Code Access Security

CAS

@ When you run an unmanaged application in Windows 2003, XP or earlier, that code gets all the privileges your user account has. The application can do anything your user account has permissionos to do. so you are forced to log on with minimal privileges to restrict application permissions.

@ Code Access Security (CAS), a concept that .NET Framework introducted into Windows, enables users to restrict on a very granular level what managed application can do.

@ CAS allows administrators and developers to control applicatoin authorization similar to the way they have always been albe to authorize users.

@ Unfortunately, CAS can be applied only to managed applications that use the .NET Framework runtime. Unmanaged applications run without any CAS restrictions and are limited only by the operating system's RBS.

^ ASP.NET中的Membership和Role Management是对“人”（people, user）的权限管理（authentication和authorization）；而CAS则是对“程序”（application，code）进行权限管理。

Evidence

@ Generally, a security system use the username, password, access control lists to identify users and determine what a user can and can't do. However, CAS identifies and assigns permissions to applications ratha than to people, thus, it identifies assembilies using evdience.
@ In CAS, evidence is used just like a person's passport, password, and PIN - information that proves identity and describes an individual as deserving a certain level of trust.

@ Each piece of evidence is a way that an assembly can be identified, such as the location (folder or website) where the assembly is stored and running, a hash of the assembly's code, or the assembly's digital signature.

@ There are 2 types of evidence: host evidence and assembly evidence:

1. Host evidence describes the assembly's origin, such as the application directory, URL, or site; and also describes the assembly's identity, such as the hash, pulisher, or strong name.
2. Assembly evidence are ones provided by custom user or developer.

^ I think evidence is the Authentication part of the security process for application or code, just like username and password are the Authentication for people or users.

Permission

@ A permission is a CAS access control entry.

^ A permission set is a CAS ACL (Access Control List).

What the fuck Callback is on earth? Define it!

To synchronize thread pool threads

@ Queue your task for execution by passing the WaitCallback delegate to ThreadPool.QueueUserWorkItem. Your callback method executes when a thread pool thread becomes available.

@ In many cases, creating your own thread is not necessary or suggested.
The threading system in .NET supports a built-in thread pool that can be used in many situations where you might expect to create your own threads.


e The Managed Thread Pool

Cleaning Up Unmanaged Resources

What you should NOT do in cleaning up unmanaged resoures!

1. You should prevent users of your application from calling an object's Finalize method directly by limiting its scope to protected.
2. You are strongly discouraged from calling a Finalize method for a class other than your base class directly from your application's code.

How to properly clean up unmanaged resources?

@ To properly dispose of unmanaged resources, it is recommended that you implement a public Dispose or Close method that executes the necessary cleanup code for the object.

@ The IDisposable interface provides the Dispose method for resource classes that implement the interface. Because it is public, users of your application can call the Dispose method directly to free memory used by unmanaged resources.
@ When you properly implement a Dispose method, the Finalize method becomes a safeguard to clean up resources in the event that the Dispose method is not called.

@ The IDisposable Interface defines a method to release allocated unmanaged resources.

Why do we need IDisposable?

1. The garbage collector automatically releases the memory allocated to a managed object when that object is no longer used, however, it is not possible to predict when garbage collection will occur.
2. Furthermore, the garbage collector has no knowledge of unmanaged resources such as window handles, or open files and streams.

@ Thus, we should use the Dispose method of this interface to explicitly release unmanaged resources in conjunction with the garbage collector.

@ The consumer of an object can call this method when the object is no longer needed.

@ When calling a class that implements the IDisposable interface, use the try-finally pattern to make sure that unmanaged resources are disposed of even if an exception interrupts your application.

@ Destructors are used to destruct instances of classes.

