Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008


all groups > asp.net security > april 2004 > threads for april 15 - 21, 2004

Filter by week: 1 2 3 4 5

WebServices and getting FileNotFoundException
Posted by Tim Mavers at 4/21/2004 4:15:55 PM
From googling my problem before posting, I learned that this seems to be a very common problem with Web Services and dotnet. I read through countless articles and suggestions but still could only find one way to fix my problem, which IMHO, is not acceptable. First let me explain what's happen...more >>

help with connection
Posted by chris at 4/21/2004 3:56:02 PM
hi i created a user in sql server under login then i went to the database and under users i added the user and them gave the user permissions to select from the tables and execute the stored procedures but when i try to pass the user in my connection string i ge Access to the remote server is ...more >>

Forms authentication / cookies
Posted by Nils Magnus Englund at 4/21/2004 11:19:16 AM
Hi! I'm just curious about the use of cookies in forms authentication. The username and roles are stored in the encrypted cookie, but if a user manages to crack this cookie - will he be able to modify his own username and roles? Why doesn't ASP.NET simply use an ordinary session, with nothing ...more >>

Timing (forms) authenticated sessions out.
Posted by Paul at 4/21/2004 1:28:50 AM
Hi, I'm experimenting with forms authentication which I've got working (it's based on some technet stuff.) One thing however, is confusing me. A cookie is created based on the authentication ticket and there seem to be a number of expiry/expiration values. There's one in web.config in ...more >>

Disallowing HTML Tags (JScripts) from being entered
Posted by Henry at 4/21/2004 1:08:12 AM
Hi guys, I was wondering if anyone knows if the .NET framework has a library or methods that I can use to diallow users from entering HTML tags and more importantly JavaScript into textboxes and being stored in the database. Thank you in advance. Henry ...more >>

images folder access
Posted by at 4/20/2004 3:52:57 PM
I created a simple aspnet application which contains an imagebutton object. The imagebutton's ImageUrl property is set to : images/myimage.gif (the myimage.gif file is present in the /image subdir of the application folder) The ntfs permissons on the application folder as well as on /image ...more >>

2 sites - 1 authentication method
Posted by Chris at 4/20/2004 2:36:05 PM
We have developed two sites that both use forms authentication and have objects with custom principle interfaces and identity interfaces. I would like to use the same principals for both sites and load behind the scenes I have tried the following scenario 1) Create a web service that automtical...more >>

Password Change Prompt breaks ASP.NET pages
Posted by Rob Edwards at 4/20/2004 8:10:23 AM
Our network policy is that passwords must be changed every 90 days... so 14 days before the password expires the user begins to get prompted to change their password....once this prompt begins, most of the web applications I have written in Visual Studio .NET begin to break. On some of them, ...more >>



Cache Dependent Key/Encryption
Posted by A. Elamiri at 4/19/2004 10:22:34 AM
I would like to store some Role Information in a cookie since I cannot use Session in the AuthenticateRequest method. I thought of encrypting the cookie using Rijndael Algo. for provider. I would generate a 16 character key store it as a Cached object and replace it every 20-30 minutes, if the...more >>

trying to post to aspx anonyomously is blocked?
Posted by Larry at 4/19/2004 9:16:43 AM
I have written a webform page to respond to a users post on the web site. This worked on the test site which had anonymous turned off. I then moved it to the regular web site (copied the files, reinstalled the FP extension) and chaged the setting for anonymous use. but when I try to post the form...more >>

Error loading XML file c:\windows\microsoft.net\framework\v1.0.3705\Config\machine.config
Posted by google NO[at]SPAM easiesttoremember.com at 4/18/2004 7:04:23 PM
I had many ASP.NET web applications that I created before I had to rebuild my machine. After a fresh install of XP Pro, VS.NET 2003, etc, I now get the following when running them. Note that I've already added the following to the web.config file just before the <appsettings> section: ...more >>

