MVC
MVC
All rights reserved. No part of this book can be reproduced or stored in any retrieval system, or transmitted in any
form or by any means, electronic, mechanical, photocopying, recording, uploading on server and scanning without
the prior written permission of the author.
The author of this book has tried his best to ensure the accuracy of the information described in this book.
However, the author cannot guarantee the accuracy of the information contained in this book. The author will
not be liable for any damages, incidental or consequential caused directly or indirectly by this book. Further,
readers should be aware that the websites or reference links listed in this book may have changed or disappeared
between when this book was written and when it is read.
All other trademarks referred to in this book are the property of their respective owners.
Release History
Initial Release 1.0.0 - 10th Mar 2014
Second Release 1.0.1 - 1st Jan 2015
Third Release 1.0.2 - 12th Aug 2016
1
Page
Dedication
My mother Mrs. Vriksha Devi and my wife Reshu Chauhan deserve to have theirs name on the cover as
much as I do for all theirs support made this possible. I would like to say thanks to all my family members
Virendra Singh(father), Jaishree and Jyoti(sisters), Saksham and Pranay(sons), friends, to you and to
readers or followers of my blog www.dotnet-tricks.com to encourage me to write this book.
-Shailendra Chauhan
2
Page
Introduction
Writing a book has never been an easy task. It takes a great effort, patience and consistency with strong
determination to complete it. Also, one should have a depth knowledge over the subject is going to write.
So, what where my qualification to write this book? My qualification and inspiration come from my enthusiasm
for and the experience with the technology and from my analytic and initiative nature. Being a trainer, analyst,
consultant and blogger, I have through knowledge and understandings of .NET technologies. My inspiration and
knowledge has also come from many years of my working experience and research over it.
So, the next question is who this book is for? This book covers useful Interview Questions and Answers on
ASP.NET MVC. This book is appropriate for novice as well as for senior level professionals who wants to strengthen
their skills before appearing for an interview on ASP.NET MVC. This book is equally helpful to sharpen their
programming skills and understanding ASP.NET MVC in a short time.
This book is not only the ASP.NET MVC interview book but it is more than that. This book helps you to get the
depth knowledge of ASP.NET MVC with a simple and elegant way. This book is updated to latest version of ASP.NET
MVC5 and ASP.NET WEB API2.
I hope you will enjoy this book and find it useful. At the same time I also encourage you to become a continue
reader of my blogs www.dotnet-tricks.com, www.dotnettricks.com and be the part of the discussion. But most
importantly practice a lot and enjoy the technology. Thats what its all about.
To get the latest information on ASP.NET MVC, I encourage you to follow the official Microsoft ASP.NET
community website at www.asp.net. I also encourage you to subscribe to my blogs at www.dotnet-tricks.com,
www.dotnettricks.com that contains .NET, C#, ASP.NET MVC, EF, jQuery and many more tips, tricks and tutorials.
3
Page
About the Author
Shailendra is the author of some of most popular e-books which encompass technical Interview on AngularJS
Interview Questions and Answers, LINQ Interview Questions and Answers and MVC Interview Questions and
Answers. Furthermore, he is a technical reviewer for book on ASP.NET MVC 4 Mobile App Development.
Shailendra Chauhan is renowned for sharing his working experience, research and knowledge through his reputed
and widely subscribed to blogs - www.dotnet-tricks.com and www.dotnettricks.com. Specifically, his blog
www.dotnet-tricks.com provides a vast storehouse of knowledge and support resources in the field of .NET
technologies worldwide and is listed as a non-Microsoft resource in The Microsoft Official Community Site. His
blogs and training approach provide an easily accessible and highly innovative learning experience for people
everywhere, and from a range of backgrounds and skill levels thereby offering the ultimate in training around the
world.
Moreover, and to his credit he has delivered 200+ training sessions to professionals world-wide in Microsoft .NET
technologies and other technologies including JavaScript, AngularJS, Node.js, Ionic and NoSQL Databases. In
addition, he provides Instructor-led online and classroom training programs for all above technologies.
Shailendras strong combination of technical skills and solution development for complex application
architecture with proven leadership and motivational skills have elevated him to a world renowned status,
placing him at the top of the list of most sought after trainers.
I always keep up with new technologies and learning new skills to deliver the best to my students says
Shailendra Chauhan, he goes on to acknowledge that the betterment of his followers and enabling his students to
realize their goals are his prime objective and a great source of motivation and satisfaction.
Shailendra Chauhan - Follow me and you too will have the key that opens the door to success
4
Page
How to Contact Us
Although the author of this book has tried to make this book as accurate as it possible but if there is something
strikes you as odd, or you find an error in the book please drop a line via e-mail.
[email protected]
[email protected]
I am always happy to hear from my readers. Please provide with your valuable feedback and comments!
You can follow us on facebook, twitter, linkedin and google plus or subscribe to RSS feed.
5
Page
Our Most Accepted Training Programs by Professionals
Node.js Development Training by Shailendra Chauhan
About the Course Download Course Agenda
The Node.js Development course is primarily designed for UI Developer(s)/Web Developer(s) who want to learn
how to develop high performance, event-driven, real-time and scalable networking and web applications. In this
course, you will learn the Node.js, Express, Bootstrap, Unit Testing and JavaScript Task runner (Grunt, Gulp)
fundamental like JavaScript event loop, express routes, unit test cases, HTTP web server, handle requests &
responses, event-driven communications, handling databases and much more...
Course objectives
At the completion of this course, attendees will be able to;
Describe JavaScript weird parts like prototype, objects, lexical scope, dynamic scope and closure.
Explore Node.js basic and advanced in-depth concepts.
Create and consume REST API.
Create HTTP web server and handling requests & responses.
Handle Sessions, Cookies, and Session Stores.
Perform Node.js database operations with SQL and NoSQL Databases.
Write Unit Test cases using Jasmine/Mocha and Chai.
Use HTML Template engines like Handlebars and Jade.
Install and Publish Node's Package Manager NPM.
Use JS Task runner like Gulp or Grunt.
Publish their Node.js App on cloud server Heroku.
The AngularJS Development course is primarily designed for UI Developer(s)/Web Developer(s) who want to learn
how to create single page web application using AngularJS. In this course, you will learn the JavaScript, Angular
fundamental like bootstrap process, directives, statements, routes, filters, services, components etc. that help you
to build rich, scalable, extensible and high performance single page web application and much more
Course objectives
At the completion of this course, attendees will be able to;
The Hybrid Mobile Apps Development course is primarily designed for UI Developer(s)/Web Developer(s) who
want to learn how to create cross platform mobile apps using Ionic, Cordova and AngularJS. In this course, you
will learn how to use AngularJS and Ionic for creating widgets, data listing, spinners etc. and creating mobile apps
using mobile camera, audio, video and database and finally publish it on Google Store, Apple Store.
Course objectives
At the completion of this course, attendees will be able to;
The ASP.NET MVC with AngularJS Development course is primarily designed for .NET Beginner(s)/Professional(s)
who want to learn how to create web applications using ASP.NET MVC. In this course, you will learn how to create
web pages, custom validation attributes, custom helpers, querying database using Entity Framework ORM, making
interactive using AngularJS and jQuery, mobile friendly application and finally publish it on IIS.
Course objectives
At the completion of this course, attendees will be able to;
The ASP.NET Core course is primarily designed for .NET Beginner(s)/Professional(s) who want to learn how to
create web applications using cross-platform ASP.NET Core. In this course, you will learn how to create web pages,
custom validation attributes, tag helpers, custom helpers, middleware, querying database using Entity Framework
Core, using JavaScript Task runners - grunt and gulp, mobile friendly application and finally publish it.
Course objectives
At the completion of this course, attendees will be able to;
The MEAN Stack Development course is primarily designed for UI Developer(s)/Web Developer(s) who want
to learn how to develop high performance, event-driven, real-time and web applications. In this course, you
will learn the MongoDB, ExpressJS, AngularJS and NodeJS fundamental like database, express routes,
bootstrap process, directives, statements, routes, filters, services, HTTP web server, handle requests &
responses, handling databases, mobile friendly application and finally publish it.
