all groups > asp.net security > august 2005 > threads for august 8 - 14, 2005
Filter by week: 1 2 3 4 5
How can roles be determined for a resource?
Posted by Gery D. Dorazio at 8/13/2005 7:37:51 PM
I restricting access to a web folder in the web.config file with entries
like this:
<location path="Account" allowOverride="false">
<system.web>
<authorization>
<allow roles="User,Admin" />
<deny users="*" />
</authorization>
</system.web>
... more >>
Server Application Error
Posted by bruce at 8/12/2005 12:46:02 AM
ASP.NET app running for about a year with no problem and suddenly this week
it's giving error message. The same as the one decribed by another user.
Even stranger is that we only have this problem from some web clients
(desktop browser, IE) , some other people do not have problems at all from... more >>
Integrated security fails on new server
Posted by kaborka at 8/11/2005 6:56:02 PM
We are migrating from our old intranet server to a new one. My ASP.Net C#
app uses integrated security to connect to a SQL 2000 server located on a
different machine in the same domain. It is working fine on the old server.
The following are in web.config:
<authentication mode="Windo... more >>
Login Controls with Asp / Asp.net 1.1
Posted by Baron at 8/11/2005 12:00:00 AM
I found that .Net 2.0 has Login Controls / support for access control
I would like to ask how could these components work with existing 1.1
applications or even asp applications?
thanks
... more >>
Impersonation on a domain controller
Posted by martin at 8/11/2005 12:00:00 AM
Hi
I have an intranet page that starts / stops windows services on the local
machine.
This works fine on my dev machine and indeed all machine that I have tried
it in that are NOT domain controllers.
unfortunatly the machine I want this to run on is a dc.
I have turned on windows authent... more >>
Setting Principle for HttpWorkerRequest
Posted by Michael Palmer at 8/10/2005 8:01:02 AM
I am implementing my own web server that will authenticate users using out-of-band
methods (like IIS does in the case of Windows authentication). I am implementing
an HttpWorkerRequest and asking HttpRuntime to process the request. I expect
existing ASP.NET applications to work without changes... more >>
Losing Session Data when switching from http -> https and vice versa
Posted by MattC at 8/10/2005 12:00:00 AM
How can the session be persisted when switching?
MattC
... more >>
problem while executing exe from web app
Posted by Yoshitha at 8/10/2005 12:00:00 AM
HI
I am calling exe (vb.net application) from web application for this i wrote
code like this
system.diagnosis.process.start("e:\...")
i wrote above code in button click event.
inorder to work this application i made few changes
1. in machine.cinfig file, in <Process Model> entitit... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Limiting access to pages
Posted by Lyners at 8/9/2005 2:00:12 PM
I have an application that runs over our intranet. I have some pages I only
want "Administrative" people to see. I thought one way of doing this was to
creqate a sub directory in the application dorectory and add a web.config
file that would limit access to only those that we want as admin. Bu... more >>
Windows authentication from ASP.NET to SQL Server
Posted by Nils Magnus Englund at 8/9/2005 12:00:00 AM
Hello,
I am having trouble using Integrated Windows Authentication between our
intranet server and our database server, both of which are on our local
domain.
Windows authentication works for our intranet server - my domain user
"DOM\nme" is correctly authenticated and authorized to view... more >>
Another Sql Injection
Posted by JR at 8/8/2005 8:54:56 PM
Hi guyz,
I have a form which is to record the user id, password and email.
I filter the email using requiredfield validator and regularexpression
validator.
Everything works great till I found somebody can put this data in the
database, like this :
having 1=1--
for the email field.
Ca... more >>
SQL Injection
Posted by Arne at 8/8/2005 5:23:01 AM
Will the code below protect me from SQL injection in an ASP.Net page?
Dim cmd As SqlCommand
Dim prm As SqlParameter
Dim salary As String
cmd.CommandText = "select salary from employee where name=@name"
prm = New SqlParameter("@name", name.text)
cmd.Parameters.Add(prm)
salary = cmd.ExecuteNonQ... more >>
|