material wants are satisfied they seek to achieve nonmaterial or spiritual goals. But Easterlin's evidence points to the persistence of materialism.

"Despite a general level of affluence never before realized in the history of the world." Easterlin observes, "Material concerns in the wealthiest nations today are as pressing as ever and the pursuit of material need as intense." The evidence suggests there is no evolution toward higher order goals. Rather, each step upward on the ladder of economic development merely stimulates new economic desires that lead the chase ever onward. Economists are accustomed to deflating the money

value of national income by the average level of prices to obtain "real" income. The process here is similar----real income is being deflated by rising material aspiration, in this case to yield essentially constant subjective economic well-being. While it would be pleasant to envisage a world free from the pressure of material want, a more realistic projection, based on the evidence, is of a world in which generation after generation thinks it needs only another 10% to 20% more income to be perfectly happy.

Needs are limited, but not greeds. science has developed no cure for envy, so our wealth boosts our Happiness only briefly while shrinking that of our neighbors. Thus the outlook for the future is gloomy in Easterlin's view.

"The future, then, to which the epoch of modern economic growth is leading is one of never ending economic growth, a world in which ever growing abundance is matched by ever rising aspirations, a world in which cultural difference is leveled in the constant race to achieve the goods life of material plenty, it is a world founded on belief in science and the power of rational inquiry and in the ultimate capacity of humanity to shape its own destiny. The irony is that in this last respect the lesson of history appears to be otherwise: that there is no choice. In the end, the triumph of economic growth is not a triumph of humanity over material wants; rather, it is the triumph of material wants over humanity."

Happiness and Wealth

正式发布基于VS2008的AJAX模板包

Fri, 21 Dec 2007 02:20:38 GMT

Using VS2008 to Target .NET Framework 2.0 with ASP.NET AJAX

As I mentioned last month, VS 2008 fully supports building applications for .NET Framework 2.0... This is very important as it will take time for some hosters and IT organizations to fully deploy .NET Framework 3.5, but you don't want that to block you from taking full advantage of the cool features in VS 2008.

Today we released ASP.NET 2.0 AJAX Templates for VS2008. This release contains project templates for using Visual Studio 2008 or Visual Web Developer 2008 to create new web sites and web applications with ASP.NET AJAX Extensions features. The project templates contain specific references to assemblies in .NET Framework 2.0 and ASP.NET 2.0 AJAX Extensions 1.0.

Download the ASP.NET 2.0 AJAX Templates for VS2008!

To try these out, make sure you have ASP.NET AJAX Extensions installed, then install the ASP.NET AJAX Templates for Visual Studio 2008.

Then, go to File->New Project and select .NET Framework 2.0 as the target runtime. That will filter down the options and you should see "AJAX 1.0-Enabled ASP.NET 2.0 Web Application". Select it.

Notice the assembly reference in web.config is fixed up to be the 1.0 version number...

 <system.web>
    <pages>
      <controls>
        <add tagPrefix="asp" namespace="System.Web.UI" 
             assembly="System.Web.Extensions, Version=1.0.61025.0, ...
      </controls>
    </pages>

Now you are all set up to get the power of developing with VS 2008, but target .NET Framework 2.0.

简历该如何书写

Tue, 18 Dec 2007 02:43:05 GMT

请大家看看这个人是谁，人家是如何书写人生简历的。共勉。

1809.2.12,生日　

　　1818年(9岁)，母亲去世。　

　　1831年(22岁)，经商失败。　

　　1832年(23岁)，竞选州议员落选。　

　　同年　(23岁)，工作丢了。想就读法学院，但未获入学资格。　

　　1833年(24岁)，向朋友借钱经商。　

　　同年年底(24岁)，再次破产。接下来，他花了16年时间才把债还清。　

　　1834年(25岁)，再次竞选州议员，这次赢了。　

　　1835年(26岁)，订婚后即将结婚时，未婚妻死了。　

　　1836年(27岁)，精神完全崩溃，卧病在床六个月。　

　　1838年(29岁)，争取成为州议员的发言人——没有成功。　

　　1840年(31岁)，争取成为选举人——落选了。　

　　1843年(34岁)，参加国会大选——又落选了。　

　　1846年(37岁)，再次参加国会大选——这回当选了。前往华盛顿特区，表现可圈可点。　

　　1848年(39岁)，寻求国会议员连任，失败。　

　　1849年(40岁)，想在自己州内担任土地局长的工作，遭到拒绝。　

　　1854年(45岁)，竞选美国参议员，落选。　

　　1856年(47岁)，在共和党内争取副总统的提名——得票不足100张。　

　　1860年(51岁)，当选美国总统。成为美国历史上最伟大的总统之一。

关于动态数据的新功能-ASP.NET3.5

Fri, 14 Dec 2007 11:20:54 GMT

最近没时间自己写BLOG,特地转一篇来自ASP.NET之父SCOTT大帅哥的新文章：

New ASP.NET Dynamic Data Support

The ASP.NET 3.5 Extensions CTP we shipped this past weekend contains a bunch of great new features.