Course objectives
At the completion of this course, attendees will be able to;
Q68. Can we use Bundling and Minification in ASP.NET MVC3 or ASP.NET4.0? ............................................. 59
Q69. How Bundling use browser Cache capability?......................................................................................... 60
Q70. What is Partial View in ASP.NET MVC? ................................................................................................... 60
Q71. How do you return a partial view from controller? ................................................................................ 60
Q72. What are different ways of rendering a Partial View in ASP.NET MVC? ................................................. 60
Q73. What is Area in ASP.NET MVC? ............................................................................................................... 61
Q74. How to register Area in ASP.NET MVC? .................................................................................................. 62
Q75. What is Child action and how to invoke it? ............................................................................................. 62
Q76. What is Scaffolding? ................................................................................................................................ 63
Q77. How Scaffold templates works in ASP.NET MVC? ................................................................................... 63
Q78. What are ASP.NET MVC Filters and Attributes? ...................................................................................... 65
Q79. What are different types of Filters in ASP.NET MVC? ............................................................................. 66
Q80. When Exception filters are executed in ASP.NET MVC? ......................................................................... 67
Q81. What is the order of execution of filters in ASP.NET MVC? .................................................................... 68
Q82. How to configure filters in ASP.NET MVC? .............................................................................................. 68
Q83. How Authentication and Authorization work in ASP.NET MVC? ............................................................ 68
Q84. How Forms Authentication and Authorization work in ASP.NET MVC? ................................................. 68
Q85. How to implement custom Forms Authentication and Authorization in MVC? ..................................... 70
Q86. How to allow HTML tags in ASP.NET MVC?............................................................................................. 72
Q87. What is caching and when to use it? ....................................................................................................... 73
Q88. What are advantages of caching? ........................................................................................................... 73
Q89. What is output caching? .......................................................................................................................... 74
Q90. What is Donut caching and Donut hole caching in ASP.NET MVC? ........................................................ 74
Q91. What is loose coupling and how is it possible? ....................................................................................... 75
Q92. What are Dependency Inversion Principle (DIP) and IoC? ...................................................................... 76
Q93. What is Dependency Injection (DI)? ........................................................................................................ 77
Q94. What is Service Locator? ......................................................................................................................... 78
Q95. What are different ways to implement Dependency Injection (DI)? ...................................................... 79
Q96. What are advantages of Dependency Injection (DI)? ............................................................................. 82
Q97. What is IoC or DI container?.................................................................................................................... 82
Q98. What are popular DI containers? ............................................................................................................ 83
15
Q100. What are commonly used tool for Unit Testing in ASP.NET MVC? ..................................................... 83
ASP.NET WEB API ........................................................................................................... 85
Q1. What is REST? .......................................................................................................................................... 85
Q2. Explain REST principle? ............................................................................................................................ 85
Q3. What is difference between REST and SOAP? ......................................................................................... 85
Q4. What is ASP.NET WEB API? ..................................................................................................................... 86
Q5. Why to choose ASP.NET WEB API?.......................................................................................................... 86
Q6. What is difference between WCF and WEB API and WCF REST and Web Service? ................................ 87
Q7. Which one to choose between WCF and WEB API?................................................................................ 88
Q8. What is difference between ASP.NET MVC and ASP.NET WEB API?....................................................... 89
Q9. Can you return view by using WEB API method? .................................................................................... 89
Q10. Can you change WEB API action name like ASP.NET MVC? .................................................................... 90
Q11. Can you restrict a WEB API action method to be invoked only by HTTP GET, POST, PUT or DELETE? ... 90
Q12. How to call WEB API in ASP.NET MVC? ................................................................................................... 90
Q13. How ASP.NET WEB API routing is different from ASP.NET MVC routing? .............................................. 91
Q14. How to enable Attribute Routing in ASP.NET WEB API2? ....................................................................... 91
Q15. How to define attribute routing in ASP.NET WEB API2? ......................................................................... 91
16
Page
1
ASP.NET MVC
Q1. What is MVC?
Ans. MVC stands for Model-View-Controller. It is a software design pattern which was introduced in 1970s.
Also, MVC pattern forces a separation of concerns, it means domain model and controller logic are decoupled
from user interface (view). As a result, maintenance and testing of the application become simpler and easier.
Model - The Model represents a set of classes that describe the business logic i.e. business model as well as data
access operations i.e. data model. It also defines business rules for data means how the data can be changed and
manipulated.
View - The View represents the UI components like CSS, jQuery, html etc. It is only responsible for displaying the
data that is received from the controller as the result. This also transforms the model(s) into UI.
Controller - The Controller is responsible to process incoming requests. It receives input from users via the View,
then process the user's data with the help of Model and passing the results back to the View. Typically, it acts as
the coordinator between the View and the Model.
17
Page
Today, this pattern is used by many popular framework like as Ruby on Rails, Spring Framework, Apple iOS
Development and ASP.NET MVC.
The main components of DDD are: Entity, Value Object, Aggregate, Service and Repository.
Entity- An object that has an identity- it is unique within the system, like Customer, Employee etc.
Value Object- An object that has no identity within the system like Rate, State etc.
Aggregate: An aggregate root is a special kind of entity that consumers refer to directly. All consumers of the
aggregate root are called as aggregate. The aggregate root guarantees the consistency of changes being made
within the aggregate.
Service- A service is a way of dealing with actions, operations and activities within your application.
Repository- A repository is responsible to store and to retrieve your data. It is not a concern how and where data
will be persist. So, it can be SQL server, oracle, xml, text file or anything else. Repository is not a Data Access Layer
but it refers to a location for storage, often for safety or preservation.
Model - The Model represents a set of classes that describes the business logic and data. It also defines business
rules for data means how the data can be changed and manipulated.
View - The View represents the UI components like CSS, jQuery, html etc. It is only responsible for displaying the
data that is received from the presenter as the result. This also transforms the model(s) into UI.
Presenter - The Presenter is responsible for handling all UI events on behalf of the view. This receive input from
users via the View, then process the user's data with the help of Model and passing the results back to the View.
Unlike view and controller, view and presenter are completely decoupled from each others and communicate to
each others by an interface.
Also, presenter does not manage the incoming request traffic as controller.
18
Page
This pattern is commonly used with ASP.NET Web Forms applications which require to create automated unit
tests for their code-behind pages. This is also used with windows forms.
Model - The Model represents a set of classes that describes the business logic and data. It also defines business
rules for data means how the data can be changed and manipulated.
View - The View represents the UI components like CSS, jQuery, html etc. It is only responsible for displaying the
data that is received from the controller as the result. This also transforms the model(s) into UI.
View Model - The View Model is responsible for exposing methods, commands, and other properties that helps
to maintain the state of the view, manipulate the model as the result of actions on the view, and trigger events in
the view itself.
19
Page
This pattern is commonly used by the WPF, Silverlight, Caliburn, nRoute etc.
The Model in ASP.NET MVC can be broken down into several different layers as given below:
1. Objects or ViewModel or Presentation Layer - This layer contains simple objects or complex objects which
are used to specify strongly-typed view. These objects are used to pass data from controller to strongly-
typed view and vice versa. The classes for these objects can have specific validation rules which are
defined by using data annotations. Typically, these classes have those properties which you want to
display on corresponding view/page.
2. Business Layer - This layer helps you to implement your business logic and validations for your application.
20
This layer make use of Data Access Layer for persisting data into database. Also, this layer is directly
invoked by the Controller to do processing on input data and sent back to view.
Page
3. Data Access Layer - This layer provides objects to access and manipulate the database of your application.
Typically, this layer is made by using ORM tools like Entity Framework or NHibernate etc.
By default, models are stored in the Models folder of an ASP.NET MVC application.
The view is only responsible for displaying the data that is received from the controller as a result. It also
responsible for transforming a model or models into UI which provide all the required business logic and validation
to the view.
By default, views are stored in the Views folder of an ASP.NET MVC application.
The Controller in ASP.NET MVC, respond to HTTP requests and determine the action to take based upon the
content of the incoming request. It receives input from users via the View, then process the user's data with the
help of Model and passing the results back to the View.
By default, controllers are stored in the Controllers folder an ASP.NET MVC application.
Q8. How Model, View and Controller communicate with each other in ASP.NET MVC?
Ans. There are following rules for communication among Model, View and Controller:
Separation of concern - MVC design pattern divides the ASP.NET MVC application into three main aspects
Model, View and Controller which make it easier to manage the application complexity.
TDD - The MVC framework brings better support to test-driven development.
Extensible and pluggable - MVC framework components were designed to be pluggable and extensible
and therefore can be replaced or customized easier then Web Forms.