Using Destructors to Release Resources

@ In general, C# does not require as much memory management as is needed when developing with a language that does not target a runtime with garbage collection. This is because the .NET Framework garbage collector implicitly manages the allocation and release of memory for your objects.
When your application encapsulates unmanaged resources such as windows, files, and network connections, you should use destructors to free those resources. When the object is eligible for destruction, the garbage collector runs the object's Finalize method.

@ A class can only have one destructor.
@ Destructors cannot be inherited or overloaded.
@ Destructors cannot be called. They are invoked automatically.
@ A destructor does not take modifiers or have parameters.
@ Destructors cannot be defined in structs. They are only used with classes.

@ The programmer has no control over when the destructor is called because this is determined by the garbage collector.
The garbage collector checks for objects that are no longer being used by the application. If it considers an object eligible for destruction, it calls the destructor (if any) and reclaims the memory used to store the object.
Destructors are also called when the program exits.

e Implementing a Dispose Method

e Garbage Collection

e Cleaning Up Unmanaged Resources

Using MemberInfo of System.Reflection

@ You need to ascertain wheter a method named OneMethod is accessible to a derived class. What shoud you do?
^ Call the IsFamily property of the MethodInfo Class.

@ The IsFamily property gets a value indicating whether the visibility of this method or constructor is described by MethodAttributes.Family; that is, the method or constructor is visible only within its class and derived classes. (Inherited from MethodBase.)
^ Family Indicates that the method is accessible only to members of this class and its derived classes.

^ The MethodAttribute enumeration also contains:
Abstract Indicates that the class does not provide an implementation of this method.
Assembly Indicates that the method is accessible to any class of this assembly.
Final Indicates that the method cannot be overridden.
Private Indicates that the method is accessible only to the current class.
Virtual Indicates that the method is virtual
Static Indicates that the method is defined on the type; otherwise, it is defined per instance.

e You can read more about MethodAttributes's member here.

e About MethodInfo class

Reflecting types

The Type class有什么用？

@ The Type class represents a single type, allowing you to look at the methods, properties, events, interfaces, and inheritance tree of a particular type in the system.

How to get the Type object?

@ You can get Type object in 4 ways:

1. From the Assembly class
2. From the Module class
3. From the instance of an object
4. Using keyword typeof in C# or GetType in VB.

@ 1st way: from the Assembly class:

Dim OneAssembly As Assembly = Assembly.GetExecutingAssembly()
Dim AssemblyTypes() As Type = OneAssembly.GetTypes()

@ 2nd way: from the Module class:

Dim AllModulesOfOneAssembly As [Module] = OneAssembly.GetModules()
Dim OneModuleOfOneAssembly As [Module] = AllModulesOfOneAssembly(0)
Dim AllTypesOfOneModuleOfOneAssembly () As Type = OneModuleOfOneAssembly .GetTypes()

@ 3rd way: get the type of the instance of an object by calling its GetType method:

Dim OneObject As New Object()
Dim TypeOfOneObject As Type = OneObject.GetType()

@ 4th way: create a Type object using C# typeof / VB GetType keywork:

Dim OneSpecificType As Type = GetType(Int32) 'VB

Type OneSpecificType = typeof(Int32) //C#

ASP.NET comment syntax, sever-side and client-side

<%-- content to comment --%>

@ Server-side comments allow developers to embed code comments in any part of an ASP.NET application file (except for within script code blocks).

@ Any content between opening and closing tags of server-side comment elements, whether ASP.NET code or literal text, will not be processed on the server or rendered to the resulting page.

@ A compilation error will occur if you use server-side comment blocks within <% %>blocks.

@ Server-side comment blocks cannot be nested.

How to Adding AJAX Features to an Existing ASP.NET Application

e Enhancing Existing Applications with ASP.NET AJAX Extensions

User Interface Process (UIP) Application Block

e User Interface Process (UIP) Application Block

The Literal control of ASP.NET 2.0

@ Add a Literal Web server control to your page when you want to set text programmatically without adding extra HTML tags. The Literal control is useful as a way to add text into a page dynamically without adding any elements that are not part of the dynamic text. For example, you can use the Literal control to display HTML that you read from a file or from a stream.