One of the cool new features is something we call "ASP.NET Dynamic Data Support". In a nutshell this enables you to really quickly build data driven web-sites that work against a LINQ to SQL (and in the future LINQ to Entities) object model - and optionally allows you to-do this without having to build any pages manually.

The best way to see this in action is to watch David Ebbo's awesome 17 minute screen-cast:

You can also follow the steps below to easily get started and use the dynamic data support:

Step 1: Create a ASP.NET Dynamic Data Site:

Once you have the ASP.NET 3.5 Extensions CTP release installed, you can use VS 2008 or the free Visual Web Developer 2008 Express to create a new Web Site or Web Application Project that has the ASP.NET dynamic data support enabled:

This will create a new web-site you can use that has some default template files in them, along with CSS style-sheets you can use to customize the look and feel of them:

Step 2: Add a LINQ to SQL Data Model to Your Site

LINQ to SQL is an O/RM (object relational mapper) that ships in .NET 3.5, and which allows you to model a relational database using .NET classes. You can then query the database using LINQ, as well as update/insert/delete data from it. LINQ to SQL fully supports transactions, views, and stored procedures. It also provides an easy way to integrate data validation and business logic rules into your data model.

The easiest way to get started with an ASP.NET Dynamic Data site is to add a new LINQ to SQL data model to your project (right-click->add new item->LINQ to SQL Classes item). This will bring up the LINQ to SQL class designer. Drag database tables from your server explorer to define a set of classes (with relationships) for your database schema:

Step 3: Enable Dynamic Templates in Your Project:

By default ASP.NET Dynamic Data projects provide built-in support for creating automatic "scaffolding" views of your LINQ to SQL and LINQ to Entities data models. Dynamic Data projects include template pages and user controls that can automatically create built-in data browsing/editing/selection/deleting UI that is dynamically constructed at runtime based on the LINQ to SQL or LINQ to Entities data model you've added to your project.

To enable this auto-scaffolding support, open the web.config file of your project, search for the "dynamicData" section within it, and set the "enableTemplates" attribute to "true":

Note: this auto-scaffolding feature is currently turned off by default for security reasons (we want you to be explicit about turning it on).

Note: as you can see above, the ASP.NET dynamic data section provides optional URL mapping support that allows you to customize the URLs for your dynamic scaffold pages to be in whatever URL format you want.

Step 4: Run Your Site

Hit F5 to run your project. You'll by default be taken to a default.aspx page that lists all of the table objects in your data model:

Note: the default.aspx home-page is in the project - if you don't like how it looks just open it up and edit it however you want.

Clicking on any of the table names in the list above will take you to a dynamic data page that lists the data within it:

The default data view pages automatically create functional data navigation UI that includes built-in data paging and editing support (and are ASP.NET AJAX enabled):

The data view pages automatically infer relationships between your related objects and provide automatic filtering support:

The data view pages also automatically show relationships between your objects and allow users to easily navigate amongst them. For example, notice how the Category column for products allows me to navigate to the category details for a specific product:

The data view pages also enable automatic selection, editing and delete support. Notice below how when in inline edit mode they automatically infer friendly foreign key names (allowing you to edit the "Category" and pick a name from a dropdownlist instead of having to specify a "CategoryID" integer):

All of this works without having to create a single custom .aspx page or write any custom code. All of the web UI is created dynamically off of your LINQ to SQL or LINQ to Entities data model.

Step 5: Customizing the Site Further

Having all of the above functionality work out of the box against your ORM data model is great for quickly getting your site up and running. Once you get the basic site experience working, you can optionally go in and fully customize it - both at the data validation/business logic level as well as at the UI layer.

You can add standard LINQ to SQL data model and business validation rules to your data model in order to enforce constraints. The dynamic data pages will automatically work off of this logic, and provide appropriate error messages and validation UI based on them.

You can also optionally go in and customize the UI of any of the data pages you want. Dynamic data projects allow you to customize the default look and feel of all data pages on the site, as well as customize the default look and feel of all column types used on the site. You can customize both of these via the default template files added under the "/App_Shared" folder when you create a new dynamic data project:

Simply edit any of the files above to customize the default data page views and/or default data column appearances.