Full control over application behaviour - MVC framework doesnt use View State or server based forms
like Web Forms. This gives the application developer more control over the behaviors of the application
and also reduces the bandwidth of requests to the server.
ASP.NET features are supported - MVC framework is built on top of ASP.NET and therefore can use most
of the features that ASP.NET include such as the providers architecture, authentication and authorization
scenarios, membership and roles, caching, session and more.
URL routing mechanism - MVC framework supports a powerful URL routing mechanism that helps to build
a more comprehensible and searchable URLs in your application. This mechanism helps to the application
to be more addressable from the eyes of search engines and clients and can help in search engine
optimization.
ASP.NET MVC1
ASP.NET MVC2
Support for DataAnnotations Attributes to apply model validation on both client and server sides
Overriding the HTTP Method Verb including GET, PUT, POST, and DELETE
Areas for partitioning a large applications into modules
Asynchronous controllers
ASP.NET MVC3
ASP.NET MVC4
ASP.NET MVC5
Runs on .NET 4.5, 4.5.1 and with Visual Studio 2012 & Visual Studio 2013
Page
One ASP.NET
ASP.NET Identity
ASP.NET Scaffolding
Authentication filters - run prior to authorization filters in the ASP.NET MVC pipeline
Bootstrap in the MVC template
ASP.NET WEB API2
MVC architecture separates the application into three components which consists of Model, View and Controller.
In MVC architecture, user interacts with the controller with the help of view. MVC is a triangle architecture.
MVC does not replace 3-layer architecture. Typically 3-layer and MVC are used together and MVC acts as the
Presentation layer.
driven development model. View, and Controller) pattern based development model.
Page
ASP.NET Web Form has server controls. ASP.NET MVC has html helpers.
ASP.NET Web Form has state management (like as ASP.NET MVC has no automatic state management
view state, session) techniques. techniques.
ASP.NET Web Form has file-based URLs means file ASP.NET MVC has route-based URLs means URLs are
name exist in the URLs must have its physically divided into controllers and actions and moreover it is
existence. based on controller not on physical file.
ASP.NET Web Form follows WebForm Syntax ASP.NET MVC follow customizable syntax (Razor as
default)
In ASP.NET Web Form, Web Forms (ASPX) i.e. views In ASP.NET MVC, Views and logic are kept separately.
are tightly coupled to Code behind (ASPX.CS) i.e.
logic.
ASP.NET Web Form has Master Pages for consistent ASP.NET MVC has Layouts for consistent look and feels.
look and feels.
ASP.NET Web Form has User Controls for code re- ASP.NET MVC has Partial Views for code re-usability.
usability.
ASP.NET Web Form has built-in data controls and ASP.NET MVC is lightweight, provide full control over
best for rapid development with powerful data mark-up and support many features that allow fast & agile
access. development. Hence it is best for developing interactive
web application with latest web standards.
ASP.NET Web Form is not Open Source. ASP.NET Web MVC is an Open Source.
ViewModel contain fields that are represented in the view (for LabelFor, EditorFor, DisplayFor helpers)
ViewModel can have specific validation rules using data annotations.
ViewModel can have multiple entities or objects from different data models or data source.
1. Routing - Routing is the first step in ASP.NET MVC pipeline. Typically, it is a pattern matching system that
matches the incoming request to the registered URL patterns in the Route Table.
into ViewResult category and other result type which returns only data either in text format, binary format
Page
28
Page
When the routing engine finds a match in the route table for the incoming request's URL, it forwards the request
to the appropriate controller and action. If there is no match in the route table for the incoming request's URL, it
returns a 404 HTTP status code.
Always remember route name should be unique across the entire application. Route name cant be duplicate.
In above example we have defined the Route Pattern {controller}/{action}/{id} and also provide the default values
for controller, action and id parameters. Default values means if you will not provide the values for controller or
action or id defined in the pattern then these values will be serve by the routing system.
Suppose your webapplication is running on www.example.com then the url pattren for you application will be
www.example.com/{controller}/{action}/{id}. Hence you need to provide the controller name followed by action
name and id if it is required. If you will not provide any of the value then default values of these parameters will
be provided by the routing system. Here is a list of URLs that match and don't match this route pattern.
1. Controller level routing You can define routes at controller level which apply to all actions within the
controller unless a specific route is added to an action.
[RoutePrefix("MyHome")]
[Route("{action=index}")] //default action
public class HomeController : Controller
{
//new route: /MyHome/Index
public ActionResult Index()
{
return View();
}
2. Action level routing You can define routes at action level which apply to a specific action with in the
controller.
return View();
Page
}
[Route("users/about")] //route" /users/about
public ActionResult About()
{
ViewBag.Message = "Your application description page.";
return View();
}
//route: /Home/Contact
public ActionResult Contact()
{
ViewBag.Message = "Your contact page.";
return View();
}
}
Note:
For example, resources often contain child resources like Clients have orders, movies have actors, books have
authors and so on. Its natural to create URIs that reflects these relations like as: /clients/1/orders
This type of URI is difficult to create using convention-based routing. Although it can be done, the results dont
scale well if you have many controllers or resource types.
With attribute routing, its pretty much easy to define a route for this URI. You simply add an attribute to the
controller action as:
[Route("clients/{clientId}/orders")]
public IEnumerable<Order> GetOrdersByClient(int clientId)
{
//TO DO
}
//convention-based routing
routes.MapRoute(
name: "Default",
url: "{controller}/{action}/{id}",
defaults: new { controller = "Home", action = "Index", id =
UrlParameter.Optional });
}
}
[RouteArea("Admin")]
[RoutePrefix("menu")]
[Route("{action}")]
public class MenuController : Controller
{
// route: /admin/menu/login
public ActionResult Login()
{
return View();
}
// route: /admin/menu/products
32
[Route("products")]
Page
// route: /categories
[Route("~/categories")]
public ActionResult Categories()
{
return View();
}
}
URL rewriting is focused on mapping one URL (new url) to another URL (old url) while routing is focused
on mapping a URL to a resource.
URL rewriting rewrites your old url to new one while routing never rewrite your old url to new one but it
map to the original route.
Suppose we have defined the following route in our application and you want to restrict the incoming request url
with numeric id only.Now let's see how to do it with the help of regular expression.
routes.MapRoute(
"Default", // Route name
"{controller}/{action}/{id}", // Route Pattern
new
{
controller = "Home",
action = "Index",
id = UrlParameter.Optional
}, // Default values for parameters
new { id = @"\d+" } //Restriction for id
);
}
Now for this route, routing engine will consider only those URLs which have only numeric id like as
http://example.com/Admin/Product/1 else it will considers that url is not matched with this route.
System.Web.Mvc - This namespace contains classes and interfaces that support the MVC pattern for
ASP.NET Web applications. This namespace includes classes that represent controllers, controller
factories, action results, views, partial views, and model binders.
System.Web.Mvc.Ajax - This namespace contains classes that supports Ajax scripting in an ASP.NET MVC
application. The namespace includes support for Ajax scripts and Ajax option settings as well.
System.Web.Mvc.Html This namespace contains classes that help render HTML controls in an MVC
application. This namespace includes classes that support forms, input controls, links, partial views, and
validation.
1. ViewEngine class - This class implements the IViewEngine interface and responsible for locating view
templates.
2. View class - This class implements the IView interface and responsible for combining the template with
34
data from the current context and convert it to output HTML markup.
Page
3. Template parsing engine - This parses the template and compiles the view into executable code.
Q27. What is Razor View Engine?
Ans. Razor Engine is an advanced view engine that was introduced with MVC3. This is not a new language but
it is a new markup syntax. Razor has new and advance syntax that are compact, expressive and reduces typing.
Razor syntax are easy to learn and much clean than Web Form syntax. Razor uses @ symbol to write markup as:
@Html.ActionLink("SignUp", "SignUp")
}
Page
//Perform Replacements
string parsedcontents = Parse(rawcontents, viewContext.ViewData);
writer.Write(parsedcontents);
}
ViewEngines.Engines.Clear();
Page
}
Q31. What is difference between Razor and WebForm engine?
Ans. The main differences between ASP.NET Web Form and ASP.NET MVC are given below:
You can also create your own HTML Helpers to render more complex content such as a menu strip or an HTML
37
1. Inline Html Helpers - These are create in the same view by using the Razor @helper tag. These helpers
can be reused only on the same view.
