Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > asp.net security > august 2005 > threads for august 8 - 14, 2005

Filter by week: 1 2 3 4 5

How can roles be determined for a resource?
Posted by Gery D. Dorazio at 8/13/2005 7:37:51 PM
I restricting access to a web folder in the web.config file with entries like this: <location path="Account" allowOverride="false"> <system.web> <authorization> <allow roles="User,Admin" /> <deny users="*" /> </authorization> </system.web> ...more >>


Server Application Error
Posted by bruce at 8/12/2005 12:46:02 AM
ASP.NET app running for about a year with no problem and suddenly this week it's giving error message. The same as the one decribed by another user. Even stranger is that we only have this problem from some web clients (desktop browser, IE) , some other people do not have problems at all from...more >>

Integrated security fails on new server
Posted by kaborka at 8/11/2005 6:56:02 PM
We are migrating from our old intranet server to a new one. My ASP.Net C# app uses integrated security to connect to a SQL 2000 server located on a different machine in the same domain. It is working fine on the old server. The following are in web.config: <authentication mode="Windo...more >>

Login Controls with Asp / Asp.net 1.1
Posted by Baron at 8/11/2005 12:00:00 AM
I found that .Net 2.0 has Login Controls / support for access control I would like to ask how could these components work with existing 1.1 applications or even asp applications? thanks ...more >>

Impersonation on a domain controller
Posted by martin at 8/11/2005 12:00:00 AM
Hi I have an intranet page that starts / stops windows services on the local machine. This works fine on my dev machine and indeed all machine that I have tried it in that are NOT domain controllers. unfortunatly the machine I want this to run on is a dc. I have turned on windows authent...more >>

Setting Principle for HttpWorkerRequest
Posted by Michael Palmer at 8/10/2005 8:01:02 AM
I am implementing my own web server that will authenticate users using out-of-band methods (like IIS does in the case of Windows authentication). I am implementing an HttpWorkerRequest and asking HttpRuntime to process the request. I expect existing ASP.NET applications to work without changes...more >>

Losing Session Data when switching from http -> https and vice versa
Posted by MattC at 8/10/2005 12:00:00 AM
How can the session be persisted when switching? MattC ...more >>

problem while executing exe from web app
Posted by Yoshitha at 8/10/2005 12:00:00 AM
HI I am calling exe (vb.net application) from web application for this i wrote code like this system.diagnosis.process.start("e:\...") i wrote above code in button click event. inorder to work this application i made few changes 1. in machine.cinfig file, in <Process Model> entitit...more >>



Limiting access to pages
Posted by Lyners at 8/9/2005 2:00:12 PM
I have an application that runs over our intranet. I have some pages I only want "Administrative" people to see. I thought one way of doing this was to creqate a sub directory in the application dorectory and add a web.config file that would limit access to only those that we want as admin. Bu...more >>

Windows authentication from ASP.NET to SQL Server
Posted by Nils Magnus Englund at 8/9/2005 12:00:00 AM
Hello, I am having trouble using Integrated Windows Authentication between our intranet server and our database server, both of which are on our local domain. Windows authentication works for our intranet server - my domain user "DOM\nme" is correctly authenticated and authorized to view...more >>

Another Sql Injection
Posted by JR at 8/8/2005 8:54:56 PM
Hi guyz, I have a form which is to record the user id, password and email. I filter the email using requiredfield validator and regularexpression validator. Everything works great till I found somebody can put this data in the database, like this : having 1=1-- for the email field. Ca...more >>

SQL Injection
Posted by Arne at 8/8/2005 5:23:01 AM
Will the code below protect me from SQL injection in an ASP.Net page? Dim cmd As SqlCommand Dim prm As SqlParameter Dim salary As String cmd.CommandText = "select salary from employee where name=@name" prm = New SqlParameter("@name", name.text) cmd.Parameters.Add(prm) salary = cmd.ExecuteNonQ...more >>


DevelopmentNow Blog