You can also then optionally override the UI of specific data view pages by explicitly adding a .aspx page that maps to it in your project. For example, I could override the default ListDetails behavior for Products by adding a \Products\ListDetails.aspx page to my project:

You can then add any standard ASP.NET data control to the page. You can also use the new dynamic data aware ASP.NET data controls that ship in the ASP.NET 3.5 Extensions CTP to the page. These allow you to completely customize the look and feel of the UI - while still using the new dynamic meta-data provider to infer relationships and meta-data about your data model classes for default behavior.

Try Visual Studio 2008

Mon, 26 Nov 2007 09:19:44 GMT

Try Visual Studio 2008

Microsoft Visual Studio 2008 provides an industry-leading developer experience for Windows Vista, the 2007 Microsoft Office system, and the Web. In addition, it continues in the Microsoft tradition of development language innovation. To enable evaluation of Visual Studio 2008, this page provides links to trial versions of Visual Studio 2008. For more information, see Visual Studio 2008 Product Information.

90-Day Trial Downloads

Visual Studio 2008 Professional Edition (Coming Soon)
Visual Studio Team System 2008 Team Suite
Visual Studio Team System 2008 Team Foundation Server
Visual Studio Team System 2008 Test Load Agent

Current MSDN Professional and Premium Subscribers can download Visual Studio 2008 from MSDN Subscriber Downloads.

In addition, you can download the free Visual Studio 2008 Express Editions and Microsoft .NET Framework 3.5.

Upgrading your ZUNE 1(EST AM 2:30 USA)

Tue, 13 Nov 2007 12:48:33 GMT

For you Zune 30 owners out there, today(EST AM 2:30 USA) you'll be getting the firmware update (woot). Our buddy Jason at Zune Thoughts produced a video detailing the upgrade experience. Check it out:

嫦娥卫星的技术花絮

Tue, 06 Nov 2007 10:46:32 GMT

最近大家都关心嫦娥，今天粘贴点关于嫦娥卫星的技术信息。

FYI FROM YaoFei

对于地面使用的软件，特别是大家在电视上看到的每个人面前的监视终端，是一台运行在Windows2000上的普通PC机，监视软件也是普通的VC编写的，各个型号基本都差不多，在一套代码基础上按照每个型号的遥测处理格式和要求略有一些定制。
大部分软件体制还是脱胎于西安。真正的发指令和接收数据还是靠西安在干活。
型号研制单位自己的测试系统和软件不在此范围内，各种花样都有，运行在自己的总装总测场地。

至于星上的软件，仅对嫦娥而言，主要的数管和姿控导航两个分系统各自使用了一台基于欧洲ERC32处理器的计算机，主频不超过30MHz, 没有通常意义的操作系统，在RTEMS的基础上大幅度剪裁剩下一点点残渣作为底层的硬件和进程管理，上面跑自己的应用软件完成功能。编译器是erc32ccs, GCC的定制版本，支持SPARC V7处理器和RTEMS， ESA提供的，高兴了可以去免费下载玩玩. 有效载荷软件大部分都是基于MCS51的单片机系统，个别设备也许有DSP.
由于前段时间发生了用导弹摧毁FY-1C卫星的事情，国际上已经完全不相信中国所谓气象卫星是民用项目的幌子，给了各种本来就对中国存在敌意的国家和组织以口实，现在想继续买ERC32和欧洲生产的其他星载处理器已经几乎完全没有可能，美国就更不要说了。一些后续型号基本上面临无米下锅的难题。

微软官方论坛注册有奖

Tue, 23 Oct 2007 23:40:30 GMT

本人暂时代为管理和维持：微软官方技术论坛-- 微软中文技术论坛（MSDN and TechNet） » ASP.NET & AJAX » Web相关讨论(IIS等)
地址:http://forums.microsoft.com/china/
有相关问题的朋友可以访问并提出你的问题。

FYI：

为了鼓励更多的人知道和参与到微软中文技术论坛中，我们从昨天开始发布了一个最新的活动——新手报道有奖！我们专门成立了一个区叫做新手报道区，希望大家能帮助宣传。

论坛注册有奖活动的具体说明：http://forums.microsoft.com/china/ShowPost.aspx?PostID=2300450&SiteID=15

新用户注册Step by Step: http://forums.microsoft.com/china/ShowPost.aspx?PostID=2300401&SiteID=15

