Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008


all groups > asp.net security > september 2003 > threads for september 1 - 7, 2003

Filter by week: 1 2 3 4 5

encrypting SQL server connection string in web.config
Posted by VR at 9/7/2003 2:48:20 PM
In my web.config I am storing a connection string to SQL server, along with password and user name. My goal is to somehow encrypt the string so it wouldn't be in clear text. From my understanding I cannot use the one-way algorithms, like MD5 or SHA1, since I'll have to decrypt the connect...more >>

Server Error in '/' Application - Compilation Error - Temporary ASP.NET Files
Posted by Tyrel van Niekerk at 9/7/2003 2:12:02 PM
I have a site that works fine on my local box. I then copy it to my production server (Win2003) and when I try to access the site I get: Server Error in '/' Application. ---------------------------------------------------------------------------- ---- Compilation Error Description: An er...more >>

Thread Unable to Impersonate (Workaround)
Posted by Sam Page at 9/6/2003 10:38:48 AM
My ASP.NET aspx page can impersonate a userX and access a UNC share just fine. When I start a thread from the same aspx page, my real intention, and try to impersonate in the thread method, I fail with "Unable to Impersonate." The thread successfully calls LogonUser, DuplicateTokens the ...more >>

My server completely in hacker's control???
Posted by jkim65 NO[at]SPAM socal.rr.com at 9/6/2003 4:09:02 AM
Hi. I am posting another question. My computer is apparently hacked. He sent out many false messages to members of my site. What he did was he first sent me an email saying he couldn't login to my site. I went to my site and logged in to check what's wrong. He must have somehow ex...more >>

CryptographicException: Bad Data
Posted by jkim65 NO[at]SPAM socal.rr.com at 9/6/2003 2:57:48 AM
Hi. Okay. From this one site A, a user login then using a frame to go to site B. Then I get System.Security.Cryptography.CryptographicException: Bad Data. error. It seems to me the page of site B somehow recognize login information of site A and tries to decript it. Site A and Site B...more >>

TripleDES Encryption issue
Posted by jdn at 9/6/2003 2:29:31 AM
I'm new to using this part of the framework, so I'm hoping I've done something obviously stupid, which someone will be able to point out in an obvious manner. Most of the samples I've seen involved encrypting and decrypting to and from a file, but that's not what I want. I want to be able ...more >>

Error when opening project: acct not in VSDev group
Posted by Chad at 9/5/2003 2:11:36 PM
Sorry, I'm a newbie to the Dot Net world. I've been downloading web application samples from the Internet to help me learn, but when I use Visual Studio 2003 to open SOME of the projects, I get the error "The current user is not a member of the VS Developers group on the web server computer...more >>

Forms based authentication pointing at a different URL
Posted by svercuski NO[at]SPAM neo.rr.com at 9/5/2003 12:48:33 PM
Everyone, I have a question about forms based authentication. Can the loginURL point at a different server than the current one? Example: A typical forms based authentication line in a web.config <authentication mode = "Forms"> <forms name="ProgAspNetCookie" loginURL="/login.as...more >>



Posting to another page question
Posted by Ivan Demkovitch at 9/4/2003 4:14:37 PM
Hi! I have Portal application which is on http. However I like to do user authentification using SSL I like approach most sites use: They have <form name="loginForm" action="https://sss" method="post"> ... I wonder how can I do "action" parameter dinamic from my ASP.NET ? Nex...more >>

Windows Auth, MUST change password
Posted by Rich at 9/4/2003 12:32:06 PM
If a user's password expires or an admin otherwise set the "user must change password" flag it appears that a user can no longer access the web site. Is this by design? This means I cannot enforce a password expiration policy for web site users. Bummer! Are there any IIS metabase settings that ...more >>

CDOSYS.dll System.Web.Mail
Posted by Steve Y. at 9/3/2003 3:10:05 PM
I am trying to send mail but I am getting an access is denied message. The cdosys.dll is in the C:\Winnt\system32 folder. Should I be granting access to this folder or to the dll to the ASPNET user account? Anyone know the proper security thing to do here? Thanks, Steve...more >>

Registry access permission doesn't obey impersonated user
Posted by Karim at 9/2/2003 9:40:19 PM
I have an asp.net application that impersonates a user. I did a test for reading a registry key and noticed that the app can read the key even though the user does not have access to that key. aspnet user does not have not access either. After denying read access to the key for different users...more >>

Printing from ASP.NET
Posted by IntraRELY at 9/2/2003 6:07:37 PM
Hello All, I am developing a Web Application in VB.NET. We are printing checks from a IE 6.0. Here are our requirments: 1. Checks will be printed on pre-printed stock, so we must format the document to lineup correcly. 2. We need to keep track of which checks printed or didnt print. So we n...more >>

.NET and Office XP but Access Denied
Posted by Philip Lee at 9/1/2003 7:38:11 PM
Dear all, Platform: Windows 2000 server ASP.NET (using VB.NET 2003) Office XP When I reference to Word 10.0 Object Library (C:\Program Files\Microsoft Office\Office 10\MSWORD.OLB), then I just wirte: Dim WordApp as New Word.Application And I got error "System.UnauthorizedAcce...more >>

Replacement for NetUserGetLocalGroups with LG_INCLUDE_INDIRECT set
Posted by Reine Olofsson at 9/1/2003 8:49:59 AM
Hi all I'm trying to implement access check in my web application based on the current user. I've tried using the IsInRole method but have discoverad that it lacks one important feature. It doens't return TRUE if the user belongs to a domin group added to the local group i'm checking.. Samp...more >>


DevelopmentNow Blog