@ If you want to display static text, you can present it using HTML; you do not need a Literal control. Use a Literal control only if you need to render text programmatically.

@ You can use a Literal Web server control as a container for other content on the page. The Literal control is used most frequently when adding content dynamically to the page.

Comparing the Literal Control to Other Options
The Literal control represents one of several options for adding content to a page. For static content, you can add markup directly to a page as HTML, without using a container. However, if you want to add content dynamically, you must add the content to a container. Typical containers are the Label control, the Literal control, the Panel control, and the Placeholder control.
The Literal control differs from the Label control in that the Literal control does not add any HTML elements to the text. (The Label control renders a span element.) As a consequence, the Literal control does not support any style attributes, including position attributes. However, the Literal control allows you to specify whether content is encoded.
The Panel and Placeholder controls render as div elements, which create discrete blocks in the page, unlike rendering in-line the way the Label and Literal controls do.
In general, use a Literal control when you want to render text and controls directly into a page without any additional markup.

ASP.NET intergration with IIS7

e ASP.NET Integration with IIS7 Written by Mike Volodarsky

ASP.NET Enhancements on IIS7

Better ASP.NET integration in IIS7 both enhances existing applications, and allows new applications to take advantage of ASP.NET features in new ways:

• ASP.NET services can be used for all content types.
  In the past, ASP.NET functionality such as Forms Authentication, Roles, Url Authorization, and Output Caching were only available to ASP.NET content types (ASPX pages, for example). Static files, ASP pages, and other content types could not benefit from these services.
  In IIS7, all ASP.NET services can be provided uniformly to all content. For example, you can protect all of your web content, including images and asp pages, with your existing ASP.NET 2.0 access control solution built on ASP.NET Forms Authentication, Membership and Login controls.
• Fully extend IIS with ASP.NET.
  Previous versions of IIS frequently required server extensibility to be developed using the native ISAPI filter or extension extensibility mode, due to the runtime limitations of ASP.NET.
  IIS7 allows ASP.NET modules to plug in directly into the server pipeline, with the same runtime fidelity as modules developed with the native (C++) server API. ASP.NET modules can execute in all runtime stages of the request processing pipeline, and be executed in any order with respect to native modules. The ASP.NET API has also been expanded to allow more control over request processing then was previously possible.
• Unified server runtime.
  Tighter ASP.NET integration also allows many of the features between IIS and ASP.NET to be unified. IIS7 features unified configuration for IIS and ASP.NET modules and handlers. Many other features, including custom errors, and tracing, have been unified to allow better management and cohesive application design.

ASP.NET Integration Architecture

In IIS7, the ASP.NET request processing pipeline overlays the IIS pipeline directly, essentially providing a wrapper over it instead of plugging into it.

A request arriving for any content type is processed by IIS, with both native IIS modules and ASP.NET modules being able to provide request processing in all stages. This enables services provided by ASP.NET modules like Forms Authentication or Output Cache to be used for requests to ASP pages, PHP pages, static files, and so on.

The ability to plug in directly into the server pipeline allows ASP.NET modules to replace, run before, or run after any IIS functionality. This enables, for example, a custom ASP.NET basic authentication module written to use the Membership service and SQL Server user database to replace the built in IIS basic authentication feature that works only with Windows accounts.

In addition, the expanded ASP.NET APIs take advantage of direct integration to enable more request processing tasks. For example, ASP.NET modules can modify request headers before other components process the request, inserting an Accept-Language header before ASP applications execute in order to force localized content to be sent back to the client based on user preference.

Because of the runtime integration, IIS and ASP.NET can use the same configuration for enabling and ordering server modules, and configuring handler mappings. Other unified functionality includes tracing, custom errors, and output caching.