<h3>Programming Languages:</h3>
<h3>Book List:</h3>
2. Built-In Html Helpers - Built-In Html Helpers are extension methods on the HtmlHelper class. The Built-In
Html helpers can be divided into three categories-
Standard Html Helpers - These helpers are used to render the most common types of HTML elements like
as HTML text boxes, checkboxes etc. A list of most common standard html helpers is given below:
Strongly Typed HTML Helpers - These helpers are used to render the most common types of HTML
elements in strongly typed view like as HTML text boxes, checkboxes etc. The HTML elements are created
based on model properties.
The strongly typed HTML helpers work on lambda expression. The model object is passed as a value to
lambda expression, and you can select the field or property from model object to be used to set the id,
name and value attributes of the HTML helper. A list of most common strongly-typed html helpers is
given below:
Output:
Page
Templated HTML Helpers - These helpers figure out what HTML elements are required to render based
on properties of your model class. This is a very flexible approach for displaying data to the user, although
it requires some initial care and attention to set up. To setup proper HTML element with Templated HTML
Helper, make use of DataType attribute of DataAnnitation class.
For example, when you use DataType as Password, A templated helper automatically render Password
type HTML input element.
3. Custom Html Helpers - You can also create your own custom helper methods by creating an extension
Page
method on the HtmlHelper class or by creating static methods with in a utility class.
public static class CustomHelpers
{
//Submit Button Helper
public static MvcHtmlString SubmitButton(this HtmlHelper helper, string
buttonText)
{
string str = "<input type=\"submit\" value=\"" + buttonText + "\"
/>";
return new MvcHtmlString(str);
}
//Readonly Strongly-Typed TextBox Helper
public static MvcHtmlString TextBoxFor<TModel, TValue>(this
HtmlHelper<TModel> htmlHelper, Expression<Func<TModel,
TValue>>expression, bool isReadonly)
{
MvcHtmlString html = default(MvcHtmlString);
if (isReadonly)
{
html = System.Web.Mvc.Html.InputExtensions.TextBoxFor(htmlHelper,
expression, new { @class = "readOnly",
@readonly = "read-only" });
}
else
{
html = System.Web.Mvc.Html.InputExtensions.TextBoxFor(htmlHelper,
expression);
}
return html;
}
}
Suppose, you have the following lines of code somewhere in the controller action rendering a view:
In the first error there is no key to associate this error with a specific property. In the second error there is a
key named as Title to associate this error for model property Title.
Hence, when boolean type parameter value is true then ValidationSummary will display only model-level errors
and exclude property-level errors. It will display Model-level and property-level errors, when boolean type
parameter value is false.
request life cycle. There are following properties provided by AjaxOptions class for AJAX helpers:
Page
Property Description
Url Specify the URL that will be requested from the server.
Specify a message that will be displayed in a confirm dialog to the end user. When
Confirm user clicks on OK button in the confirmation dialog, the Ajax call performs.
Specify a JavaScript function name which is called at the beginning of the Ajax
OnBegin request.
OnComplete Specify a JavaScript function name which is called at the end of the Ajax request.
Specify a JavaScript function name which is called when the Ajax request is
OnSuccess successful.
OnFailure Specify a JavaScript function name which is called if the Ajax request fails.
Specify progress message containers Id to display a progress message or
LoadingElementId animation to the end user while an Ajax request is being made.
Specify a time duration in milliseconds that controls the duration of the progress
LoadingElementDuration message or animation.
Specify the target containers Id that will be populated with the HTML returned by
UpdateTargetId the action method.
Specify the way of populating the target container. The possible values are
InsertionMode InsertAfter, InsertBefore and Replace (which is the default).
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width" />
<title>@ViewBag.Title</title>
@Styles.Render("~/Content/css")
@Scripts.Render("~/bundles/modernizr")
</head>
43
<body>
@RenderBody()
Page
@Scripts.Render("~/bundles/jquery")
@RenderSection("scripts", required: false)
</body>
</html>
You can use a layout to define a common template for your site. A layout can be declared at the top of view as:
@{
Layout = "~/Views/Shared/SiteLayout.cshtml";
}
@section header{
<h1>Header Content</h1>
}
You can render above defined section header on the content page as given below:
@RenderSection("header")
By default, sections are mandatory. To make sections optional, just provides the second parameter value as false,
which is a Boolean value.
@RenderSection("header",false)
Note: A view can define only those sections that are referred to in the layout page otherwise an exception will be
thrown.
<body>
@RenderBody()
@RenderPage("~/Views/Shared/_Header.cshtml")
@RenderPage("~/Views/Shared/_Footer.cshtml")
@RenderSection("scripts",false)
@section scripts{
<script src="~/Scripts/jquery-1.7.1.min.js"></script>
}
</body>
44
RenderPage method also exists in the Layout page to render other page exists in your application. A layout page
can have multiple RenderPage method.
Page
@RenderPage("~/Views/Shared/_Header.cshtml")
bundles.Add(new StyleBundle("~/Content/themes/base/css").Include(
"~/Content/themes/base/jquery.ui.core.css",
"~/Content/themes/base/jquery.ui.resizable.css",
"~/Content/themes/base/jquery.ui.selectable.css",
"~/Content/themes/base/jquery.ui.button.css",
"~/Content/themes/base/jquery.ui.dialog.css",
"~/Content/themes/base/jquery.ui.theme.css"));
}
Styles.Render and Scripts.Render generate multiple style and script tags for each item in the CSS bundle and
Script bundle when optimizations are disabled. When optimizations are enabled, Styles.Render and
Scripts.Render generate a single style and script tag to a version-stamped URL which represents the entire
bundle for CSS and Scripts.
By default ASP.NET MVC project has a _ViewStart.cshtml file in the Views directory and it specifies a default
layout for your ASP.NET MVC application as shown below:
Page
@{
Layout = "~/Views/Shared/Layout.cshtml";
}
Since this code runs before any view, hence a view can override the Layout property and choose a different layout.
1. Using _ViewStart file in the root directory of the Views folder: The _ViewStart file with in Views folder is
used to server the default Layout page for your ASP.NET MVC application. You can also change the default
rendering of layouts with in _ViewStart file based on controller as shown below:
@{
var controller =
HttpContext.Current.Request.RequestContext.RouteData.Values["Controller"].ToSt
ring();
@{
Layout = "~/Views/Shared/_AdminLayout.cshtml";
}
BundleConfig.cs - This is used to create and register bundles for CSS and JS files. By default, various
bundles are added in this files including jQuery, jQueryUI, jQuery validation, Modernizr, and Site CSS.
FIlterConfig.cs - This is used to register global MVC filters like error filters, actions filters etc. By default it
contains HandleErrorAttribute filter.
47
RouteConfig.cs - This is used to register various route patterns for your ASP.NET MVC application. By
Page
1. Return View() - This tells MVC to generate HTML to be displayed for the specified view and sends it to the
browser. This acts like as Server.Transfer() in ASP.NET WebForm.
2. Return RedirectToAction() - This tells MVC to redirect to specified action instead of rendering HTML. In this
case, browser receives the redirect notification and make a new request for the specified action. This acts like
as Response.Redirect() in ASP.NET WebForm.
Moreover, RedirectToAction construct a redirect url to a specific action/controller in your application and
use the route table to generate the correct URL. RedirectToAction cause the browser to receive a 302 redirect
within your application and gives you an easier way to work with your route table.
3. Return Redirect() - This tells MVC to redirect to specified URL instead of rendering HTML. In this case, browser
receives the redirect notification and make a new request for the specified URL. This also acts like as
Response.Redirect() in ASP.NET WebForm. In this case, you have to specify the full URL to redirect.
Moreover, Redirect also cause the browser to receive a 302 redirect within your application, but you have to
construct the URLs yourself.
4. Return RedirectToRoute() - This tells MVC to look up the specifies route into the Route table that is defined
in global.asax and then redirect to that controller/action defined in that route. This also make a new request
like RedirectToAction().
Note:
1. Return View doesn't make a new requests, it just renders the view without changing URLs in the browser's
address bar.
2. Return RedirectToAction makes a new requests and URL in the browser's address bar is updated with the
generated URL by MVC.
3. Return Redirect also makes a new requests and URL in the browser's address bar is updated, but you have to
specify the full URL to redirect
4. Between RedirectToAction and Redirect, best practice is to use RedirectToAction for anything dealing with
your application actions/controllers. If you use Redirect and provide the URL, you'll need to modify those URLs
manually when you change the route table.
