Book Image

NHibernate 2 Beginner's Guide

By : Aaron Cure
Book Image

NHibernate 2 Beginner's Guide

By: Aaron Cure

Overview of this book

<p>NHibernate is an open source object-relational mapper, or simply put, a way to retrieve data from your database into standard .NET objects. Quite often we spend hours designing the database, only to go back and re-design a mechanism to access that data and then optimize that mechanism. This book will save you time on your project, providing all the information along with concrete examples about the use and optimization of NHibernate.<br /><br />This book is an approachable, detailed introduction to the NHibernate object-relational mapper and how to integrate it with your .NET projects. If you're tired of writing stored procedures or maintaining inline SQL, this is the book for you.<br /><br />Connecting to a database to retrieve data is a major part of nearly every project, from websites to desktop applications to distributed applications. Using the techniques presented in this book, you can access data in your own database with little or no code.<br /><br />This book covers the use of NHibernate from a first glance at retrieving data and developing access layers to more advanced topics such as optimization and Security and Membership providers. It will show you how to connect to multiple databases and speed up your web applications using strong caching tools. We also discuss the use of third-party tools for code generation and other tricks to make your development smoother, quicker, and more effective.</p>
Table of Contents (19 chapters)
NHibernate 2
Credits
About the Author
About the Reviewers
Preface
Index

maxRequestLength


One of the ways an attacker can get into your site is by attempting to cause a "buffer overflow" or by creating a denial of service by sending large amounts of data to your server. This can also be a problem if you have an <asp:FileUpload> control on one of your pages because the attacker could upload large files one after another until the disk space is filled, possibly causing your server to error out.

One way to help protect yourself from these types of attacks is to set a maxRequestLength. The maxRequestLength is a filter, rejecting user requests that are larger than the threshold set. For instance, the default setting in your Machine.config file is set to 4096 KB or 4 MB. Ninety-nine percent of all your pages will be well below that, probably more likely in the 512 KB or less range.

To protect yourself, add an <httpRuntime> directive in the <system.web> section of the Web.config, and set the maxRequestLength to a reasonable value.

<system.web>
...