Runtime Fidelity

In Integrated mode, the ASP.NET request processing stages exposed to modules are directly connected to the corresponding stages of the IIS pipeline. The complete pipeline contains the following stages, exposed as HttpApplication events in ASP.NET:

1. BeginRequest. The request processing is starting.
2. AuthenticateRequest. The request is being authenticated. IIS and ASP.NET authentication modules subscribe to this stage to perform authentication.
3. PostAuthenticateRequest
4. AuthorizeRequest. The request is being authorized. IIS and ASP.NET authorization modules check whether the authenticated user has access to the resource being requested.
5. PostAuthorizeRequest
6. ResolveRequestCache. Cache modules can check whether the response to this request exists in the cache, and return it instead of proceeding with the rest of the execution path. Both ASP.NET Output Cache and the new IIS Output Cache features execute here.
7. PostResolveRequestCache
8. MapRequestHandler. This stage is internal in ASP.NET, and is used to determine the request handler.
9. PostMapRequestHandler
10. AcquireRequestState. The state necessary for the request execution is being fetched. ASP.NET Session State, and Profile modules obtain their data here.
11. PostAcquireRequestState
12. PreExecuteRequestHandler. Any tasks before the execution of the handler can be performed here.
13. ExecuteRequestHandler. The request handler executes here. ASPX pages, ASP pages, CGI programs, and static files are served here.
14. PostExecuteRequestHandler
15. ReleaseRequestState. The request state changes are saved, and the state is cleaned up here. ASP.NET Session State and Profile modules use this stage for cleanup.
16. PostReleaseRequestState
17. UpdateRequestCache. The response can be stored in the cache for future use here. The ASP.NET Output Cache and IIS Output Cache modules execute here to save the response to their caches.
18. PostUpdateRequestCache
19. LogRequest. This stage is used to log the results of the request, and is guaranteed to execute even if errors occur.
20. PostLogRequest
21. EndRequest. This stage is used to perform any final request cleanup, and is guaranteed to execute even if errors occur.

The ability to execute in the same stages as IIS modules makes many tasks previously only accessible to native ISAPI filters and extensions now possible in managed code, using the familiar ASP.NET APIs and the rich functionality of the .NET platform. For example, you can now write modules that do the following:

• Intercept the request before any processing has taken place, for example for re-writing urls or performing security filtering.
• Replace built in authentication modes.
• Modify the incoming request contents, such as request headers.
• Filter outgoing responses for all content types.

VB.NET v.s. C# v.s. Java

^ 有人说有经验的programmer在VB.NET和C#之间转换只需要一个星期的时间，我也觉得不需要费多久。我现在在一个咨询项目里使用这两种语言，经常是今天VB.NET，明天C#，需要做的就是偶尔查查MSDN上的Language Syntax Reference。写程序，关键的是编程思想，语法差别不是重要的。所以，我很乐意地说：VB.NET和C#我都用得挺好。
^ 我从前写了四五年Java，从Java到C#转换我没有感觉有多少困难。反正我写程序的方式、风格、思路还是一样。并且，我还是可以随时用Java编程。所以，我认为：
最重要的是deep understanding of Object-Oriented。
非常重要的是programming patterns and best practices。
很重要的是very familiar with class library。
也很重要的是experienced with top IDEs。

e How popular is VB .NET versus C#?
e VB.NET and C# Comparison
e Java (J2SE 5.0) and C# Comparison
e VB.NET vs C#: The Great .NET Language Debate

What is Property, on earth?

@ Properties can be considered smarter fields in that they can be assigned to or read from (like a field), yet when this happens some code in the class executes, and therefore the author of the class can process the value being assigned or returned.

@ Inside the Property block, you write a Get…End Get block, which defines which value the property returns, and a Set…End Set block, which defines how values are assigned to the property.

