THE EXPERT’S VOICE® IN .NET For your convenience Apress has placed some of the front matter material after the index. Please use the Bookmarks and Contents at a Glance links to access them. Contents at a Glance About the Author ......................................................................................................xxvii About the Technical Reviewers .................................................................................xxix Acknowledgments .....................................................................................................xxxi Introduction .............................................................................................................xxxiii ■ Part 1: Introducing .NET............................................................................1 ■ Chapter 1: The Big Picture ...........................................................................................3 ■ Chapter 2: The C# Language ......................................................................................15 ■ Chapter 3: Types, Objects, and Namespaces .............................................................47 ■ Part 2: Developing ASP.NET Applications...............................................77 ■ Chapter 4: Visual Studio ............................................................................................79 ■ Chapter 5: Web Form Fundamentals .......................................................................121 ■ Chapter 6: Web Controls ..........................................................................................163 ■ Chapter 7: Error Handling, Logging, and Tracing .....................................................203 ■ Chapter 8: State Management .................................................................................233 ■ Part 3: Building Better Web Forms.......................................................269 ■ Chapter 9: Validation ...............................................................................................271 ■ Chapter 10: Rich Controls ........................................................................................293 ■ Chapter 11: User Controls and Graphics ..................................................................319 ■ Chapter 12: Styles, Themes, and Master Pages ......................................................345 ■ Chapter 13: Website Navigation ..............................................................................387 v ■ Contents At A GLAnCe ■ Part 4: Working with Data....................................................................423 ■ Chapter 14: ADO.NET Fundamentals ........................................................................425 ■ Chapter 15: Data Binding.........................................................................................473 ■ Chapter 16: The Data Controls .................................................................................511 ■ Chapter 17: Files and Streams ................................................................................551 ■ Chapter 18: XML ......................................................................................................581 ■ Part 5: Website Security.......................................................................615 ■ Chapter 19: Security Fundamentals ........................................................................617 ■ Chapter 20: Membership .........................................................................................639 ■ Chapter 21: Profiles .................................................................................................675 ■ Part 6: Advanced ASP.NET....................................................................697 ■ Chapter 22: Component-Based Programming .........................................................699 ■ Chapter 23: Caching ................................................................................................729 ■ Chapter 24: LINQ and the Entity Framework ...........................................................753 ■ Chapter 25: ASP.NET AJAX .......................................................................................791 ■ Chapter 26: Deploying ASP.NET Applications ..........................................................825 Index ...........................................................................................................................867 vi Introduction ASP.NET is Microsoft’s platform for developing web applications. Using ASP.NET, you can create e-commerce shops, data-driven portal sites, and just about anything else you can find on the Internet. Best of all, you don’t need to paste together a jumble of HTML and script code in order to program the Web. Instead, you can create full-scale web applications using nothing but code and a design tool such as Visual Studio. The cost of all this innovation is the learning curve. To master ASP.NET, you need to learn how to use an advanced design tool (Visual Studio), a toolkit of objects (the .NET Framework), and an object-oriented programming language (such as C#). Taken together, these topics provide more than enough to overwhelm any first-time web developer. Beginning ASP.NET 4.5 in C# assumes you want to master ASP.NET, starting from the basics. Using this book, you’ll build your knowledge until you understand the concepts, techniques, and best practices for writing sophisticated web applications. The journey is long, but it’s also satisfying. At the end of the day, you’ll find that ASP.NET allows you to tackle challenges that are simply out of reach on many other platforms. About This Book This book explores ASP.NET, which is a core part of Microsoft’s .NET Framework. The .NET Framework is not a single application—it’s a collection of technologies bundled into one marketing term. The .NET Framework includes languages such as C# and VB, an engine for hosting programmable web pages, a model for interacting with databases (ADO.NET), a higher-level framework for performing queries (LINQ and the Entity Framework), and a class library stocked with tools for everything from reading files to validating a password. To master ASP. NET, you need to learn about each of these ingredients. This book covers all these topics from the ground up. As a result, you’ll find yourself learning many techniques that will interest any .NET developer, even those who create Windows applications. For example, you’ll learn about component-based programming, you’ll discover structured error handling, and you’ll see how to access