上帝安排的World Champion

Mon, 22 Oct 2007 03:44:10 GMT

KIMI是世界冠军，这个在昨天是属于奇迹级别的。今天KIMI是 world champion。诡异的胜利，本人力挺的KIMI果然夸张的夺冠！

这个正验证了中国人的因果论，小人和一切障碍在最后被上帝干掉了！不需要理由。

联想到我本人也是，最近2年曾到的公司惨遇极端恶心反胃的小人。哈哈~~~不过想象也是，小人也要生存。所以使用打压，陷阱，撒烂药等阴招也在意料之中。不过内心的不安和丑陋会陪伴它们终生！人模狗样的，其实是一堆滥狗屎。

归根结底：人生的任何成绩都毫无意义，关键是活的坦荡，问心无愧才是根本。

祝贺KIMI，一个和我一样正直，内敛的人。：）

我写给美国UPS的客服自杀信

Thu, 11 Oct 2007 10:24:50 GMT

以下是我崩溃后写给UPS客服的邮件全文,提供大家欣赏！

==========================================================================================

我用过好几次UPS,UPS的服务这次真的非常不满意。慢的惊世骇俗。请你们自己TRACK下记录看看。
光上海就用了5天！搞的我9号中午还专门发传真发身份证的被要去清关。就算只从9号算也不至于10，11两天都还不能从上海到杭州吧？上海到杭州有多近？对UPS太失望了，我一个美国全额付款的包裹搞了我十多天还收不到。请给解释下EXPRESS是啥意思？我查询了一下，自包裹从到HK后就进入中国本地土企业的速度了，你们可以自己去看TRACKING RECORDS！
我以后不会选择UPS了，太受罪了。国内速度奇慢无比！你们是火车运还是汽车运？50多美金的运费就这个水平？我的天，中国EMS国内所有城市还隔天到呢！

IPOD's KILLER--ZUNE1-ZUNE2

Sat, 06 Oct 2007 00:17:08 GMT

The next generation media player was released on 2/10. Bill Gates looks like a younger man on TV!LOL...LOL....

The new zune called ZUNE2!wowowowowo,its a lovely baby!

Yep,I bought a ZUNE 1 before 10 months ago for showing what is fans for Microsoft!LOLZ....

But I worried about how to upgrade my old zune to getting new functions and firmware 2.1.Fortunately,ZUNE team will be pushing a new package to refresh ZUNE1'firmware and software after relased new one for few period.

FYI FROM ZUNE TEAM 's ANNOUNCEMENT:

First, you can click "sync now" on your Zune if you're within your home network's range, that'll sync your device if you're not plugged into AC power. Automatic wireless sync works like this: if you're plugged into a dock, AC adapter or speaker dock accessory, wireless sync will automatically start after 1 minute of device inactivity. So you can plug your Zune into the best speakers in your house, or charging right next to your cell phone and then the content gets sync'd automatically.

"wireless sync for pc"!yessssssssssssssssssssssssssssssss,its coming sonner!come on!

I love ZUNE!

At last show three photos(pls special focus the frist one) between 2006 and 2007. just for fun:)

第3本书震撼发布<>

Fri, 14 Sep 2007 03:01:35 GMT

经过我独自一年多的写作,第3本书已经正式由信息产业部直属出版社出版上市发行.

<<ASP.NET 2.0典型项目开发>>

本书精心选择了6个经典的ASP.NET 2.0示范级项目，每一项目除涉及ASP.NET 2.0的重要技术外，还具备实用而独具特色的开发技术。这6个系统分别是：俱乐部系统、博客系统、分类广告系统、中小型企业门户网站、网络猎头系统、电子交易结算平台。每个项目都会帮助读者熟悉一个开发领域。读者在阅读完本书后，能把所学的ASP.NET 2.0技术构成一个完整的知识体系并提高实际开发能力。
流行的应用程序框架，使得应用程序的代码和设计具有良好的扩展性、模块化和可重用性整合目前流行的Web 2．0技术(如Ajax、GDI+等)，详细讲解ASP．NET 2．0新增的部分内容，比如母版页、主题和皮肤等
本书配套光盘包括详细的安装、配置视频教程，帮助读者快速建立应用环境.　

本书主要面向基于Visual Studio 2005并使用C# 2.0语言编写Web应用的开发人员，也可作为大中专院校相关专业教材和毕业设计辅导用书。

其中国内少有的长达45分钟教学视频,详细告诉大家如何高效进入学习和实践阶段.让你搭建系统无忧,学习愉快.