@ In most cases, a property simply maps to a Private field, so the code for these two blocks often looks like this:

Dim m_BirthDate As Date
Public Property BirthDate() As Date
      Get
            Return m_BirthDate
      End Get
      Set(ByVal value As Date)
            m_BirthDate = value
      End Set
End Property

Sun Microsystems Talks With Li Moore of Google

By Robert Eckstein, September 27, 2005

Thinking of migrating to the Java 2 Platform, Standard Edition (J2SE) 5.0, code-named Tiger? You're not alone. Thousands of companies all over the world are giving J2SE 5.0 a try, and they like what they see. New language features, enhanced class libraries, better tool support, and desktop enhancements are just some of the reasons why many companies are making the switch.

In this article, we talk with Li Moore, software engineer at Google, Inc., about his company's switch from J2SE version 1.4 to 5.0.

Thanks for talking with me today, Li. Google is, of course, the worldwide search engine of choice. How does Google use Java technology?
Google makes extensive use of the Java platform. Large parts of popular Google products are written in Java. We also use Java in many internal systems and products under development.

Which core and enterprise APIs or technologies are critical to your work?
We make heavy use of core Java APIs including the Collections API, java.util.concurrent, and java.nio. We also make heavy use of the Servlet API.

Did you expect that any changes with the 5.0 version of the JDK might be detrimental to your Java applications at Google?
Nope. Everyone was excited about the new language features, the new concurrency libraries, and the new monitoring and management facilities.

Were there any Tiger features that made you say, "Oh, this is great! We needed this a while ago"?
We've wanted enums and generics at Google for years. Like everyone else, we wrote our own thread pool and work queue classes years ago.

Tell us about the migration process. What sort of issues and surprises did you encounter?
I learned about Tiger in the fall of 2004. I liked what I saw and took it upon myself to convert all of our Java development to JDK 5.0. I worked on the migration as a 20 percent project: Google lets its engineers devote 20 percent of their time to any project that they think is cool and in the company's interest.
We migrated to Tiger in stages. First, we tried it on existing code without using any of the new features. Of course, we ran into the same problem that everyone does -- enum is now a reserved word. That's an easy, if tedious, one to fix. Then we tested the performance of some key applications. We were pleasantly surprised when they ran significantly faster on the new release.
I met with key people from various projects and got buy-in for the transition. We came up with a schedule that culminated in a flag day, when everyone felt comfortable switching. I mapped out a transition plan for each project and created documentation to help people with the transition. We had a little difficulty getting all the tests to pass. We discovered a few minor compatibility issues with the new release, which we reported back to Sun, which has since fixed them.
When it came time to make the actual switch, we had no problems. We were pleasantly surprised by how easy it was. Developers were enthusiastic about the transition and quickly followed flag day with changes that upgraded existing code to use the new language features.

If you could make one change to the Java core or enterprise APIs right now, what would it be? If you could add one feature, what would it be?
It would be nice to add a clone() method to Cloneable, but unfortunately that's not possible at this point. Also, it would be nice to make the byte type unsigned. More realistically, I'd like to see a pluggable file system API like the one that Sun proposed in JSR 203.

Have you tested your applications against the prerelease of Mustang?
No, but we have started using some of the forthcoming concurrency utilities that are already available for use on the JSR 166 interest site.

Is there anything you would like to add?
Our developers were already excited about J2SE 5.0 several weeks before the transition. As soon as we switched, use of the new features just took off. Even something as simple as the new for-each loop makes it so much more fun to write Java programs.
This release is purely an improvement, in terms of language features, libraries, stability, performance, and tools. I can't imagine why anyone would use the 1.4 release at this point.

Article Origine: http://java.sun.com/developer/technicalArticles/J2SE/google/limoore.html

Auto searching and merging cells of same value.

