ASP.NET Security http://aspnetsecurity.com Articles, News, and Resources about ASP.NET Security Wed, 07 Nov 2007 03:33:45 +0000 http://wordpress.org/?v=2.3 en IIS 7.0 - ASP.NET Integration http://aspnetsecurity.com/aspnet/security/iis-70-aspnet-integration/ http://aspnetsecurity.com/aspnet/security/iis-70-aspnet-integration/#comments Wed, 07 Nov 2007 03:33:45 +0000 admin http://aspnetsecurity.com/?p=50 It means that only ASP.NET request will be carried out by managed modules. Now, if we want to employ ASP.NET modules to all our requests, we can write the following in the …

Here is the original post:
IIS 7.0 - ASP.NET Integration

]]> http://aspnetsecurity.com/aspnet/security/iis-70-aspnet-integration/feed/ web server how to http://aspnetsecurity.com/aspnet/security/web-server-how-to/ http://aspnetsecurity.com/aspnet/security/web-server-how-to/#comments Tue, 06 Nov 2007 08:53:00 +0000 admin http://aspnetsecurity.com/?p=52 … running asp.net 1.0 web server sales web server sample web server script web server scripting language web server scripts web server secure web server security web server security 1 web server security assesment web server security …

View original post here:
web server how to

]]> http://aspnetsecurity.com/aspnet/security/web-server-how-to/feed/ ASP.NET Interview Questions http://aspnetsecurity.com/aspnet/security/aspnet-interview-questions/ http://aspnetsecurity.com/aspnet/security/aspnet-interview-questions/#comments Fri, 02 Nov 2007 06:22:00 +0000 admin http://aspnetsecurity.com/aspnet/security/aspnet-interview-questions/ If I’m developing an application that must accommodate multiple security levels though secure login and my ASP.NET web application is spanned across three web-servers (using round-robin load balancing) what would be the best approach to …

Read the rest here:
ASP.NET Interview Questions

]]> http://aspnetsecurity.com/aspnet/security/aspnet-interview-questions/feed/ ASP.NET authentication http://aspnetsecurity.com/aspnet/security/aspnet-authentication/ http://aspnetsecurity.com/aspnet/security/aspnet-authentication/#comments Thu, 01 Nov 2007 23:49:49 +0000 admin http://aspnetsecurity.com/?p=49 Authentication in ASP.NET is one of the best features of the web application’s security, which it is divided into 3 different built-in providers: Forms-based, Passport and Windows Authentication. The Forms-based and passport …

Go here to see the original:
ASP.NET authentication

]]> http://aspnetsecurity.com/aspnet/security/aspnet-authentication/feed/ Very Simple Shopping Cart http://aspnetsecurity.com/aspnet/security/very-simple-shopping-cart/ http://aspnetsecurity.com/aspnet/security/very-simple-shopping-cart/#comments Wed, 31 Oct 2007 02:07:42 +0000 admin http://aspnetsecurity.com/?p=43 It should be made in VB ASP.NET only It’s a kind of shopping cart very simple, nothing of the complexitty of regular shopping carts on the web. Products to sell: images/files to download. Customers types: 2. One type are schools wich …

Read the original:
Very Simple Shopping Cart

]]> http://aspnetsecurity.com/aspnet/security/very-simple-shopping-cart/feed/ ASP.NET built in Security Controls http://aspnetsecurity.com/aspnet/security/aspnet-built-in-security-controls/ http://aspnetsecurity.com/aspnet/security/aspnet-built-in-security-controls/#comments Tue, 30 Oct 2007 00:36:10 +0000 admin http://aspnetsecurity.com/?p=53 Security controls for Web Applications, really cool, and slick- so far. Good tutorial: Securing Your Application.

More here:
ASP.NET built in Security Controls

]]> http://aspnetsecurity.com/aspnet/security/aspnet-built-in-security-controls/feed/ WebMethods Behind ASP.NET Pages are Web Services Too http://aspnetsecurity.com/aspnet/security/webmethods-behind-aspnet-pages-are-web-services-too/ http://aspnetsecurity.com/aspnet/security/webmethods-behind-aspnet-pages-are-web-services-too/#comments Sun, 28 Oct 2007 19:23:43 +0000 admin http://aspnetsecurity.com/?p=41 I’ve long been concerned that developers are adding AJAX functionality to their web sites without fully considering the security ramifications. In fact, I believe some of the high-level tools for AJAX-enabling sites actually encourage …

Read the original:
WebMethods Behind ASP.NET Pages are Web Services Too

]]> http://aspnetsecurity.com/aspnet/security/webmethods-behind-aspnet-pages-are-web-services-too/feed/ 4-Tier Architecture in ASP.NET with C# http://aspnetsecurity.com/aspnet/security/4-tier-architecture-in-aspnet-with-c/ http://aspnetsecurity.com/aspnet/security/4-tier-architecture-in-aspnet-with-c/#comments Fri, 26 Oct 2007 02:05:31 +0000 admin http://aspnetsecurity.com/?p=46 using System.Configuration; using System.Web; using System.Web.Security; using System.Web.UI; using System.Web.UI.WebControls; using System.Web.UI.WebControls.WebParts; using System.Web.UI.HtmlControls; using System.Data.SqlClient; …