5. RedirectToRoute redirects to a specific route defined in the Route table.
Q50. What are differences among ViewData, ViewBag, TempData and Session?
Ans. In ASP.NET MVC there are three ways - ViewData, ViewBag and TempData to pass data from controller to
48
view and in next request. Like WebForm, you can also use Session to persist data during a user session.
Page
ViewData
ViewBag
ViewBag is a dynamic property that takes advantage of the new dynamic features in C# 4.0.
Basically it is a wrapper around the ViewData and also used to pass data from controller to corresponding
view.
Its life also lies only during the current request.
If redirection occurs then its value becomes null.
It doesnt required typecasting for getting data.
TempData
TempData is a dictionary object that is derived from TempDataDictionary class and stored in short lives
session.
Session
Session is also used to pass data within the ASP.NET MVC application and Unlike TempData, it persist data
for a user session until it is time out (by default session timeout is 20 minutes).
Session is valid for all requests, not for a single redirect.
Its also required typecasting for getting data and check for null values to avoid error.
void Keep() - Calling this method with in the current action ensures that all the items in TempData are not
removed at the end of the current request.
void Keep(string key) - Calling this method with in the current action ensures that specific item in
TempData is not removed at the end of the current request.
If some of the controllers of your ASP.NET MVC application are not using session state features, you can disable
session for those controller and can gain slight performance improvement of your application. You can simplify
session state for your application by using available options for session state.
In ASP.NET MVC4, SessionState attribute provides you more control over the behavior of session-state by
specifying the value of SessionStateBehavior enumeration as shown below:
Value Description
Default The default ASP.NET behavior is used to determine the session state behavior.
Disabled Session state is disabled entirely.
ReadOnly Read-only session state behavior is enabled.
Required Full read-write session state behavior is enabled.
1. ViewResult - Returns a ViewResult which renders the specified or default view by using controller View()
helper method.
2. PartialViewResult - Returns a PartialViewResult which renders the specified or default partial view (means
a view without its layout) by using controller PartialView() helper method.
3. RedirectResult - Returns a RedirectResult which Issues an HTTP 301 or 302 redirection to a specific URL
by using controller Redirect() helper method.
4. RedirectToRouteResult - Returns a RedirectToRouteResult which Issues an HTTP 301 or 302 redirection
to an action method or specific route entry by using controller RedirectToAction(),
RedirectToActionPermanent(), RedirectToRoute(), RedirectToRoutePermanent() helper methods.
5. ContentResult - Returns a ContentResult which renders raw text like as "Hello, DotNet Tricks!" by using
controller Content() helper method.
6. JsonResult - Returns a JsonResult which serializes an object in JSON format ( like as "{ "Message": Hello,
World! }") and renders it by using controller Json() helper method.
7. JavaScriptResult - Returns a JavaScriptResult which renders a snippet of JavaScript code like as "function
hello() { alert(Hello, World!); }" by using controller JavaScript() helper method. This is used only in AJAX
scenarios.
8. FileResult - Returns a FileResult which renders the contents of a file like as PDF, DOC, Excel etc. by using
controller File() helper method.
9. EmptyResult - Returns no result returned by an action. This has no controller helper method.
10. HttpNotFoundResult - Returns an HttpNotFoundResult which renders a 404 HTTP Status Code response
by using controller HttpNotFound() helper method.
11. HttpUnauthorizedResult - Returns an HttpUnauthorizedResult which renders a 401 HTTP Status Code
(means "not authorized") response. This has no controller helper method. This is used for authentication
(forms authentication or Windows authentication) to ask the user to log in.
12. HttpStatusCodeResult - Returns an HttpStatusCodeResult which renders a specified HTTP code response.
This has no controller helper method.
else if (id == 2)
return Json(new { result = "1" }, JsonRequestBehavior.AllowGet); //
Page
returns JsonResult
else
return RedirectToAction("Login"); // returns to Login Page
}
[NonAction]
public void DoSomething()
{
// Method logic
}
[ActionName("DoAction")]
public ActionResult DoSomething()
{
//TODO:
return View();
}
Now, DoSomething action will be identified and called by the name DoAction.
Q58. How to restrict an action method to be invoked only by HTTP GET, POST, PUT or
DELETE?
Ans. By default, each and every action method can be invoked by any HTTP request (i.e. GET, PUT, POST, and
DELETE). But you can restrict an action to be invoked only by a specific HTTP request by applying HttpGet or
HttpPost or HttpPut or HttpDelete attribute.
If you want to restrict an action method for HTTP Get request only then decorate it with HttpGet action method
selector attribute as given below:
[HttpGet]
public ActionResult Index()
{
//TODO:
return View();
}
Ans. By using HttpMethod property of HttpRequestBase class, you can find out whether an action is invoked
by HTTP GET or POST.
Page
public ActionResult Index(int? id)
{
if (Request.HttpMethod == "GET")
{
//TODO:
}
else if (Request.HttpMethod == "POST")
{
//TODO:
}
else
{
//TODO:
}
return View();
}
Data Annotations help us to define the rules to the model classes or properties for data validation and displaying
suitable messages to end users.
In ASP.NET MVC, there are two ways to validate a model on server side:
1. Explicit Model Validation This is the traditional way to validate the model data by using IF..Else..IF
statement. In this way, you need to check your model property values one by one for your desired result.
If model property values are unexpected, inject error messages within ModelState.
2. Model Validation with Data Annotations - Data Annotations was introduced with .NET 3.5 SP1. It has a
set of attributes and classes defined in the System.ComponentModel.DataAnnotations assembly. Data
55
Annotations allow us to decorate model classes with metadata. This metadata describes a set of rules that
Page
[HttpPost]
public ActionResult DoSomething(UserViewModel model)
{
if (ModelState.IsValid)
{
//TODO:
}
return View();
}
For client-side validation, the values of above both the keys must be true. When we create new project using
Visual Studio in MVC3 or MVC4, by default the values of both the keys are set to true.
We can also enable the client-side validation programmatically. For this we need to do code with in the
Application_Start() event of the Global.asax, as shown below.
}
Page
We can also enable or disable client-side validation for a specific view. For this we required to enable or disable
client side validation inside a Razor code block as shown below. This option will overrides the application level
settings for that specific view.
@using MvcApp.Models
@{
ViewBag.Title = "About";
HtmlHelper.ClientValidationEnabled = false;
}
// Google CDN
<scripttype="text/javascript"src="http://ajax.googleapis.com/ajax/libs/jquery/1.9
.1/jquery.min.js"></script>
// Microsoft CDN
<scripttype="text/javascript"src="http://ajax.microsoft.com/ajax/jquery/jquery-
1.9.1.min.js"></script>
// JQuery CDN
<scripttype="text/javascript"src="http://code.jquery.com/jquery-
1.9.1.min.js"></script>
Advantages
Ans. ASP.NET MVC4 and .NET Framework 4.5 offer bundling and minification techniques that reduce the
Page
number of request to the server and size of requested CSS and JavaScript, which improve page loading time.
A bundle is a logical group of files that is loaded with a single HTTP request. You can create style and script bundle
for CSS and Java Scripts respectively by calling BundleCollection class Add() method. All bundles are create with in
BundleConfig.cs file.
bundles.Add(new ScriptBundle("~/bundles/jqueryval").Include(
"~/Scripts/jquery-1.7.1.min.js",
"~/Scripts/jquery.validate.min.js",
"~/Scripts/jquery.validate.unobtrusive.min.js"));
}
}
Minification is technique for removing unnecessary characters (like white space, newline, tab) and comments
from the JavaScript and CSS files to reduce the size which cause improved load times of a webpage. There are so
many tools for minifying the js and css files. JSMin and YUI Compressor are two most popular tools for minifying
js and css files.
Suppose you have below CSS and JS files on the layout page and run the application in chrome browser and test
no of request and loading time using chrome developer tools as shown below.
58
Page
In this test, there are 7 request, total data size is 3.96KB and loading time is approximate 296ms.
When you will run the above application with Bundling and Minification of css and js files and test no of request
and loading time using chrome developer tools as shown below.
@Styles.Render("~/Content/css")
@Scripts.Render("~/bundles/jquery")
In this test, there are only 3 request, total data size is 2.67KB and loading time is approximate 80ms. In this way
by using bundling and minification you have reduced the total no of request, size and loading time.
Microsoft.Web.Optimization dll. Using this dll you can also use this technique with ASP.NET MVC3 and .NET
Framework 4.0.