杨云

.NET 3.5和VS 2008中的ASP.NET AJAX

Wed, 01 Aug 2007 04:03:26 GMT

【原文地址】 ASP.NET AJAX in .NET 3.5 and VS 2008
【原文发表日期】 Monday, July 30, 2007 12:06 AM

在过去，我曾在《VS 2008 JavaScript Intellisense》和《 VS 2008 JavaScript debugging》中讨论过JavaScript和AJAX方面的改进。下面是作为VS 2008和.NET 3.5一部分发布的一些ASP.NET AJAX运行时特性的几个备注，以及你在VS 2008中打开现有ASP.NET AJAX 1.0项目时需要知道的几个重要事项。

包括在.NET 3.5中的ASP.NET AJAX

ASP.NET AJAX 1.0是以可以在ASP.NET 2.0之上安装的单独一个下载的形式发布的。从.NET框架3.5开始，所有这些特性都成为ASP.NET所固有的，这意味着在构建或部署应用时，你不再需要下载和安装单独的ASP.NET AJAX安装文件。

当你在VS 2008 中创建针对.NET框架3.5的新ASP.NET应用或网站项目时，VS会自动在你的web.config 文件里添加适当的AJAX注册设置，而且核心ASP.NET AJAX 服务器控件会出现在你的工具箱里。

随.NET 3.5发布的ASP.NET AJAX 版本有不少很好的改进 - 包括对可与WebPart一起使用的UpdatePanel的支持，对基于WCF的JSON结点的支持，对在JavaScript中使用ASP.NET用户数据，角色和登录应用服务的支持，以及N个缺陷修补和性能改进。

理解ASP.NET AJAX的版本

ASP.NET AJAX 1.0和.NET 3.5两者可以在同个机器上并行安装。ASP.NET AJAX 1.0是在System.Web.Extensions.dll 的V1.0程序集中实现的，而包括在.NET 3.5中的ASP.NET AJAX实现存在于System.Web.Extensions.dll 的V3.5程序集中。System.Web.Extensions.dll 的V3.5版本是个完全兼容于1.0版本的扩展集（这意味着你不要改动任何代码就可以使用它）。

机器上的每个ASP.NET应用都可以选择使用任何一个ASP.NET AJAX 版本来构建和运行。这是通过在web.config文件中<system.web.extensions>部分节点，以及应用编译时所引用的System.Web.Extensions.dll程序集版本来配置的（在网站项目中，这些引用是注册在web.config文件中的<assemblies>部分的，而web应用项目则是通过项目文件来指定这些引用的）。

你将能使用VS 2008来开发针对ASP.NET AJAX 3.5的应用，以及使用新的VS 2008多定向支持来构建使用ASP.NET AJAX 1.0的ASP.NET 2.0应用。在下面的部分，我将讨论怎么做。

重要的Beta 2信息

在我们在web上发布Beta2前几天，我们发现了一个并行安装ASP.NET AJAX的问题。如果你读过我原先的《VS 2008和.NET 3.5 Beta 2发布了》的博客贴子的话，你会记得下面这个我特别指出的来修正这一问题的安装后补丁步骤：

你应该下载和运行这个批文件。这只要几秒钟就可以运行完，它修补了这个星期早些时候我们发现的System.Web.Extensions.dll版本政策的问题，该程序集包含了 ASP.NET AJAX。如果你不运行这个批文件，那么用ASP.NET AJAX 1.0 和 VS 2005构建的现有的ASP.NET 2.0项目就会自动地运载随 .NET 3.5 Beta2发布的新ASP.NET AJAX 版本。这会工作而且运行良好，但会不小心导致你的VS2005应用依赖于.NET 3.5。运行这个批文件会改变新的System.Web.Extensions.dll 程序集的版本绑定政策，确保你只在你明确构建.NET 3.5项目时才使用新的.NET 3.5 ASP.NET AJAX版本。

好消息是，这会修正我们发现的并行安装问题，使得我们可以安全地在同一台机器上使用VS 2005和VS 2008同时开发ASP.NET AJAX应用。

但有一个问题是，在VS 2008中第一次打开老的ASP.NET 2.0项目时，它会导致VS 2008不正确地检测出所用ASP.NET AJAX的版本，特别地，它会导致VS 2008认为当前项目已经使用了.NET 3.5。这要求你在VS 2008 Beta2中第一次打开现有的ASP.NET AJAX 1.0网站项目时，采取额外的步骤来更正这个问题。在VS 2008的最终版本中，你将不需要采取这些步骤。

把ASP.NET AJAX 1.0应用升级到使用ASP.NET AJAX 3.5

当你使用VS 2008 打开使用了ASP.NET AJAX 1.0的现有ASP.NET 2.0 应用时，你可以选择将应用升级到使用.NET 3.5（以及包含在其中的ASP.NET AJAX 版本）。

