Brtdku

public ActionResult DownloadFile(string fileName, string dummyName)

        {

            var path = this.HttpContext.Server.MapPath("~/App_Data/TempFiles");

            var filePath = Path.Combine(path, fileName);

            var fileExtension = Path.GetExtension(filePath);



            byte fileBytes = System.IO.File.ReadAllBytes(filePath);



            var cookie = new System.Web.HttpCookie("fileDownload", "true")

            {

                Expires = DateTime.Now.AddDays(1),

                Path = "/"

            };

            this.Response.Cookies.Add(cookie);



            return File(fileBytes, "application/octet-stream", fileName);

        }

http://localhost/testapp/employee/downloadfile/?filename=netspi- notafile.xxx../../../../web.config&dummyName=netspi-notafile.xxx

public ActionResult DownloadFile(string fileName, string dummyName)

        {

            var path = this.HttpContext.Server.MapPath("~/App_Data/TempFiles");

            var filePath = Path.Combine(path, fileName);

            var fileExtension = Path.GetExtension(filePath);



            byte fileBytes = System.IO.File.ReadAllBytes(filePath);



            var cookie = new System.Web.HttpCookie("fileDownload", "true")

            {

                Expires = DateTime.Now.AddDays(1),

                Path = "/"

            };

            this.Response.Cookies.Add(cookie);



            return File(fileBytes, "application/octet-stream", fileName);

        }

http://localhost/testapp/employee/downloadfile/?filename=netspi- notafile.xxx../../../../web.config&dummyName=netspi-notafile.xxx

public ActionResult DownloadFile(string fileName, string dummyName)

        {

            var path = this.HttpContext.Server.MapPath("~/App_Data/TempFiles");

            var filePath = Path.Combine(path, fileName);

            var fileExtension = Path.GetExtension(filePath);



            byte fileBytes = System.IO.File.ReadAllBytes(filePath);



            var cookie = new System.Web.HttpCookie("fileDownload", "true")

            {

                Expires = DateTime.Now.AddDays(1),

                Path = "/"

            };

            this.Response.Cookies.Add(cookie);



            return File(fileBytes, "application/octet-stream", fileName);

        }

http://localhost/testapp/employee/downloadfile/?filename=netspi- notafile.xxx../../../../web.config&dummyName=netspi-notafile.xxx

public ActionResult DownloadFile(string fileName, string dummyName)

        {

            var path = this.HttpContext.Server.MapPath("~/App_Data/TempFiles");

            var filePath = Path.Combine(path, fileName);

            var fileExtension = Path.GetExtension(filePath);



            byte fileBytes = System.IO.File.ReadAllBytes(filePath);



            var cookie = new System.Web.HttpCookie("fileDownload", "true")

            {

                Expires = DateTime.Now.AddDays(1),

                Path = "/"

            };

            this.Response.Cookies.Add(cookie);



            return File(fileBytes, "application/octet-stream", fileName);

        }

http://localhost/testapp/employee/downloadfile/?filename=netspi- notafile.xxx../../../../web.config&dummyName=netspi-notafile.xxx

Your Answer

StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});