files, XML, and relational databases. You’ll also learn the key topics you need for web programming, such as state management, web controls, and caching. By the end of this book, you’ll be ready to create your own rich web applications and make them available over the Internet. Who Should Read This Book This book is aimed at anyone who wants to create dynamic websites with ASP.NET. Ideally, you’ll have experience with a previous version of a programming language such as C or Java. If not, you should be familiar with basic programming concepts (loops, conditional structures, arrays, and so on), whether you’ve learned them in Visual Basic, Pascal, Turing, or a completely different programming language. This is the only requirement for reading this book. Understanding HTML and XHTML (the markup languages used to write web pages) will help you, but it’s not required. ASP.NET works at a higher level, allowing you to deal with full-featured web controls instead of raw web page markup. However, you’ll get a quick overview of HTML5 fundamentals in Chapter 4, and you’ll learn about CSS, the Cascading Style Sheet standard, in Chapter 12. This book will also appeal to programmers who have some experience with C# and .NET but haven’t worked with ASP.NET in the past. However, if you’ve used a previous version of ASP.NET, you’ll probably be more interested in a faster-paced book such as Pro ASP.NET 4.5 in C# instead. xxxiii ■ IntroduCtIon ■ Note this book begins with the fundamentals: C# syntax, the basics of object-oriented programming, and the philosophy of the .net Framework. If you haven’t worked with C# before, you can spend a little more time with the syntax review in Chapter 2 to pick up everything you need to know. If you aren’t familiar with the ideas of object- oriented programming, Chapter 3 fills in the blanks with a quick but comprehensive review of the subject. the rest of the book builds on this foundation, from AsP.net basics to advanced examples that show the techniques you’ll use in real-world web applications. ASP.NET MVC this book focuses on web forms, which is AsP.net’s original website-building model. However, in recent years Microsoft has also added another toolkit, called AsP.net MVC (AsP.net Model-View-Controller), which offers a dramatically different way to build web pages. the core idea of AsP.net MVC is that your application is separated into three logical parts. the model includes the application-specific business code that powers your application. the view creates a suitable representation of the model, by converting it to the HtML that browsers understand. the controller coordinates the whole show, handling user interactions, updating the model, and passing the information to the view. Although this sounds simple enough, the MVC pattern sidelines several traditional AsP.net concepts that are discussed in this book, including web forms, web controls, view state, postbacks, and session state. to some, the MVC pattern is cleaner and more suited to the Web. to others, it’s a whole lot of extra effort with no clear payoff. Microsoft suggests you consider AsP.net MVC if you need to implement test-driven development (which uses automated tests to validate web pages), or if you need complete control over the urLs and the HtML markup that are used in your web pages. AsP.net MVC isn’t discussed in this book (and it’s a bit of a slog for developers who aren’t already familiar with AsP.net). However, you can get more information from the official AsP.net MVC website at www.asp.net/mvc or the book Pro ASP.NET MVC 4 (Apress, 2012). What You Need to Use This Book To develop ASP.NET web pages, you need a computer with Visual Studio 2012. You can use the free Visual Studio 2012 Express for Web edition (available at http://tinyurl.com/bpjvx7c), which has all the tools and functionality you’ll use in this book. To use an ASP.NET web page (in other words, to surf to it over the Internet), you simply need a web browser. ASP.NET fully supports Microsoft Internet Explorer, Mozilla Firefox, Opera, Apple Safari, Google Chrome, and any other browser that respects the HTML standard on virtually any operating system. There are a few features that won’t work with extremely old browsers (such as the ASP.NET AJAX techniques you’ll learn about in Chapter 25), but 99.9 percent of web surfers can use any ASP.NET page to its fullest. If you plan to host websites on your computer, you’ll also need to use Internet Information Services (IIS), the web hosting software that’s part of the Windows operating system. You might also use IIS if you want to test deployment strategies. You’ll learn how to use and configure IIS in Chapter 26. xxxiv ■ IntroduCtIon Finally, this book includes several examples that use SQL Server. “You can use any version of SQL Server to try these examples, including SQL Server Express LocalDB, which is included with Visual Studio.” If you use other relational database engines, the same concepts will apply; you will just need to modify the example code. Code Samples To master ASP.NET, you need to experiment with it. One of the best ways to learn ASP.NET is to try the code samples for this book, examine them, and dive in with your own modifications. To obtain the sample code, surf to www.prosetech.com or the publisher’s website at www.apress.com/9781430242512. You’ll also find some links to additional resources and any updates or errata that affect the book. Chapter Overview This book is divided into six parts. Unless you’ve already had experience with the .NET Framework, the most productive way to read this book is in order from start to finish. Chapters later in the book sometimes incorporate features that were introduced earlier in order to create more well-rounded and realistic examples. On the other hand, if you’re already familiar with the .NET platform, C#, and object-oriented programming, you’ll make short work of the first part of this book. Part 1: Introducing .NET You could start coding an ASP.NET application right away by following the examples in the second part of this book. But to really master ASP.NET, you need to understand a few fundamental concepts about the .NET Framework. Chapter 1 sorts through the Microsoft jargon and explains what the .NET Framework really does and why you need it. Chapter 2 introduces you to C# with a comprehensive language tour. Finally, Chapter 3 explains the basics of modern object-oriented programming. Part 2: Developing ASP.NET Applications The second part of this book delves into the heart of ASP.NET programming and