Want to Reboot server from ASPX page
Posted by Terry at 4/18/2004 11:56:02 AM
I am developing a asp.net web based service application for our product I am trying to trigger a reboot of the server based on a user request I believe I have all the appropriate code for AdjustingTokens etc an all those calls seem to succeed, however, the final call to ExitWindowsE is failing w...more >>

using HttpContext Class
Posted by Riham via .NET 247 at 4/18/2004 5:09:42 AM
I'm trying to get the PathInfo propert for the current URL request in a class file, but I can't get it to work. Here's what I've tried so far: using System.Web; String PathInfo; PathInfo = HttpContext.Current.Request.PathInfo(); I've also tried "using System.Web.HttpContext;" It gives ...more >>

Role-Based Authorization
Posted by PTB at 4/16/2004 5:01:01 PM
I am using ASP.NET and Access as the database. I would like to use role-based authorization for the login page. Can anyone help me?...more >>

App can't write to EventLog on Windows Server 2003
Posted by Scott Zabolotzky at 4/16/2004 2:19:23 PM
I have an app that writes to a custom event log (which is created at install time with a custom installer DLL). My app writes just fine to this custom log when running on Windows 2000 Server but when I try to run it on Windows 2003 Server I get "Access denied" errors. I'm using impersonation ...more >>

Possible IE 6 Bug - Differences Between Windows Explorer And IE
Posted by mrkwatkins NO[at]SPAM hotmail.com at 4/16/2004 10:43:23 AM
Hi, Apologies for cross posting like this, but I wasn't sure on the best group to post to and I didn't receive much of a response to my original email in microsoft.public.dotnet.framework.aspnet.security. My application currently has a rather large security hole in it which I need help with a...more >>

Advice: Authentication
Posted by PK at 4/16/2004 10:23:47 AM
Hi folks, I hope to get some of your advice on an authentication question that came up during the planning of web app. I'm a bit new to asp.net, so if you can offer some experience, I'd greatly appreciate it! I like form-based authentication because the usernames and passwords can be store...more >>

I've problem with Rijndael PKCS7
Posted by acquargento NO[at]SPAM yahoo.it at 4/16/2004 6:11:39 AM
I've tried with a simple program in vb.net but when i'm going to decript in my messagebox appears this message: PKCS7 padding is invalid and cannot be removed. I've found this few lines of codes in this site: http://www.dotnethell.it/articles/article.aspx?ArticleID=93 I've trasform in vb.ne...more >>

Logon API on Windows 2000 with ASP.NET 1.1
Posted by Rupreet Singh at 4/16/2004 4:46:02 AM
Hi Everyone I’m working Windows 2000 Professional with IIS 5.0 and Framework 1.1. In my current project, I had to use Windows Authentication. The problem is that even if I use right credentials, the LogonUser Function (P/Invoke) always return false. But if I uninstall ASP.NET 1.1 and then try ...more >>

aspnet userrights - where?
Posted by Mike Schwarz at 4/15/2004 11:32:21 PM
hi all i just set up a new win 2003 server with framework 1.1 (on old server 2000, all worked fine) i gave the following rights to the following users: e:\wwwroot aspnet read, execute, listing e:\wwwroot\web aspnet read, execute, listing i didnt touched the rights automatically...more >>

A potentially dangerous querystring ... [ValidateRequest]
Posted by benboris78 NO[at]SPAM yahoo.com at 4/15/2004 9:20:04 PM
All, When i use .net FRamework 1.1, for my web application, i get an error saying "A potentially dangerous querystring was detected from the client...." I have read the posts related to this and it seems this is due to some SECURITY FEATURE in 1.1!!! My code used to work in 1.0!!! now when t...more >>

HMAC-MD5
Posted by RM at 4/15/2004 9:16:04 AM
Hello all Is HMAC-MD5 supported on the .NET 1.1 framework? Some of the information that I have come across seems like it indicates that it is not supported What I am trying to do is to generate a trust_key based on this TRUST_KEY = HMAC("MD5",Secret_key,user_id), I am not sure how to implement t...more >>

Forms Authentication - Cookie not being generated...
Posted by Nugs at 4/15/2004 12:39:43 AM
Hi there everyone, I'm new to this newsgroup so I hope you don't mind me just asking a question, but it has been working me for way to long now and I need some help. I'm fairly new to ASP.NET and VB.NET but have been cramming for weeks now and hit a snag.It has to do with forms authentication in ...more >>


DevelopmentNow Blog