See the original post here:
4-Tier Architecture in ASP.NET with C#

]]> http://aspnetsecurity.com/aspnet/security/4-tier-architecture-in-aspnet-with-c/feed/ Mitigating XSS Attacks in ASP.NET Apps http://aspnetsecurity.com/aspnet/security/mitigating-xss-attacks-in-aspnet-apps/ http://aspnetsecurity.com/aspnet/security/mitigating-xss-attacks-in-aspnet-apps/#comments Thu, 25 Oct 2007 07:12:00 +0000 admin http://aspnetsecurity.com/?p=51 However, I find several cases where the application team deviates from having this directive set to true for some business reasons. For eg. there is a rich text box in the web page which must allow any kind of input data. …

See the original post here:
Mitigating XSS Attacks in ASP.NET Apps

]]> http://aspnetsecurity.com/aspnet/security/mitigating-xss-attacks-in-aspnet-apps/feed/ Using Active Directory to manage your web application security http://aspnetsecurity.com/aspnet/security/using-active-directory-to-manage-your-web-application-security/ http://aspnetsecurity.com/aspnet/security/using-active-directory-to-manage-your-web-application-security/#comments Tue, 23 Oct 2007 23:22:44 +0000 admin http://aspnetsecurity.com/?p=44 Now, even though we have the Active Directory managing our users and groups, we still have to program what those groups can do in our application. The following example shows how to setup your WEB (ASP.Net) application to check if the …

Read the original:
Using Active Directory to manage your web application security

]]> http://aspnetsecurity.com/aspnet/security/using-active-directory-to-manage-your-web-application-security/feed/ Writing A Custom Membership Provider for your ASP.NET 2.0 Web Site http://aspnetsecurity.com/aspnet/security/writing-a-custom-membership-provider-for-your-aspnet-20-web-site/ http://aspnetsecurity.com/aspnet/security/writing-a-custom-membership-provider-for-your-aspnet-20-web-site/#comments Sun, 21 Oct 2007 20:07:16 +0000 admin http://aspnetsecurity.com/?p=45 To maintain consistency with the location of databases in a typical ASP.NET 2.0 web application, save this database in C:\NewMembershipProvider\App_Data\. Give it the name Members.mdb. Create a new table in the Members.mdb database and …

See original here:
Writing A Custom Membership Provider for your ASP.NET 2.0 Web Site

]]> http://aspnetsecurity.com/aspnet/security/writing-a-custom-membership-provider-for-your-aspnet-20-web-site/feed/ VB.NET Interview Questions #5 http://aspnetsecurity.com/aspnet/security/vbnet-interview-questions-5/ http://aspnetsecurity.com/aspnet/security/vbnet-interview-questions-5/#comments Sun, 21 Oct 2007 11:42:27 +0000 admin http://aspnetsecurity.com/?p=48 What criteria would you use to determine if a particular program should be written as a web based ASP.NET application or …

See the rest here:
VB.NET Interview Questions #5

]]> http://aspnetsecurity.com/aspnet/security/vbnet-interview-questions-5/feed/ Web Server in Windows Server 2008 http://aspnetsecurity.com/aspnet/security/web-server-in-windows-server-2008/ http://aspnetsecurity.com/aspnet/security/web-server-in-windows-server-2008/#comments Wed, 17 Oct 2007 04:54:25 +0000 admin http://aspnetsecurity.com/?p=47 With this model, ASP.NET is no longer employed with our Web server as a standalone application framework. It serves by now being a platform for extending the IIS Web server, facilitating ASP.NET components to turn into constituents of …

Continued here:
Web Server in Windows Server 2008

]]> http://aspnetsecurity.com/aspnet/security/web-server-in-windows-server-2008/feed/ Hacking The Code - Asp.net web application Security http://aspnetsecurity.com/aspnet/security/hacking-the-code-aspnet-web-application-security-2/ http://aspnetsecurity.com/aspnet/security/hacking-the-code-aspnet-web-application-security-2/#comments Sat, 13 Oct 2007 19:57:00 +0000 admin http://aspnetsecurity.com/?p=42 ASP.NET Web Application Security; Chapter 1 - Managing Users; Chapter 2 - Authenticating and Authorizing Users; Chapter 3 - Managing Sessions; Chapter 4 - Encrypting Private Data; Chapter 5 - Filtering User Input; Chapter 6 - Accessing …

Read the original here:
Hacking The Code - Asp.net web application Security

]]> http://aspnetsecurity.com/aspnet/security/hacking-the-code-aspnet-web-application-security-2/feed/ Professional ASP.NET 2.0 Security, Membership, and Role Management … http://aspnetsecurity.com/aspnet/security/professional-aspnet-20-security-membership-and-role-management/ http://aspnetsecurity.com/aspnet/security/professional-aspnet-20-security-membership-and-role-management/#comments Sat, 13 Oct 2007 03:17:31 +0000 admin http://aspnetsecurity.com/?p=40 The book offers detailed information on every major area of ASP.NET security you’ll encounter when developing Web applications. You’ll see how ASP.NET 2.0 version contains many new built-in security functions compared to ASP. …

View original here:
Professional ASP.NET 2.0 Security, Membership, and Role Management …

]]> http://aspnetsecurity.com/aspnet/security/professional-aspnet-20-security-membership-and-role-management/feed/