Page
Q69. How Bundling use browser Cache capability?
Ans. Browsers cache resources based on URLs. When a web page requests a resource, the browser first checks
its cache to see if there is a resource with the matched URL. If yes, then it simply uses the cached copy instead of
fetching a new one from server. Hence whenever you change the content of CSS and JS files will not reflect on the
browser. For this you need to force the browser for refreshing/reloading.
But bundles automatically takes care of this problem by adding a hash code to each bundle as a query parameter
to the URL as shown below. Whenever you change the content of CSS and JS files then a new has code will be
generated and rendered to the page automatically. In this way, the browser will see a different Url and will fetch
the new copy of CSS and JS.
We can use partial view to display blog comments, product category, social bookmarks buttons, a dynamic ticker,
calendar etc.
It is best practice to create partial view in the shared folder and partial view name is preceded by "_", but it is not
mandatory. The "_" before view name specify that it is a reusable component i.e. partial view.
Q72. What are different ways of rendering a Partial View in ASP.NET MVC?
Ans. There are four methods for rendering a partial view in ASP.NET MVC These are RenderPartial,
RenderAction, Partial and Action helper methods.
Html.RenderPartial
This method result will be directly written to the HTTP response stream means it used the same TextWriter
object as used in the current webpage/template.
This method returns void.
Simple to use and no need to create any action.
RenderPartial method is useful when the displaying data in the partial view is already in the corresponding
view model. For example: In a blog to show comments of an article, you can use RenderPartial method
since an article information with comments are already populated in the view model.
@{Html.RenderPartial("_Comments");}
60
This method is faster than Partial method since its result is directly written to the response stream which
Page
makes it fast.
Html.RenderAction
This method result will be directly written to the HTTP response stream means it used the same TextWriter
object as used in the current webpage/template.
For this method, we need to create a child action for the rendering the partial view.
RenderAction method is useful when the displaying data in the partial view is independent from
corresponding view model. For example: In a blog to show category list on each and every page, we would
like to use RenderAction method since the list of category is populated by the different model.
@{Html.RenderAction("Category","Home");}
This method is the best choice when you want to cache a partial view.
This method is faster than Action method since its result is directly written to the HTTP response stream
which makes it fast.
Html.Partial
@Html.Partial("_Comments")
Html.Action
@{Html.Action("Category","Home");}
This method is also the best choice when you want to cache a partial view.
Always remember the order of registering the Areas must be on top, so that all of the settings, filters and routes
registered for the applications will also apply on the Areas.
[ChildActionOnly]
Page
A child action is invoked by using @Html.RenderAction or @Html.Action helper methods from inside of a view.
Scaffolding consists of page templates, entity page templates, field page templates, and filter templates. These
templates are called Scaffold templates and allow you to quickly build a functional data-driven Web site.
Steps to create ASP.NET MVC CRUD operations using scaffolding in ASP.NET MVC:
The following actions are created for insert, update and delete operations based on scaffold template within User
controller.
64
Page
Q78. What are ASP.NET MVC Filters and Attributes?
Ans. ASP.NET MVC provides a simple way to inject your piece of code or logic either before or after an action
is executed. This is achieved by decorating the controllers or actions with ASP.NET MVC attributes or custom
attributes. An attribute or custom attribute implements the ASP.NET MVC filters (filter interface) and can contain
your piece of code or logic. You can make your own custom filters or attributes either by implementing ASP.NET
MVC filter interface or by inheriting and overriding methods of ASP.NET MVC filter attribute class if available.
Typically, Filters are used to perform the following common functionalities in your ASP.NET MVC application.
1. Custom Authentication
2. Custom Authorization (User based or Role based)
3. Error handling or logging
4. User Activity Logging
5. Data Caching
65
6. Data Compression
Page
Q79. What are different types of Filters in ASP.NET MVC?
Ans. The ASP.NET MVC framework provides five types of filters.
1. Authentication Filters - This filter is introduced with ASP.NET MVC5. The IAuthenticationFilter interface is
used to create CustomAuthentication filter. The definition of this interface is given below-
void OnAuthenticationChallenge(AuthenticationChallengeContext
filterContext);
}
You can create your CustomAuthentication filter attribute by implementing IAuthenticationFilter as shown
below-
2. Authorization Filters - The ASP.NET MVC Authorize filter attribute implements the IAuthorizationFilter
interface. The definition of this interface is given below-
The AuthorizeAttribute class provides the following methods to override in the CustomAuthorize attribute
class.
filterContext);
public virtual void OnAuthorization(AuthorizationContext filterContext);
protected virtual HttpValidationStatus
OnCacheAuthorization(HttpContextBase httpContext);
}
In this way you can make your CustomAuthorize filter attribute either by implementing IAuthorizationFilter
interface or by inheriting and overriding above methods of AuthorizeAttribute class.
3. Action Filters - Action filters are executed before or after an action is executed. The IActionFilter interface is
used to create an Action Filter which provides two methods OnActionExecuting and OnActionExecuted which
will be executed before or after an action is executed respectively.
4. Result Filters - Result filters are executed before or after generating the result for an action. The Action Result
type can be ViewResult, PartialViewResult, RedirectToRouteResult, RedirectResult, ContentResult, JsonResult,
FileResult and EmptyResult which derives from the ActionResult class. Result filters are called after the Action
filters. The IResultFilter interface is used to create a Result Filter which provides two methods
OnResultExecuting and OnResultExecuted which will be executed before or after generating the result for an
action respectively.
5. Exception Filters - Exception filters are executed when exception occurs during the actions execution or filters
execution. The IExceptionFilter interface is used to create an Exception Filter which provides OnException
method which will be executed when exception occurs during the actions execution or filters execution.
The HandleErrorAttribute class is one example of an exception filter which implements IExceptionFilter.
When HandleError filter receives the exception it returns an Error view located in the Views/Shared folder
of your ASP.NET MVC application.
67
Authentication filters
Authorization filters
Action filters
Result filters
1. Global level - By registering your filter into Application_Start event of Global.asax.cs file with the help of
FilterConfig class.
2. Controller level - By putting your filter on the top of the controller name as shown below-
[Authorize(Roles = "Admin")]
public class AdminController : Controller
{
//TODO:
}
3. Action level - By putting your filter on the top of the action name as shown below-
Ans. Like ASP.NET, MVC Forms authentication occurs after IIS authentication is completed. It can be configure
by using forms element within Web.config file of your ASP.NET MVC application. The default attribute values for
Page
The FormsAuthentication class creates the authentication cookie automatically when SetAuthCookie() or
RedirectFromLoginPage() methods are called. The value of authentication cookie contains a string representation
of the encrypted and signed FormsAuthenticationTicket object.
69
Page
You can create the FormsAuthenticationTicket object by specifying the cookie name, version of the cookie,
directory path, issue date of the cookie, expiration date of the cookie, whether the cookie should be persisted,
and optionally user-defined data as shown below:
Now, you can encrypt this ticket by using the Encrypt method FormsAuthentication class as given below:
ASP.NET provides IPrincipal and IIdentity interfaces to represents the identity and role for a user. You can create
a custom solution by evaluating the IPrincipal and IIdentity interfaces which are bound to the HttpContext as well
as the current thread.
return true;
}
Page
else
{
return false;
}
}
Now you can put this CustomPrincipal objects into the threads CurrentPrincipal property and into the
HttpContexts User property to accomplish your custom authentication and authorization process.
A user will be authenticated if IsAuthenticated property returns true. For authenticating a user you can use one
of the following two ways:
1. Thread.CurrentPrincipal.Identity.IsAuthenticated
2. HttpContext.Current.User.Identity.IsAuthenticated
ASP.NET MVC provides Authorization filter to authorize a user. This filter can be applied to an action, a controller,
or even globally. This filter is based on AuthorizeAttribute class. You can customize this filter by overriding
OnAuthorization() method as shown below:
if (!String.IsNullOrEmpty(Roles))
{
if (!CurrentUser.IsInRole(Roles))
{
filterContext.Result = new RedirectToRouteResult(new
71
if (!String.IsNullOrEmpty(Users))
{
if (!Users.Contains(CurrentUser.UserId.ToString()))
{
filterContext.Result = new RedirectToRouteResult(new
RouteValueDictionary(new { controller = "Error", action =
"AccessDenied" }));
Now you can apply this custom authorization filter at controller or action level for authorization as shown below:
[CustomAuthorize(Roles= "Admin")]
public class AdminController : BaseController
{
public ActionResult Index()
{
return View();
}
}
ValidateInput attribute can enable or disable input validation at the controller level or at any action method.