/// 

  /// 把指定栏中的相同内容的cells合并成一个cell。
  /// 
  /// 
  /// 
  public void MergeIdenticalCells(int _rowIndexOfStartCell, int _columnIndexOfStartCell)
  {
   // 首先把returnedEndCell设为与startCell一样。
   int rowIndexOfReturnedEndCell = _rowIndexOfStartCell;
   int columnIndexOfReturnedEndCell = _columnIndexOfStartCell;
  
   int rowIndexOfWholeColumn = _rowIndexOfStartCell - 1 + oSheet.UsedRange.Rows.Count;
   try
   {
    while(rowIndexOfReturnedEndCell < rowindexofendcell =" _rowIndexOfStartCell;" columnindexofendcell =" _columnIndexOfStartCell;" rangeofstartcell =" (Range)(oSheet.Cells[_rowIndexOfStartCell," i =" _rowIndexOfStartCell;" selectedcell =" (Range)(oSheet.Cells[i," rowindexofendcell =" i;" rangeofendcell =" (Range)(oSheet.Cells[rowIndexOfEndCell," valueofendcell =" rangeOfEndCell.Value2.ToString();" themergedrange =" oSheet.get_Range(rangeOfStartCell," value2 =" Type.Missing;" value2 =" valueOfEndCell;" _rowindexofstartcell =" rangeOfEndCell.Row">

Displaying images in Grid or Cloud with ASP.NET

e 4GuysFromRolla Scott Mitchell Using the TreeView Control and a DataList to Create an Online Image Gallery
e 4GuysFromRolla A Robust Image Gallery for ASP.NET

Storing images with SQL Server Database

e Inserting Images to SqlServer in ASP .NET
e Retrieving Images from SqlServer and displaying in a DataGrid

Resizing & Scaling images in .NET

e 4GuysFromRolla Scott Mitchell Displaying a List of Scaled Images
e 4GuysFromRolla Scott Mitchell True Image Resizing, Part 1
e 4GuysFromRolla Scott Mitchell True Image Resizing, Part 2 : About thumbnail

e SmartThumbnail.Net Component

Implementing CAPTCHA in ASP.NET

e CAPTCHA Image
e Generating ASP.NET Images on the Fly

Manipulating Image with .NET

e Rob's Image Shrinker : Scaling image file.
e Flickr-ing about with .NET
e Generating ASP.NET Images on the Fly

Authentication in an ASP.NET application

@ The Membership service convered all the details of authentication for an applications, whereas the Role Management service covers authorization.

@ To allow forms authentication in your web application, the 1st step is to turn on this Membership service in the web.config file.

How to display HTML/XML tags code in webpage?

Method 1: Use the <xmp>tage to surround the HTML or XML code to be displayed as plain text. For example:

<xmp>system><display><name>Someone</name></display></system>

Method 2: Convert the <> to &lt;>.
To display a simple link as code: &lt;a href="http://www.simplelink.com&quot;>Here</a>
Would show as : <a href="http://www.simplelink.com">Here</a>

@ Simple Code Encoder SUPER great tool, i.e.
<system.web>
      <urlMappings enabled="true">
            <add url="~/About.aspx" mappedUrl="~/Site_Common/About.aspx"/>
            <add url="~/Legal.aspx" mappedUrl="~/Site_common/Legal.aspx"/>
      </urlMappings>
</system.web>


e Display Code In Entries

URL Mapping in ASP.NET 2.0

When URL mapping is useful?
URL mapping comes handy in number of situations:

• You want to hide a big URL from the end user and present an easy to remember shorter URL
• You want to pass query string parameters to a page but do not want them to be displayed to the user
• You have changed web form names after the application is deployed
  How this works?

In ASP.NET 2.0 there is a configuration section called urlMappings that maps one URL to the other. The following markup shows how this section can be used:

<br /><system.web><br /><urlmappings enabled="true"><br /><add mappedurl="~/Site_Common/About.aspx" url="~/About.aspx"><br /><add mappedurl="~/Site_common/Legal.aspx" url="~/Legal.aspx"><br /></urlmappings><br /></system.web><br />

The enabled attribute of section enables or disables the URL mapping feature.
The sub section allows you to specify the actual mapping.
The url attribute of section specifies the URL as seen by the end user. It can be from browser address bar, hyper link or Response.Redirect statements.
The mappedUrl attribute species the URL that is actually served in place of the URL specified by url attribute.

