views:

289

answers:

3

Wordpress has the capability to update itself (on admin user's request).

Is it possible to implement something similar using ASP.NET?

I can see web.config and bin folder causing problems.

+2  A: 

Aside from the security implication of this, yes it should be possible. But what your talking about is having the asp.net process have rights to modify all the data within its directory.

This sounds a little dangerous to me.

JoshBerke
+1  A: 

web.config and the bin folder should not be a problem, you actually can edit these while an ASP.Net app is running. Existing sessions continue to see the "old" config or bin, new sessions get the new ones.

Edit: This link descibes what I mean: http://technet.microsoft.com/en-us/library/cc759560.aspx

Steve Haigh
Modifying the web.config recycles the app pool
kay.herzam
It does, but it won't harm existing sessions as they see the old app pool.
Steve Haigh
I didn't know that, thanks
kay.herzam
+2  A: 

ASP.NET uses shadowcopy of dlls in your bin folder to allow you to xcopy a new set of dlls and content up to the server without those files being locked. So, dlls and web.config are not a problem.

The issue will be around having the process that runs your ASP.NET site have write access to the file system. This is generally a bad idea. You should consider putting this "auto update" functionality into the hands of a service that might run on your web server.

Check out this...

http://www.odetocode.com/articles/305.aspx

... for "What ASP.NET Programmers Should Know About Application Domains" but seriously consider the security implications of what you're suggesting. How will you stop someone from uploading evil code to your site?

Martin Peck