VS Web工具组最近发表了《Upgrading ASP.NET AJAX 1.0 Websites and Web Applications to .NET Framework 3.5》的博客贴子，其中描述了怎么使用VS 2008 Beta2来实现升级的逐步指令。好消息是，把ASP.NET AJAX 1.0应用更新到.NET 3.5时，不要求你改动任何代码，只需要花几分钟就可以完成。

作为升级ASP.NET AJAX 1.0应用到.NET 3.5的一部分，你要更新你也许在用的编译过的ASP.NET AJAX控件库。ASP.NET AJAX 控件工具包开发组刚发表了AJAX 控件工具包的ASP.NET AJAX 1.0和.NET 3.5 版本，你可以在这里下载：

《Upgrading ASP.NET AJAX 1.0 Websites and Web Applications to .NET Framework 3.5》博客贴子讨论了如何将AJAX 控件工具包的ASP.NET AJAX 3.5版本加到VS 2008工具箱里。

使用VS 2008 构建ASP.NET AJAX 1.0应用（使用多定向）

当你使用VS 2008打开使用了ASP.NET AJAX 1.0的现有ASP.NET 2.0 应用时，你也可以选择不升级到.NET 3.5，而是使用VS 2008中新的多定向特性来构建使用了ASP.NET 2.0 和ASP.NET AJAX 1.0的应用。

VS Web工具组最近发表了《Using VS 2008 to Target ASP.NET AJAX 1.0》的博客贴子，其中描述了如何使用VS 2008 Beta2来实现这个开发的逐步指令。

在该博客贴子里，还包括了几个你要在Beta2中采取的手工步骤，来把ASP.NET AJAX 1.0和ASP.NET AJAX控件工具包服务器控件填充到VS 2008工具箱中。在VS 2008的最终版本中，我们会发布一个安装包来自动化这个过程，以及在VS 2008中添加可为你所用的ASP.NET AJAX 1.0项目和文件模板。

你也许在想，为什么使用VS 2008来针对ASP.NET AJAX 1.0应用，而不就用VS 2005呢? 好处是，它允许你构建能在你现有的服务器上工作的ASP.NET AJAX 1.0应用(不必马上把它们升级到.NET 3.5），同时，还允许你利用VS 2008 IDE的一些新特性，象JavaScript Intellisense, JavaScript Debugging，更棒的所见即所得的HTML设计器，CSS管理，改进的代码编译器，VS Professional中的单元测试，TFS中的连续集成支持，等等。

结语

.NET 3.5现在包括了对所有ASP.NET AJAX 1.0特性的内置支持。我会在将来撰写更多的博客贴子，描述如何利用它提供的新特性。

你可以使用VS 2008针对用ASP.NET AJAX 1.0开发的现有ASP.NET 应用，也可以针对内置于.NET 3.5的ASP.NET AJAX的新版本。上面提到的VS Web工具组的博客贴子在这2个方面的逐步指导应该对你有所帮助。

希望本文对你有所帮助，

Scott

一些IIS的小提示(针对1.0,1.1的用户)

Wed, 25 Jul 2007 02:34:54 GMT

IIS的修复

注意:此法只是针对1.0,1.1的用户.

一般IIS运行不了ASP.NET,试一下下面四种方法，99％有效：
1。.NET 安装的顺序应该是先装IIS，再装VS.NET，如果次序反了，或者IIS重装了，就需要使用aspnet_regiis.exe -i来重新安装IIS Mapping（主要用于aspx, asmx等文件的Extention的匹配）。在C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705目录下，运行下面的命令：aspnet_regiis.exe -i
2。重设ASPNET的密码，然后在下面的目录中找到Machine.config文件：%Systemroot%\Microsoft.NET\Framework\v1.0.3705\CONFIG （Systemroot是你的安装目录），在<processModel>标识中添加/修改：userName和password3。如果还不行，重装IIS，然后再按照方法1进行操作4。如果你的机器是域控制器，你可以参考Q315158：ASP.NET Does Not Work withASPNET Account on Domain Controller,大致讲一下操作的步骤：
1。在Administrative Tools->Active Directory Users and Computers中建立一个名为ASPUSER的用户，将该用户添加到用户组中（默认情况下已在User Group中）
2。在Administrative Tools->Local Security Settings－>Local Policy->UserRight Assignment中,双击右栏的Log on as a batch job项，在弹出的窗口中点击Add，选择或输入刚才建立的ASPUSER帐号，确定。（需要重启机器）
3。确保ASPUSER帐号有相应文件、目录的访问权限4。在下面的目录中找到Machine.config文件：%Systemroot%\Microsoft.NET\Framework\v1.0.3705\CONFIG （Systemroot是你的安装目录），在<processModel>标识中添加/修改：userName="DomainName\ASPUSER" password="ASPUSERpassword" 其中ASPUSERpassword是刚刚建立的ASPUSER的密码，DomainName是你的域名（重启机器）应该OK了！

ASP.NET 3.5(vs2008)之嵌套母板页

Thu, 12 Jul 2007 21:58:23 GMT

this article came from scottgu.