[ValidateInput(false)]
public class HomeController : Controller
{
public ActionResult AddArticle()
{
return View();
}
}
ValidateInput attribute allow the Html input for all the properties and that is unsafe. Since you have enable Html
72
input for only one-two properties then how to do this. To allow Html input for a single property, you should use
AllowHtml attribute.
Page
public class BlogModel
{
[Required]
[Display(Name = "Title")]
public string Title { get; set; }
[AllowHtml]
[Required]
[Display(Name = "Description")]
public string Description { get; set; }
}
Since cached content reduce round-trips, network traffic and avoid time consumption for regenerating
reusable content which cause a boost in the performance.
Page
Q89. What is output caching?
Ans. The OutputCache filter allow you to cache the data that is output of an action method. By default, this
attribute filter cache the data till 60 seconds. After 60 sec, ASP.NET MVC will execute the action method again and
cache the output again.
The output of the Index() action method will be cached for 20 seconds. If you will not defined the duration, it will
cached it for by default cache duration 60 sec.
By default, content is cached in three locations: the web server, any proxy servers, and the user's browser. You
can control the content's cached location by changing the location parameter of the OutputCache attribute to any
of the following values: Any, Client,Downstream, Server, None, or ServerAndClient.
By default, the location parameter has the value Any which is appropriate for most the scenarios. But sometimes
there are scenarios when you required more control over the cached data.
Q90. What is Donut caching and Donut hole caching in ASP.NET MVC?
Ans. Donut caching cache an entire web page except for one or more parts of the web page. Before Donut
caching, we have Output Caching which cache the entire web page.
Suppose, you have a web application in which some pages like HomePage,Tools etc. are same for all the users
excepts the user's logged in details like username.
If you want to cache all these pages for all the users by using OutputCache with VaryByParam UserID, then the
entire page would be cached every time for each user with a different user name (or whatever your dynamic part
of the page is). This is not a good practice since there will be 1000 cached pages if there are 1000 logged in user
at a time.
74
Page
To resolve this issue, Donut Caching was introduced which cached only one copy of the entire page for all the user
except for a small part which remain dynamic. This small part act like as a hole in the cached content and much
like a donut.
Donut caching is very useful in the scenarios where most of the elements in your page are rarely changed except
the few sections that dynamically change, or changed based on a request parameter.
Donut Hole Caching is the inverse of Donut caching means while caching the entire page it cached only a small
part of the page (the donut hole).
Suppose, you have a web application in which ProductCategory is shown on each and every pages so it makes
sense to render all of the categories just once and cache the resulting HTML by using Donut Hole Caching.
Donut Hole caching is very useful in the scenarios where most of the elements in your page are dynamic except
the few sections that rarely change, or changed based on a request parameter. ASP.NET MVC has great support
for Donut Hole caching through the use of Child Actions.
coupling, and it makes testing and maintenance of our application easier. Using Dependency Injection you can
Page
High level modules should not depend upon low level modules. Both should depend upon abstractions.
Abstractions should not depend upon details. Details should depend upon abstractions.
The Dependency Inversion principle (DIP) helps us to develop loosely couple code by ensuring that high-level
modules depend on abstractions rather than concrete implementations of lower-level modules. The Inversion of
Control pattern is an implementation of this principle.
The term Inversion of Control (IoC) refers to a programming style where a framework or runtime, controls the
program flow. Inversion of control means we are changing the control from normal way. It works on Dependency
Inversion Principle. The most software developed on the .NET Framework uses IoC.
More over IoC is a generic term and it is not limited to DI. Actually, DI and Service Locator patterns are specialized
versions of the IoC pattern or you can say DI and Service Locator are the ways of implementing IoC.
For example, suppose your Client class needs to use a Service class component, then the best you can do is to
make your Client class aware of an IService interface rather than a Service class. In this way, you can change the
implementation of the Service class at any time (and for how many times you want) without breaking the host
code.
DIP says High level module should not depend on low level module and both should depend on abstraction. IoC is
a way that provide abstraction. A way to change the control. IoC gives some ways to implement DIP. If you want
to make independent higher level module from the lower level module then you have to invert the control so that
76
low level module do not control interface and creation of object. Finally IoC gives some way to invert the control.
Page
Q93. What is Dependency Injection (DI)?
Ans. DI is a software design pattern that allow us to develop loosely coupled code. DI is a great way to reduce
tight coupling between software components. DI also enables us to better manage future changes and other
complexity in our software. The purpose of DI is to make code maintainable.
The Dependency Injection pattern uses a builder object to initialize objects and provide the required dependencies
to the object means it allows you to "inject" a dependency from outside the class.
For example, suppose your Client class needs to use a Service class component, then the best you can do is to
make your Client class aware of an IService interface rather than a Service class. In this way, you can change the
implementation of the Service class at any time (and for how many times you want) without breaking the host
code.
DI Implementation:
77
Page
Q94. What is Service Locator?
Ans. Service Locator is a software design pattern that also allow us to develop loosely coupled code. It
implements the DIP principle and easier to use with an existing codebase as it makes the overall design looser
without forcing changes to the public interface.
The Service Locator pattern introduces a locator object that objects is used to resolve dependencies means it
allows you to "resolve" a dependency within a class. Above example can be re-written as follows by using SL.
return _Service;
}
}
public Client()
{
this._service = LocateService.GetService();
}
Console.ReadKey();
}
}
Constructor Injection - This is the most common DI. Dependency Injection is done by supplying the
DEPENDENCY through the classs constructor when instantiating that class. Injected component can be
used anywhere within the class. Should be used when the injected dependency is required for the class
to function. It addresses the most common scenario where a class requires one or more dependencies.
Console.WriteLine("Service Called");
//To Do: Some Stuff
}
}
Console.ReadKey();
}
}
Property Injection This is also called Setter injection. This is used when a class has optional
dependencies, or where the implementations may need to be swapped. This is used by different logger
implementations like Log4Net. It may require checking for a provided implementation throughout the
class (need to check for null before using it). It does not require adding or modifying constructors.
Console.WriteLine("Service Called");
//To Do: Some Stuff
Page
}
}
Console.ReadKey();
}
}
Method Injection This Inject the dependency into a single method, for use by that method only. It could
be useful where the whole class does not need the dependency, just the one method.
Console.WriteLine("Service Called");
//To Do: Some Stuff
Page
}
}
Console.ReadKey();
}
}
A DI Container is a framework to create dependencies and inject them automatically when required. It
automatically creates objects based on request and inject them when required. DI Container helps us to manage
dependencies with in the application in a simple and easy way.
We can also manage an application dependencies without a DI Container, but it will be like as POOR MANS DI and
we have to do more work, to make it configured and manageable.
82
Page
Q98. What are popular DI containers?
Ans. Today, there are a lot of excellent DI Containers that are available for .NET. The list of most useful DI
container for .NET framework is given below:
Castle Windsor
Spring.NET
INTERCEPTION
Comprehensive documentation
Commercial support available
Autofac
Unity
INTERCEPTION
Good documentation
Consistent API
Ninject
Q100. What are commonly used tool for Unit Testing in ASP.NET MVC?
Ans. ASP.NET MVC has been designed for testability without dependencies on the IIS server, on a database, or
on external classes. There are following popular tools for ASP.NET MVC testing:
83
Page
NUnit - This is the most popular unit testing frameworks for Microsoft .NET. Its syntax is relatively simple
and easy to use. It comes with a test runner GUI and a command-line utility. NUnit is also available as a
NuGet package for download.
xUnit.NET - This provides a way to run automated unit tests. It is simple, easily extended, and has a very
clean syntax.
Ninject 2 - This provides a way to wire up classes in your application.
Moq - This provides a framework for mocking interfaces and classes during testing.
84
Page
2
ASP.NET WEB API
Q1. What is REST?
Ans. REST stands for Representational State Transfer. This is a protocol for exchanging data over a distributed
environment. REST is an architectural style which treat each service as a resource and access data by HTTP
protocol methods like GET, POST, PUT, and DELETE.
REST-style architectures consist of clients and servers. Clients initiate requests to servers who process these
requests and return responses based on these requests. These requests and responses are built around the
transfer of representations of these resources.
SOAP REST
SOAP stands for Simple Object Access Protocol REST stands for REpresentational State Transfer.
