Groups | Blog | Home


Archived Months
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > asp.net security > february 2006 > threads for february 8 - 14, 2006

Filter by week: 1 2 3 4

How to Log Out
Posted by EagleRed NO[at]SPAM HighFlyingBirds.com at 2/13/2006 6:15:29 PM
I have an ASP.NET 2.0 application using Forms authentication with a SQL 2005 Membership provider. I can get users logged in OK, but it is not clear how to log them out without timing out the session? How can this be done? I'd like to provide a logout button and log the user out in the handl...more >>


How to manage users on deployed web server (.Net 2.0)
Posted by Donald Adams at 2/13/2006 12:00:00 AM
Hi, The web utility in VS.Net 2005 for managing security: Users, Roles and Access is great, but once I deploy to the web server, how can I access the web utility? I couldn't find anything in the docs that worked. Thanks in advance, Donald ...more >>

ASP.NET webapp intranet security
Posted by Raj at 2/12/2006 3:37:54 PM
Hi there!! I am relatively new at ASP.NET. I have built a web app using ASP.NET / VB.NET with data being stored in SQL Server 2000 (SQL Authentication). This app is going to be used inhouse. The specific URL will be given to selective people. Now I am not sure how I can prevent unauthorized e...more >>

Membership - how to change from clear-text to encrypted?
Posted by Paul at 2/12/2006 2:55:31 PM
Hello, We have an existing site with members and we're using the default membership system for ASP.NET 2.0. The original developer set up membership with clear-text passwords and we'd like to change to enrypted passwords. Does anyone know how to change the member's passwords behind the ...more >>

Cannot open log Application on machine
Posted by Greg at 2/10/2006 4:35:51 PM
Hi all, We want to be able to log to the event log when an error occurs in our web parts. Currently we cannot do that under SharePoint because it throws an exception. Below is the code where is fails: EventLog log = new EventLog("Application", ".", "MyThing"); log.EnableRaisingE...more >>

Use Form Authentication to control visibility of tag for logged-in users
Posted by liuhang NO[at]SPAM gmail.com at 2/10/2006 8:06:04 AM
Hi, guys, I'm trying to migrate one of my application written in .NET 1.1 to the new 2.0, and keep the Form type Authentication for the login part, which should only show the LogOff tag on the banner to logged-in users. Currently I'm having problem to show the LogOff tab after valid user logi...more >>

How to call Web Service Securely
Posted by va at 2/9/2006 11:36:12 PM
I love Web Apps in ASP.NET 2.0 because you can easily deny users access to pages by role or user. But for desktop client to webservice methods, I am not sure what to do.... I am looking for the simplest and safest method or pattern to have my Desktop client be able to call a web servic...more >>

Problem running ASP.NET 2.0 on Win2K domain controller
Posted by Rob Roberts at 2/9/2006 7:28:36 PM
I have developed an ASP.NET 2.0 application using localhost on my Windows XP workstation, and it all works fine there. I tried to copy it to my test web server, which is a domain controller running Windows 2000 Server SP4. I can't get it to work on the server. For testing, I created a simpl...more >>



Forms Authentication across servers
Posted by Bill H at 2/9/2006 5:16:53 PM
Hello, I am trying to achieve Forms Authentication using Asp.Net 2.0 across multiple servers. I've gotten it to work across applications on same machine. I generated keys for the machine element and placed it web.config on all machines. <machineKey validationKey="key goes her...more >>

importing "stringed" MD5 passwords for membership
Posted by Mike Tallman at 2/9/2006 2:18:28 PM
In my current database I have passwords that were hashed and then stored using the following method: public static string Encrypt(string cleanString) { Byte[] clearBytes = new UnicodeEncoding().GetBytes(cleanString); Byte[] hashedBytes = ((HashAlgorithm) CryptoConfig.CreateFromNam...more >>

Retrieving machine.config/web.config values ...
Posted by Sunil.Dua at 2/8/2006 3:21:27 AM
Hi All, My machine.config contains the following setting. <httpRuntime executionTimeout="90" maxRequestLength="4096" useFullyQualifiedRedirectUrl="false" minFreeThreads="8" minLocalRequestFreeThreads="4" appRequestQueueLimit="100" /> I want to extract the value for max request length...more >>

Page security
Posted by Jon at 2/8/2006 2:29:42 AM
Hello all. Just after some help with handling page security. I'm writing an app that has a number of companies. Each company has a number of employees, standard stuff. If I have a user who is a member of one company, they can request to see all the that companie employees, however, if t...more >>

SSL client auth: access the entire certificate chain
Posted by Innokentiy Ivanov at 2/8/2006 12:00:00 AM
Hello, Can anybody help me in solving the following problem. My web application needs to access all the certificates (the entire certificate chain) provided by the client side. As far as I can see, HttpRequest.ClientCertificate gives access only to the end-entity certificate. Is there a possib...more >>


DevelopmentNow Blog