You can specify as many URL mappings as you wish using multiple tags.

About Microsoft .NET Framework 3.0

The Microsoft .NET Framework version 3.0 (formerly known as WinFX) is the new managed-code programming model for Windows. It combines the power of .NET Framework 2.0 with new technologies for building applications that have a visually compelling user experience, seamless communication across technology boundaries, and support for a wide range of business processes.

All of the classes that represent the new components (WPF, WF, WCF, and CardSpace) are part of the System namespace. The core classes of the .NET platform, such as the common language runtime (CLR) and base class libraries (BCL) remain as they are in .NET Framework 2.0.



How .NET Framework 3.0 Relates to .NET Framework 2.0 and Earlier
The .NET Framework 3.0 adds new technologies to the .NET Framework 2.0, which makes the .NET Framework 3.0 a superset of the .NET Framework 2.0. You can think of .NET Framework 3.0 as an "additive" release to the .NET Framework 2.0, as contrasted with a generational release where software is revised across the board. (For example, the .NET Framework 2.0 was a generational release over the .NET Framework 1.0.)

Because .NET Framework 3.0 is an additive release and uses the core run-time components from .NET Framework 2.0, it is completely backward compatible with the earlier version. Your existing .NET Framework 2.0 based-applications will continue to run without any modifications and you can safely continue your investments using the technologies that shipped with .NET Framework 2.0.

Installing the .NET Framework 3.0
The .NET Framework 3.0 is installed by default on Microsoft Windows Vista. On Microsoft Windows Server code-named "Longhorn", you can install the .NET Framework as a Windows Feature using Roles Management tools. On Windows XP and Windows Server 2003, installing .NET Framework 3.0 also adds any .NET Framework 2.0 components that are not already installed.
If .NET Framework 2.0 is already installed, the .NET Framework 3.0 installer adds only the files for Windows Presentation Foundation (WPF), Windows Workflow Foundation (WF), Windows Communication Foundation (WCF), and Windows CardSpace.

Components shared with .NET Framework 2.0 are installed in the following location:%windir%\Microsoft.NET\Framework\V2.0.50727
Components that are new to .NET Framework 3.0 are installed in the following location: %windir%\Microsoft.NET\Framework\V3.0
All components of the .NET Framework 3.0 reference assemblies are installed in the following location: %programfiles%\Reference Assemblies\Microsoft\Framework\v3.0

Uninstalling .NET Framework 3.0 will not remove the components shared with .NET Framework 2.0. To remove those components, you must first uninstall .NET Framework 3.0 and then separately uninstall .NET Framework 2.0.

Version Numbers for .NET Framework Assemblies
The .NET Framework 3.0 shares many components with .NET Framework 2.0, and the common language runtime (CLR) and base class libraries are the same as those in .NET Framework 2.0. Therefore, these shared components stay at version 2.0.

The version number 3.0 applies to all runtime and reference assemblies for Windows Communication Foundation (WCF), Windows Presentation Foundation (WPF), Windows Workflow Foundation (WF), and Windows CardSpace.