"Master Page" support was one of the most popular features introduced with ASP.NET 2.0, and is one of those features that almost every new ASP.NET project now uses to deliver consistent layout template support across a web site.One of the cooler scenarios that ASP.NET 2.0 supports is the ability to have "nested master pages" - where you can create a root master page for a site that defines a site's overall layout, and then create nested master pages that are based on the root master and further customize the layout (for example: you could create a SingleColumn.Master and TwoColumn.Master that defined 1 or 2 column layout structures based on the root master template). This nested master page feature is extremely flexible, and enables developers and designers to quickly and very cleanly make changes to the layout and organization of a site with minimal code changes and no content duplication. The one (big) catch, though, is that Visual Studio 2005 doesn't really support using nested master pages, and pages based on nested masters can't be edited within the VS 2005 WYSIWYG designer. The good news is that VS 2008 fully supports nested master pages, and makes using them super easy. Going forward I recommend that almost all ASP.NET projects should advantage of this feature - since it can add tremendous flexibility to the UI of your projects.

Using Nested Master Pages With VS 2008

One of the sites I recommend checking out is http://www.opensourcetemplates.org/. This is an online repository of free HTML site templates that you can browse, download and use. The templates on the site are pure HTML (meaning you can use them with any server-side programming technology), and are built using clean CSS and XHTML markup:

To help with this blog post, I picked one of the templates that I thought looked nice. You can browse it online here, and download it here.

Like most web-sites out there, this template has pages that utilize a few different layout approaches for displaying content. For example, it includes a page that uses multiple-columns to layout content:

It also has pages that use a single column approach that fills the entire width of the page with content:

Using the Above HTML/CSS Template with Nested Master Pages

Converting the above template to use ASP.NET and its nested Master Page support is really easy with VS 2008.

Step 1: Create a Site.Master template

To begin with we can create a new root master page file that we'll use to define the overall layout and structure for all pages on the site. We'll name this file "Site.Master" and copy/paste the "outer chrome" HTML from the template we downloaded into it. We'll then add a <asp:contentplaceholder> into the content section in the middle where we'll fill in page specific content. We'll name this <asp:contentplaceholder> control "MainContent":

Step 2: Create SingleColumn.Master Template

We used our Site.Master template above to define the "outer chrome template" of the site we are working on. We'll now want to create a few nested master pages that provide further templates that customize the layout of the "MainContent" section.

To do this we can right-click in the solution explorer and choose the "Add New Item" menu option. We'll create a new Master Page called "SingleColumn.Master" and will want to make sure that the checkbox indicating that we want to base this master page off a parent master page is selected:

VS 2008 will then allow us to pick the Site.Master template as the master page we want to base this new SingleColumn.master template on:

VS 2008 will then create a new SingleColumn.master file that looks like below:

Notice above how VS 2008 has picked up the fact that we defined a <asp:contentplaceholder> control in the root Site.Master file called "MainContent" - and automatically added a blank <asp:content> control within this nested master page so that we can override and customize that content region...

more details:

http://weblogs.asp.net/scottgu/archive/2007/07/09/vs-2008-nested-master-page-support.aspx

SDK for Longhorn and .NET 3.5 下载（Windows Server 2008)

Thu, 05 Jul 2007 21:05:21 GMT

SDK for Longhorn and .NET 3.5 下载（Windows Server 2008)

Microsoft® Windows® Software Development Kit (SDK) for Windows Server code name “Longhorn” and .NET Framework 3.5
--------------------------------------------------------------------------------

下载地址：
http://www.microsoft.com/downloads/details.aspx?FamilyID=58726aca-8d84-4683-8959-be0038da7084&DisplayLang=en

精彩掠影--电子商务支付平台（ASP.NET2.0 Project)

Tue, 03 Jul 2007 22:29:06 GMT

目前的电子商务支付平台主要分为3大类，分别是：全球电子支付网关PayPal、中国的支付宝、各银行的支付网关。
电子交易结算平台的支付模块使用全球电子支付网关PayPal作为结算网关，该支付模块通过如下4个操作环节实现在线支付。
（1）用户在线选购商品并接受系统结算
（2）通过PayPal帐户或信用卡支付金额
（3）支付模块接收用户的支付结果
（4）电子交易结算平台的管理员根据支付状态发货
电子结算模块的电子结算与支付流程如图1-1所示。

