Hey Guys

You the Men!
It's great to know that all that good Beer was not wasted on you.

A preview release for MVC2.0 is now available so the dll issue might be a moot point. I'll check it out.

Thanks again for all your help
Ralph

Some of the issues have been resolved, however some haven't. Plus a good lively debate never hurt anybody.

The MVC team really did a disservice by making the AcceptVerb attribute look like a security mechanism. Because it was never intended to be that, and it has fooled many developers. A proper security system rejects the attempt right away, which is what HttpPostOnly was designed to do. It is like saying "immediately reject if the POST verb doesn't match". However AcceptVerb is sort of like a gateway, which says "skip me if you don't have a POST verb". The "skip me" part is where you can have many problems if you have a lot of route rules, or if your application will some day have a lot of route rules, because after this action as been skipped, it will go on and find all the other actions that may match. If it finds one that it wasn't intended to match to, you have a hole in your application that is very hard to find.

That is why I am so passionate about this particular attribute, because it has the ability to give people a false sense of security. Because I fought this tooth and nail over in CodePlex, for them to add more security to this particular action method filter, because me and some others saw the chance for abuse.

http://aspnet.codeplex.com/WorkItem/...orkItemId=2201

I am really glad you like the book, and look forward to seeing your review on Amazon.

__________________
Check out my blog at: http://www.coderjournal.com

I recently bought the book and it looks very promising but I got in same troubles when diving into the actual code.

As per suggested, I tried to subscribe to SVN code branch at codeplex but I get when sync reaches as at \...\Source\TheBeerHouse_35_CS\BeerHouse35\App_The mes\DarkBeer\images\.svn'.


Now fortunately, I was able to download actual zip archive from codeplex but it has the the same famous errors with redirect methid and [ServiceOnly, HttpPostOnly] attributes. Is there any link to get the missing ManagedFusion.Web.dll? further to my surprise, there are no broken references appearing. Also how to get around that redirect overload problem. Thanks

Check in the /Resources directory of the downloaded zip file. Everything is there that you need.

__________________
Check out my blog at: http://www.coderjournal.com