introduces its event-based model. In Chapter 4, you’ll take a look around the Visual Studio design environment and learn a few fundamentals about web forms, events, and HTML5. In Chapters 5 and 6, you learn how to program a web page’s user interface through a layer of objects called server controls. Next you’ll explore two more essentials of ASP.NET programming. Chapter 7 presents techniques for handling errors. Chapter 8 describes strategies for state management. Taken together, the chapters in this part contain all the core concepts you need to design web pages and create a basic ASP.NET website. Part 3: Building Better Web Forms The third part of this book explores several topics that can help you transform ordinary web pages into polished web applications. In Chapter 9, you’ll learn to use the validation controls to catch invalid data before the user submits it. In Chapter 10, you’ll move on to consider some of ASP.NET’s more advanced controls, such as the Calendar and Wizard. In Chapter 11, you’ll learn how to build your own reusable blocks of web page user interface and draw custom graphics on the fly. Finally, Chapter 12 shows how you can standardize the appearance of an entire website with themes and master pages, and Chapter 13 shows you how to add navigation to a website. xxxv ■ IntroduCtIon Part 4: Working with Data Almost all software needs to work with data, and web applications are no exception. In Chapter 14, you begin exploring the world of data by considering ADO.NET—Microsoft’s .NET-powered technology for interacting with relational databases. Chapters 15 and 16 explain how to use data binding and the advanced ASP.NET data controls to create web pages that integrate attractive, customizable data displays with automatic support for paging, sorting, and editing. Chapter 17 moves out of the database world and considers how to interact with files. Chapter 18 broadens the picture even further and describes how ASP.NET applications can use the XML support that’s built into the .NET Framework. Part 5: Website Security Every public website needs to deal with security—making sure that sensitive data cannot be accessed by the wrong users. In Chapter 19, you’ll learn how ASP.NET provides authentication systems for dealing with users. You can write your own custom logic to verify usernames and passwords, or you can use existing Windows account information. In Chapter 20, you’ll learn about the membership model, which extends the authentication system with prebuilt security controls and handy objects that automate common tasks. If you want, you can even get ASP.NET to create and manage a database with user information automatically. Finally, Chapter 21 deals with another add-on—the profiles model that lets you store information for each user automatically, without writing any database code. Part 6: Advanced ASP.NET This part includes the advanced topics you can use to take your web applications that extra step. Chapter 22 covers how you can create reusable components for ASP.NET applications. Chapter 23 demonstrates how careful use of caching can boost the performance of almost any web application. Chapter 24 explores LINQ and the Entity Framework, two features that let you interact with a database without writing reams of custom code. Chapter 25 introduces ASP.NET AJAX, which allows you to build responsive web pages that add rich features such as text autocompletion and drag-and-drop. Finally, Chapter 26 walks you through the steps for deploying your application to a web server. Feedback This book has the ambitious goal of being the best tutorial and reference for ASP.NET. Toward that end, your comments and suggestions are extremely helpful. You can send complaints, adulation, and everything in between directly to [email protected]. I can’t solve your ASP.NET problems or critique your code, but I do benefit from information about what this book did right and wrong (and what it may have done in an utterly confusing way). You can also send comments about the website support for this book. xxxvi PART 1 Introducing .NET ChAPTeR 1 The Big Picture The Web has now existed for roughly two decades. In that time, the way websites look and work has changed dramatically. The way people create websites has also evolved. Today web pages can be written by hand (perhaps with the help of a design tool such as Adobe Dreamweaver), or they can be programmed using any one of a number of powerful platforms. ASP.NET is Microsoft’s web programming toolkit. It’s a part of .NET, a cluster of technologies that are designed to help developers build a variety of applications. Developers can use the .NET Framework to build rich Windows applications, services that run quietly in the background, and even command-line tools. Developers write the code in one of several core .NET languages, such as C#, which is the language you’ll use in this book. In this chapter, you’ll examine the technologies that underlie .NET. First you’ll take a quick look at the history of web development and learn why the .NET Framework was created. Next you’ll get a high-level overview of the parts of .NET and see how ASP.NET 4.5 fits into the picture. The Evolution of Web Development The Internet began in the late 1960s as an experiment. Its goal was to create a truly resilient information network—one that could withstand the loss of several computers without preventing the others from communicating. Driven by potential disaster scenarios (such as a nuclear attack), the US Department of Defense provided the initial funding. The early Internet was mostly limited to educational institutions and defense contractors. It flourished as a tool for academic collaboration, allowing researchers across the globe to share information. In the early 1990s, modems were created that could work over existing phone lines, and the Internet began to open up to commercial users. In 1993, the first HTML browser was created, and the Internet revolution began. Basic HTML It would be difficult to describe early websites as web applications. Instead, the first generation of websites often looked more like brochures, consisting mostly of fixed HTML pages that needed to be updated by hand. A basic HTML page is a little like a word-processing document—it contains formatted content that can be displayed on your computer, but it doesn’t actually do anything. The following example shows HTML at its simplest, with a document that contains a heading and a single line of text: <!DOCTYPE html> <html> <head> <title>Sample Web Page</title> </head> <body> 3