ASP.NET MVC 2.0 -- Introduction -- Who This Book Is For -- How This Book Is Structured -- What You Need to Use This Book -- Conventions -- Source Code -- Errata -- p2p.wrox.com -- NerdDinner -- File ➪ New Project -- Creating the Database -- Building the Model -- Controllers and Views -- Create, Update, Delete Form Scenarios -- ViewData and ViewModel -- Partials and Master Pages -- Paging Support -- Authentication and Authorization -- AJAX Enabling RSVPs Accepts -- Integrating an AJAX Map -- Unit Testing -- NerdDinner Wrap-Up -- Model-View-Controller and ASP.NET -- What Is Model-View-Controller? -- MVC on the Web Today -- ASP.NET MVC: The New Kid on the Block -- Summary -- ASP.NET > ASP.NET MVC -- Abstraction: What Web Forms Does Well -- The Leak: Where Web Forms Doesn't Exactly Fit -- Back to Basics: ASP.NET MVC Believes… -- Caring about Testability -- Common Reactions to ASP.NET MVC -- Why "(ASP.NET > ASP.NET MVC) == True" -- Summary -- Routes and URLs -- Introduction to Routing -- Under the Hood: How Routes Tie Your URL to an Action -- Advanced Routing with Custom Constraints -- Route Extensibility -- Using Routing with Web Forms -- Summary -- Controllers -- History of the Controller -- Defining the Controller: The IController Interface -- The ControllerBase Abstract Base Class -- The Controller Class and Actions -- The ActionResult -- Action Invoker -- Summary -- Views -- What a View Does -- What a View Shouldn't Do -- Specifying a View -- Strongly Typed Views -- ViewModels -- HTML Helper Methods -- The View Engine -- New View Engine or New ActionResult? -- Summary -- AJAX -- When Ajax Is Cool -- When It's Not -- Ajax Examples -- Summary -- Filters -- Filters Included with ASP.NET MVC -- Writing a Custom Action Filter -- Writing a Custom Authorization Filter -- Writing a Custom Exception Filter -- Filter Ordering -- Filter Naming -- Summary.

Securing Your Application -- This Is a War -- Weapons -- Threat: Cross-Site Scripting (XSS) -- Threat: Cross-Site Request Forgery -- Threat: Cookie Stealing -- Threat: Over-Posting -- Keeping Your Pants Up: Proper Error Reporting and the Stack Trace -- Securing Your Controllers, Not Your Routes -- Summary: It's Up to You -- Test Driven Development with ASP.NET MVC -- A Brief Introduction to TDD -- Applying TDD to ASP.NET MVC -- Summary -- Testable Design Patterns -- Why You Should Care About Testability -- You Want to Write Testable Code -- Using Tests to Prove You're Done -- Designing Your Application for Testability -- Testable Data Access -- Implementing Business Logic with the Service Layer -- Summary -- Best of Both Worlds: Web Forms and MVC Together -- How Is It Possible? -- Including MVC in Existing Web Forms Applications -- Adding Web Forms to an Existing ASP.NET MVC Application -- Sharing Data between Web Forms and MVC -- Migrating from Web Forms to MVC -- Summary -- What's New in ASP.NET MVC 2 -- Security -- Productivity -- Performance: Asynchronous Controller Actions -- Miscellaneous -- Summary -- Index.