Hi all,

I am trying to upload an image from asp.net 2.0 application using a file upload control. this works fine in my local development machine , but once i have deployed on to the web server, its jus crashing giving "Security Exception" the detailed error msg is something like this

Security Exception

Line 32:             End If
Line 33: 
Line 34:             Dim fi As New IO.FileInfo(fuImage.PostedFile.FileName)
Line 35:             objServices.ServiceImage = fi.Extension
Line 36:             Dim PhotoId As Integer = objServicesBO.InsertMrservices(objServices)

Did you "contact your system administrator or change the application's trust level in the configuration file?"

Jeff

yes the application level config file is alright..i have also communicated with the web server support team but they say there is problem with my script , but i see no problem with my script bcoz its working on my local server. Can you please tell me anything thats specific thats need to be added to the application level config file..

 Thanks

Srenvas

Hi Srenvas,

I'm not sure if your problem overlaps enough with mine, but I'm using goddaddy as well and could not get a fileupload control to work when I was trying to write a file to a directory ~/images, even though everything worked fine when I ran it locally.

Here's my fix: I had to create a custom directory via godaddys hosting control center (under content, click on directory management), and give it read, write, and web permissions. It took awhile for the directory to be created, but after it was created and I copied the images to that directory everything worked.

Hope this helps,
--john

 

May b this will help

<configuration>
<system.web>
<identity impersonate="true" userName="xx" password="xx"/>

OR

<configuration>
<system.web>
<identity impersonate="true">

(MARK AS ANSWER IS IT SOLVES THE PROBLEM)

By Default IIS runs the ASP .NET web application as the Internet user with minimum privileges. So, while accessing any network resources like network drives, printer, files, etc., you need to impersonate a user of the server who has the required privileges. Do this very carefully as this can cause security holes if impersonated an administrative user.

Thanks

~B 

 i am getting this error in the server ... 

 but the code runs well in localhost wht might be the error !

Check if the file is accessible by simply opening it through the url. Check if the IIS process has permissions to access it. Check the absolute / relative paths. Try using impersonation.

Hi,

U say that it's a file upload problem, but last time u post a picture that seem to me a "database connection string" error. Please check it out. or If u have problem in file upload u can use following code which is work fine for me at any web server.

 =======================================================

            if(imageUpload.PostedFile.ContentLength == 0)              

 lblmsg.Text = "No file Selected";
            else
            {  
                                    
                //image upload
                string fileType = Path.GetFileName(imageUpload.PostedFile.ContentType);
                if((fileType =="pjpeg")||(fileType =="jpeg"))
                    fileType = "jpeg";
                if((fileType == "jpeg")||(fileType =="bmp")||(fileType =="jpg"))
                {                    
                    fileName =imageId.ToString()+"."+ fileType;
                    string destPath = Path.Combine(filePath,fileName);
                    imageUpload.PostedFile.SaveAs(destPath);                        

                }//End if                

            }//End if

====================================== 

I think this link will help you to solve the problem,

http://support.microsoft.com/kb/815147

Another things that you can write -

<location allowOverride=false>
<system.web>
<securityPolicy>
<trustLevel name="Full" policyFile="internal"/>
<trustLevel name="High" policyFile="web_hightrust.config"/>
<trustLevel name="Medium" policyFile="web_mediumtrust.config"/>
<trustLevel name="Low" policyFile="web_lowtrust.config"/>
<trustLevel name="Minimal" policyFile="web_minimaltrust.config"/>
</securityPolicy>
<trust level="Medium" originUrl=""/>
</system.web>
</location>

In the web.config file, that can set the browser's TurstLevel.