It is an XML based protocol built on the top of HTTP REST is not a protocol but it is an architectural style i.e.
or sometimes TCP/IP, SMTP. resource-based architecture.
85
SOAP has specifications for both stateless and REST is completely stateless.
Page
stateful implementation.
SOAP enforces message format as XML. REST does not enforces message format as XML or JSON.
SOAP has a defined standard specification. It has no defined standard specifications.
For example, WS-Security is the specification for
implementing security.
The SOAP message consists of an envelope which REST uses the HTTP build-in headers (with a variety of
includes SOAP headers and body to store the actual media-types) to carry meta information and use the GET,
information you want to send. POST, PUT and DELETE verbs to perform CRUD operations.
SOAP uses interfaces and named operations to REST uses URI and methods like (GET, PUT, POST, DELETE)
expose your service. to expose resources.
Performance is slow as compared to REST. REST is fast as compared to SOAP.
It is a part of the core ASP.NET platform and can be used with MVC and other types of Web applications like
ASP.NET WebForms. It can also be used as a stand-alone Web services application.
1. It supports convention-based CRUD Actions since it works with HTTP verbs GET, POST, PUT and DELETE.
2. Responses have an Accept header and HTTP status code.
3. Responses are formatted by WEB APIs MediaTypeFormatter into JSON, XML or whatever format you want to
add as a MediaTypeFormatter.
4. It may accepts and generates the content which may not be object oriented like images, PDF files etc.
5. It has automatic support for OData. Hence by placing the new [Queryable] attribute on a controller method
that returns IQueryable, clients can use the method for OData query composition.
6. It can be hosted with in the applicaion or on IIS.
7. It also supports the MVC features such as routing, controllers, action results, filter, model binders, IOC
container or dependency injection that makes it more simple and robust.
For example twitter, facebook and Google API for the web application and phone apps.
WEB API is the great framework for exposing your data and service to different-different devices. Moreover WEB
API is open source an ideal platform for building REST-ful services over the .NET Framework. Unlike WCF Rest
service, it use the full featues of HTTP (like URIs, request/response headers, caching, versioning, various content
formats) and you don't need to define any extra config settings for different devices unlike WCF Rest service.
1. If we need a Web Service and dont need SOAP, then ASP.NET WEB API is best choice.
2. It is used to build simple, non-SOAP-based HTTP Services on top of existing WCF message pipeline.
3. It doesn't have tedious and extensive configuration like WCF REST service.
4. Simple service creation with WEB API. With WCF REST Services, service creation is difficult.
5. It is only based on HTTP and easy to define, expose and consume in a REST-ful way.
6. It is light weight architecture and good for devices which have limited bandwidth like smart phones.
7. It is open source.
Q6. What is difference between WCF and WEB API and WCF REST and Web Service?
Ans. .NET framework has a number of technologies that allow you to create HTTP services such as Web Service,
WCF and now WEB API. There are following differences among these four:
Web Service
WCF Rest
WEB API
1. This is the new framework for building HTTP services with easy and simple way.
2. WEB API is open source an ideal platform for building REST-ful services over the .NET Framework.
3. Unlike WCF Rest service, it use the full features of HTTP (like URIs, request/response headers, caching,
versioning, various content formats)
4. It also supports the MVC features such as routing, controllers, action results, filter, model binders, IOC
container or dependency injection, unit testing that makes it more simple and robust.
5. It can be hosted with in the application or on IIS.
6. It is light weight architecture and good for devices which have limited bandwidth like smart phones.
7. Responses are formatted by WEB APIs MediaTypeFormatter into JSON, XML or whatever format you want
to add as a MediaTypeFormatter.
1. Choose WCF when you want to create a service that should support special scenarios such as one way
messaging, message queues, duplex communication etc.
2. Choose WCF when you want to create a service that can use fast transport channels when available, such
as TCP, Named Pipes, or maybe even UDP (in WCF 4.5), and you also want to support HTTP when all other
transport channels are unavailable.
3. Choose WEB API when you want to create resource-oriented services over HTTP that can use the full
features of HTTP (like URIs, request/response headers, caching, versioning, various content formats).
88
4. Choose WEB API when you want to expose your service to a broad range of clients including browsers,
mobiles, iphone and tablets.
Page
Q8. What is difference between ASP.NET MVC and ASP.NET WEB API?
Ans. There are following differences between ASP.NET MVC and WEB API:
1. ASP.NET MVC is used to create web applications that return both views and data but ASP.NET WEB API is
used to create full blown HTTP services with easy and simple way that returns only data not view.
2. WEB API helps to build REST-ful services over the .NET Framework and it also support content-
negotiation(it's about deciding the best response format data that could be acceptable by the client. it
could be JSON,XML,ATOM or other formatted data), self-hosting which are not in MVC.
3. WEB API also takes care of returning data in particular format like JSON, XML or any other based upon the
Accept header in the request and you don't worry about that. MVC only return data in JSON format using
JsonResult.
4. In WEB API the request are mapped to the actions based on HTTP verbs but in MVC it is mapped to actions
name.
5. ASP.NET WEB API is new framework and part of the core ASP.NET framework. The model binding, filters,
routing and others MVC features exist in WEB API are different from MVC and exists in the new
System.Web.Http assembly. In MVC, these features exist within System.Web.Mvc. Hence WEB API can also
be used with ASP.NET and as a stand-alone service layer.
6. You can mix WEB API and MVC controller in a single project to handle advanced AJAX requests which may
return data in JSON, XML or any others format and building a full blown HTTP service. Typically, this will be
called WEB API self-hosting.
7. When you have mixed MVC and WEB API controller and you want to implement the authorization then
you have to create two filters one for MVC and another for WEB API since both are different.
8. Moreover, WEB API is light weight architecture and except the web application it can also be used with
smart phone apps.
Ans. Unlike ASP.NET MVC, WEB API is used to return only data. The data can be string, JSON, XML, Text etc. It
Page
[HttpGet]
[ActionName("GetProducts")]
public IEnumerable<Product> ProductList()
{
return db.Products.AsEnumerable();
}
Q11. Can you restrict a WEB API action method to be invoked only by HTTP GET, POST,
PUT or DELETE?
Ans. Like ASP.NET MVC, you can also restrict WEB API action method to be invoked only by a specific HTTP
request by applying HttpGet or HttpPost or HttpPut or HttpDelete attribute.
If you want to restrict an action method for HTTP Get request only then decorate it with HttpGet action method
selector attribute as given below:
[HttpGet]
public IEnumerable<Product> ProductList()
{
return db.Products.AsEnumerable();
}
if (response.IsSuccessStatusCode)
{
var data = response.Content.ReadAsAsync<IEnumerable<Product>>().Result;
return View(data);
}
return View();
}
90
}
Page
Q13. How ASP.NET WEB API routing is different from ASP.NET MVC routing?
Ans. ASP.NET MVC and ASP.NET WEB API both use routing to monitor incoming request and at least one route
is defined in order to function. The difference between these two routing is given below:
1. In WEB API route pattern {action} parameter is optional but you can include an {action} parameter. In ASP.NET
MVC {action} parameter is mandatory.
2. The action methods defined in the API controller must either have the HTTP action verbs (GET, POST, PUT,
DELETE) attribute or have one of the HTTP action verbs as a prefix for the actions methods name. In ASP.NET
MVC, by default an action method can be called by HTTP GET or POST verbs and for using others HTTP verbs
you need to defined as an attribute.
3. Unlike ASP.NET MVC, Web API can receive only one complex type as a parameter.
// Convention-based routing.
config.Routes.MapHttpRoute(
name: "DefaultApi",
routeTemplate: "api/{controller}/{id}",
defaults: new { id = RouteParameter.Optional }
);
}
}
as shown below:
Page
1. Controller level routing You can define routes at controller level which apply to all actions within the
controller unless a specific route is added to an action.
[RoutePrefix("Service/User")]
public class UserController : ApiController
{
//GET route: api/User
public IEnumerable<string> Get()
{
return new string[] { "value1", "value2" };
}
2. Action level routing You can define routes at action level which apply to a specific action with in the
controller.
}
92
}
Page
Other Free E-Books
The author will truly appreciate it, if you will share his additional books among others because he wants it to reach
as many techy people as possible so that they can also get benefited by his contribution.
You can download these books from www.dotnettricks.com in PDF format absolutely free.
93
Page
Page
94