^ 基本上对我没有什么影响，因为我目前只关心Internet Application。所以，用好ASP.NET 2.0就是首要的。集中力量，先不去管.NET Framework 3.0的其他部分。

SQL Subqueries

INSERT INTO TableA (PosID, PosValue, DataDate) SELECT PosID, PosValue, DataDate FROM TableB WHERE DataDate = '2006-10-6' AND PosID = 'TAEE1'

^ 把Values (A,B,C)部分替换成一个SELECT A,B,C语句便可。


UPDATE TableA SET PosValue = (SELECT PosValue FROM TableB WHERE
DataDate = '2006-10-6' AND PosID = 'TAEE1' ) WHERE PosID = 'TAEE1' AND DataDate = '2006-10-6'

^
SELECT OUID, (SELECT ID, OUName FROM Accounts_OU WHERE ID = A.OUID ORDER BY ID) AS OUName FROM BizMgtStationOrder A WHERE PipeLineID = " & XXX & " ORDER BY OUID"

d Subquery Fundamentals

A subquery is a SELECT query that returns a single value and is nested inside a SELECT, INSERT, UPDATE, or DELETE statement, or inside another subquery. A subquery can be used anywhere an expression is allowed. In this example a subquery is used as a column expression named MaxUnitPrice in a SELECT statement.

SELECT Ord.OrderID, Ord.OrderDate,
(SELECT MAX(OrdDet.UnitPrice)
FROM Northwind.dbo.[Order Details] AS OrdDet
WHERE Ord.OrderID = OrdDet.OrderID) AS MaxUnitPrice
FROM Northwind.dbo.Orders AS Ord

A subquery is also called an inner query or inner select, while the statement containing a subquery is also called an outer query or outer select.

Many Transact-SQL statements that include subqueries can be alternatively formulated as joins. Other questions can be posed only with subqueries. In Transact-SQL, there is usually no performance difference between a statement that includes a subquery and a semantically equivalent version that does not. However, in some cases where existence must be checked, a join yields better performance. Otherwise, the nested query must be processed for each result of the outer query to ensure elimination of duplicates. In such cases, a join approach would yield better results. This is an example showing both a subquery SELECT and a join SELECT that return the same result set:

/* SELECT statement built using a subquery. */
SELECT ProductName
FROM Northwind.dbo.Products
WHERE UnitPrice =
(SELECT UnitPrice
FROM Northwind.dbo.Products
WHERE ProductName = 'Sir Rodney''s Scones')

/* SELECT statement built using a join that returns
the same result set. */
SELECT Prd1.ProductName
FROM Northwind.dbo.Products AS Prd1
JOIN Northwind.dbo.Products AS Prd2
ON (Prd1.UnitPrice = Prd2.UnitPrice)
WHERE Prd2.ProductName = 'Sir Rodney''s Scones'

A subquery nested in the outer SELECT statement has the following components:
A regular SELECT query including the regular select list components.
A regular FROM clause including one or more table or view names .
An optional WHERE clause.
An optional GROUP BY clause.
An optional HAVING clause.

The SELECT query of a subquery is always enclosed in parentheses. It cannot include a COMPUTE or FOR BROWSE clause, and may only include an ORDER BY clause when a TOP clause is also specified.

A subquery can be nested inside the WHERE or HAVING clause of an outer SELECT, INSERT, UPDATE, or DELETE statement, or inside another subquery. Up to 32 levels of nesting is possible, although the limit varies based on available memory and the complexity of other expressions in the query. Individual queries may not support nesting up to 32 levels. A subquery can appear anywhere an expression can be used, if it returns a single value.
If a table appears only in a subquery and not in the outer query, then columns from that table cannot be included in the output (the select list of the outer query).

Statements that include a subquery usually take one of these formats:

WHERE expression [NOT] IN (subquery)
WHERE expression comparison_operator [ANY ALL] (subquery)
WHERE [NOT] EXISTS (subquery)

In some Transact-SQL statements, the subquery can be evaluated as if it were an independent query. Conceptually, the subquery results are substituted into the outer query (although this is not necessarily how Microsoft® SQL Server™ actually processes Transact-SQL statements with subqueries).
There are three basic types of subqueries, those that:
Operate on lists, introduced with IN or those that a comparison operator modified by ANY or ALL.
Are introduced with an unmodified comparison operator and must return a single value.
Are existence tests introduced with EXISTS.