Friday, January 19, 2018   Login
You are here: Project » Blog  
Most recent blog entries
IWeb Security Release
IWeb By Michael Washington on 9/6/2008 7:10 AM

A minor security issue has been discovered in all versions of IWeb. A potential hacker could construct a url that will allow access to the web service configuration page. This is only possible if a hacker has been granted access to the page that IWeb is on (for example you have the IWeb module available to your registered users or publicly available).

All versions of IWeb have been updated. You can download the update from

IWeb reaches 1000
IWeb By Michael Washington on 8/17/2008 5:45 AM

Today IWeb reached 1000 members. This is not a big number because the DotNetNuke project can grow by 1000 members in a single day. However, IWeb is just a small project that provides code to call web service methods inside DotNetNuke. It is not really designed for end-users. When a project with such a small user base reaches 1000 members it says a lot about the health and growth of the main DotNetNuke project.

This milestone sticks out for me personally because IWeb started as a small idea. It has grown and taken a life of its own. Eventually it has grown bigger than me and taught me a lot about what Open Source is really about.

Initially IWeb was just a code sample. Nearly two years ago, I needed to call a web service that was inside a DotNetNuke module. I found an article on My example used the new (at the time) WSP dynamic compilation model so I decided to publish the code.

After I published the code a l ...


IWeb By Michael Washington on 4/27/2008 5:10 AM

Using IWeb is very simple. You install the IWeb module and then you start adding you own methods. You will automatically have security for your methods that can be administered from the configuration screen. The only problem is you have to write the methods in VB.

We hoped to allow you to have VB and C# methods in IWebCF (the Windows Communication Foundation based version of IWeb that is also on it's way). So far we haven't figured out a way to do that. So, we decided to make a C# version of IWeb for those who want to write their methods in C#.

The module is called IWebCSharp and can be installed side-by-side with IWeb (also IWebCF can also be installed side-by-side with the other versions of IWeb).

Note: the entry point for IWebCsharp is different then the normal IWeb so you will have to u ...


Ian Lackey named Project Leader of IWeb
IWeb By Michael Washington on 4/4/2008 7:19 AM

I am proud to announce that Ian Lackey has been named project leader of IWeb. I will step down and serve as co-project leader. The reason for this change is due to the fact that he is far more advanced in WCF (Windows Communication Foundation) than I am and is better able to lead the IWeb project as we prepare to release IWebCF (the new version of IWeb that uses WCF). He is already the author of more than 60% of the code in both IWeb and IWebCF. Please join me in welcoming him to his new position.

Looks like the C# IWeb method will not work :(
IWeb By Michael Washington on 3/16/2008 5:13 PM
I had hoped to allow you to create your IWeb methods in C#. My early prototypes seemed to work but I devoted most of the day trying and I can't get it to work.

Making IWebCF work with VS 2005 (.asmx) clients
IWeb By Michael Washington on 2/18/2008 2:59 PM

When the next IWeb comes out it will be called IWebCF and you will be able to run it side by site with the current IWeb. The new IWeb uses WCF (Windows Communication Foundation) and it is completely different than the web services in the current IWeb.

The problem I faced today was allowing a client created with Visual Studio 2005 to connect with IWebCF. It is SUPPOSE to work because WCF is backward compatible... and it is... mostly. But, of course we ran into issues.

I have it working. I'm still waiting for Ian to look at my solution (it is checked into source code if you want to take a look yourself). Here are my emails to him today which describe my painful process. I'm posting it in case my notes help somone else working with WCF:

From: Michael Washington
Sent: Monday, February 18, 2008 10:59 AM

Fix for ASP.NET "Could not load file or assembly App_Web..." Error
IWeb By Michael Washington on 1/26/2008 4:53 PM

The new IWebCF that we are working on uses Windows Communication Foundation. It will only bind to one web address so you have to select one from a drop-down on the configuration screen. Sometimes after you change it and then browse to the service address you get an error that starts off like this:

"Could not load file or assembly App_Web..."

The fix can be found at this thread. Basically you go to this directory on the computer:

C:\Windows\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files

and delete all the files you find there (or if you can the files for the application you're running).

Changes to method signatures in IWeb 4
Ian Lackey By itlackey on 1/26/2008
One of the questions while migrating IWeb to WCF, was how to maintain the same header as previous versions of IWeb. This header is important due to the fact that it carries with it the portalId and user credentials for the request. We found a couple of possible ways to maintain this functionality.

Configuring WCF - how to fix "HTTP Error 404.3 - Not Found"
IWeb By Michael Washington on 12/30/2007 10:07 AM

When trying to navigate to a file with the extension .svc when using II7 (that is in Windows Vista and Windows 2008), you may get an error like this:


Server Error in Application "Default Web Site/DotNetNuke_IWeb"

HTTP Error 404.3 - Not Found


Description: The page you are requesting cannot be served because of the Multipurpose Internet ...


We are working on the new version of IWeb 04.00.00
IWeb By Michael Washington on 12/19/2007 4:29 PM

Just wanted to drop a note that Ian and I are working on the next version of IWeb.

IWeb 04.00.00 will use Windows Communication Foundation (WCF) and require that you have ASP.NET 3.0 or higher installed (For IWeb 03.00.00 you only need ASP.NET 2.0 installed).

Using WCF we will be able to allow you to expose any method from your custom module as web services method and still use the extensive IWeb security configuration screen to set granular access to those methods.

You will be able to write those methods in any ASP.NET language and you will not have to actually add the methods to IWeb. IWeb will "discover" that the methods exist (because you will use a partial class).

We anticipate a release sometime in 2nd quarter of 2008.

Home  |  Screen Shots  |  Example Code  |  Installing  |  Download  |  Project
Copyright 2006-2009 by   |  Privacy Statement  |  Terms Of Use