图1-1电子结算模块
电子交易结算平台的电子结算模块兼容PayPal网关的2种支付模式，分别是：支付数据传输（PDT-Payment Data Transfer）和即时付款通知（IPN-Instant Payment Notification）。
支付数据传输DPT主要实现用户的货币支付并返回原始购物系统，而即时付款通知IPN则直接通过购物系统提交支付信息。

完整内容请查看《ASP.NET2.0典型案例开发》第6章电子交易结算平台

搞计算机该学习的基础

Wed, 27 Jun 2007 21:32:28 GMT

数据结构

操作系统
Ｃ＋＋算法
离散数学

软件工程

数据库

计算机网络

计算机组成原理

没有一项和具体的公司商业技术有关，从这点就说明何谓计算机科学。公司商业技术只是一种社会行为的结果。

带来4个阅读点

Fri, 08 Jun 2007 21:19:20 GMT

最近太忙了，好久没有写BLOG。

今天带来4个阅读点。

1.SubSonic2.0

开源项目，开发轻量级项目的朋友可以使用它为你创建数据访问层。符合ORMapping原则，如果业务有需要就自己扩展代码即可。

动态和生成两个方式，根据需求选择吧。

地址:http://www.codeplex.com/actionpack/SourceControl/ListDownloadableCommits.aspx

2.MaNGOS

大名鼎鼎的WOW模拟器开源项目，最新版本支持TBC。很佩服他们的开源精神和钻研热情。

VC部分编译会非常慢，大概30分钟吧，根据个人机器不同有变化。

下载地址：http://sourceforge.net/projects/mangos/

3.平民程序 - linghuye's blog

喜欢游戏开发的可以关注他，真正的牛人。

http://www.cnitblog.com/linghuye/

4.要命的白领

白领不比以前了，在当下论哪个方面也不算高了。各方各业都有超过之实，公司的小白领千万别用命去换那点小钱，谨防变成真的白骨精。

Microsoft.NET BLOG(YunYang): Blog

security 4 ASP.NET -编写安全的ASP.NET应用

新书预告-《.NET Framework 3.5开发指南》（暂定名）

致尊敬的读者

IIS7管理工具包新特性

IIS 7 Admin Pack Preview 1 Released

Log Reporting Admin Module

Database Manager Module

Summary

VS IDE插件网站上线

写在战前的2008

Happiness and Wealth

Happiness and Wealth

正式发布基于VS2008的AJAX模板包

Using VS2008 to Target .NET Framework 2.0 with ASP.NET AJAX

简历该如何书写

关于动态数据的新功能-ASP.NET3.5

New ASP.NET Dynamic Data Support

Step 1: Create a ASP.NET Dynamic Data Site:

Step 2: Add a LINQ to SQL Data Model to Your Site

Step 3: Enable Dynamic Templates in Your Project:

Step 4: Run Your Site

Step 5: Customizing the Site Further

Try Visual Studio 2008

Try Visual Studio 2008

90-Day Trial Downloads

Upgrading your ZUNE 1(EST AM 2:30 USA)

嫦娥卫星的技术花絮

微软官方论坛注册有奖

上帝安排的World Champion

我写给美国UPS的客服自杀信

IPOD's KILLER--ZUNE1-ZUNE2

推荐一本书给初学者

第3本书震撼发布<>

.NET 3.5和VS 2008中的ASP.NET AJAX

【原文地址】 ASP.NET AJAX in .NET 3.5 and VS 2008 【原文发表日期】 Monday, July 30, 2007 12:06 AM

包括在.NET 3.5中的ASP.NET AJAX

理解ASP.NET AJAX的版本

重要的Beta 2信息

把ASP.NET AJAX 1.0应用升级到使用ASP.NET AJAX 3.5

使用VS 2008 构建ASP.NET AJAX 1.0应用（使用多定向）

结语

一些IIS的小提示(针对1.0,1.1的用户)

ASP.NET 3.5(vs2008)之嵌套母板页

Using Nested Master Pages With VS 2008

Using the Above HTML/CSS Template with Nested Master Pages

SDK for Longhorn and .NET 3.5 下载（Windows Server 2008)

精彩掠影--电子商务支付平台（ASP.NET2.0 Project)

搞计算机该学习的基础

带来4个阅读点

【原文地址】 ASP.NET AJAX in .NET 3.5 and VS 2008
【原文发表日期】 Monday, July 30, 2007 12:06 AM