all groups > asp.net security > november 2004 > threads for november 1 - 7, 2004
Filter by week: 1 2 3 4 5
Secure Class
Posted by hoz at 11/5/2004 5:38:38 PM
Hi ,
How can I clean user inputs to protect sql injections ?
... more >>
ASP.net app with Windows authentication challenging one user only on second visit
Posted by tketter NO[at]SPAM gotdotdesigns.com at 11/5/2004 12:16:05 PM
Hi All,
I have an intranet application that uses ASP.net Windows
authentication. It has been working flawlessly for the past year.
Recently, one employee has experienced a problem accessing the site.
*When the user first re-starts his computer and connects to the site,
it recognizes him a... more >>
Site Config Question
Posted by Craig at 11/5/2004 11:18:02 AM
Hi
I have a site that runs in an intranet environment, therefore the
authenication method in IIS is 'Integrated Windows authentication' and no
Anonymous access. In my web.config <authentication mode="Windows" />, works
fine.
We want to release the site to the internet whilst maintaining... more >>
Newbee question; form authentication
Posted by Nico den Boer at 11/4/2004 4:42:56 PM
Hello all,
I have a problem with retrieving roles.
In the login form, I do the following things;
- Retrieve roles (string, format like "Administrator|User|Guest")
- Create a FormsAuthenticationTicket with these roles as parameter
- Crypt the thicket, create a cookie with this ticket
- Stor... more >>
IIS Virtual Directory Create Failure in Web Service :(
Posted by Eskimo at 11/4/2004 3:28:07 PM
System.UnauthorizedAccessException: Access is denied.
at System.DirectoryServices.Interop.IAds.SetInfo()
at System.DirectoryServices.DirectoryEntry.CommitChanges()
at CreateVirtualDirectories.Dal.CreateWebVirtualDirectory.Create
....
tried on the local development box and it had... more >>
NTLM Authentication Across Forests
Posted by andrew.miadowicz NO[at]SPAM gmail.com at 11/4/2004 8:34:06 AM
I have a problem that I've spent a considerable amount of time
researching and still haven't quite found the answer.
I have an intranet web server in Domain A if Forest A. This server
contains a website which in turn contains two files TestAccess.html
and TestAccess.aspx. Both files have sec... more >>
How to Strong name a aspx web page?
Posted by geeksgk NO[at]SPAM yahoo.com at 11/3/2004 10:46:44 PM
Hello,
Here are 3 layers of my web application (3 tier architecture)
UI (ASPX using C#)
Business Layer (C# class libraries)
Data Access Layer (C# class libraries)
Any ideas how to strong name a ASPX web page (UI)? Since ASPX assembly
is technically not compiled until JIT, I even wonder i... more >>
Getting user name from win2k from asp ?
Posted by Guest at 11/3/2004 6:19:30 PM
HI
I donot ahve any idea how to proceed. but my requirement is=
somehting like if the user click to the logon button on a=
webpage automatically he gets logged on with his name. how can=
this be achieved? i donot want to authenticate him thru userid=
and password. I just want to take his... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Help - How to create new roles and assign users to each role
Posted by Jena at 11/3/2004 2:00:46 PM
Hi everybody,
I've seen many examples of web.config file where I can give permission to
users or roles, for example:
<authorization>
<deny users="?" />
<allow users="*" />
<allow roles="admin"/>
</authorization>
I want to use "form autentication" but I don't know how to creat... more >>
Asp.Net Forms authentication using Active Directory
Posted by Egbert at 11/3/2004 3:49:03 AM
Hi.
I am using forms authentication in ASP.Net against Active Directory.
I have followed the example provided by Microsoft. Here is my problem.
Standard practise for AD Administrators is to flag the account to change the
password when he logs in. Also that passwords expire after 30 days.
... more >>
restricting access to log-file
Posted by Nikolaj at 11/3/2004 1:05:03 AM
A short and hopefully simple question:
I'm using log4net to log to a text file.
The text file is located in the root of my webapplikation. How do I restrict
access to this file?
Thanks.
Nikolaj... more >>
asp.net impersonation limits?
Posted by Martin at 11/2/2004 9:46:36 AM
Hi,
Are there limits to asp.net impersonation?
I'm using CrystalReports.Net to print from an asp.net application.
Although my diagnostic
Label3.Text= System.Security.Principal.WindowsIdentity.GetCurrent().Name;
indicates I have configured impersonation correctly,
<authentication mode="... more >>
Secure communication over https !
Posted by Linda at 11/1/2004 6:25:45 PM
I am developing an application over the web(intranet app). Now my problem
has to do with secure communication
between browser and webserver. I want to enable secure communication using
https. Are there any alternatives other than buying certificate for virtual
directory ?
Thanks for all yo... more >>
ASP.net & Win32 API (LogonUser) question...
Posted by bobo456 NO[at]SPAM hotmail.com at 11/1/2004 5:06:19 PM
I am running IIS6 on a Win2k3 server.
I have an ASP.Net app (C#) that a user logs into and then I use
LogonUser to validate them and log them onto the server. I have
Windows Authentication ONLY checked on the site in IIS.
My problem is that eventhough I am using LogonUser to log on to the
... more >>
Connect to MS Access DB on different server
Posted by Roby2222 at 11/1/2004 3:20:02 PM
I am trying to connect to a Microsoft Access database, located on a different
server. I am using ASP.NET and the code I am using works when run from my
local IIS, but it does not work when I deploy the project to the web server.
The database is not on the web server or my local machine. I a... more >>
Web.config timeout
Posted by LisaConsult at 11/1/2004 1:03:07 PM
The user has indicated that the application seems to be kicking her out, even
though she is sure that she is submitting a form faster than every 30
minutes. I thought that I had set the Web.Config on the ASP.NET application
to time out after 30 minutes of inactivity, but maybe I don't have som... more >>
|