Search - Articles - Dev Forums - Favorites - Member Login  
DevASP.NET for ASP.NET, VB.NET, XML and C# (C-Sharp) Developers Thursday, July 29, 2010

Dev Articles
Search Directory
ASP.NET
VB.Net
C-Sharp
SQL Server
 

Build the right apps the right way with powerful development tools.
Visual Studio 2010. Learn more...

Home > Search > Articles & Samples > C-Sharp > Web Services > Security
Search:
What's New - What's Hot


Web Service Authentication        
Total Hits: 349  |  Today: 0 Author: codeproject       Rating:  
Read Reviews | Write Review |   Your Rating: 

This is a simple mechanism to authenticate users to a Web Service, using a Time Token and MD5 Hashing to encrypt password....

Switching Between HTTP and HTTPS Like A Bigshot Hotshot    Version: 0.00       Price: $0.00   
Total Hits: 30  |  Today: 0 Author: Pero Matic       Rating:  
Read Reviews | Write Review |   Your Rating: 

When we as developers encounter the same coding scenario time and time again, we naturally tend to encapsulate that coding logic and reuse it in an effort to save time and minimize maintenance....

Forms Authentication and Role based Authorization: A Quicker, Simpler, and Correct Approach    Version: 0.00       Price: $0.00   
Total Hits: 47  |  Today: 0 Author: M.M.Al-Farooque Shubho       Rating:  
Read Reviews | Write Review |   Your Rating: 

Sad, but true, “Forms authentication in ASP.NET does not directly support role based authorization”. If you have ended up implementing Forms authentication along with configuring authorization rules for “users” and “roles” in the web.config, you are going to see the access rules working fine for “users”, but, not working at all for “roles”. You might have thought, there must be some way to specify user roles in the famous FormsAuthentication.RedirectFromLoginPage(), or, any other method. But, th...

Generate Your Own Proxy for ADO.NET Data Services on Client Side        
Total Hits: 88  |  Today: 0 Author: Valentin Billotte       Rating:  
Read Reviews | Write Review |   Your Rating: 

First of all, please accept my apologies for my poor English. This article talks about creating entities proxy classes for your own need. The proxy class generated from a ADO.NET Data Service is simple and only helps for standard CRUD scenarios. But as soon as you want to make something complex or special, you will find some restrictions....

Rationalizing access checks with HMAC:ed URLs        
Total Hits: 79  |  Today: 0 Author: Hugo Hallman       Rating:  
Read Reviews | Write Review |   Your Rating: 

This is a method (no complete implementation) to offload the database server hosting protected objects delivered through ASP.NET (Web services will work too) by simply signing a URL to the page actually delivering the material. Example: A web site where the access checks are very complicated. When browsing, the members only see objects that they have access to, therefore we know when making img-HREFs that the member actually have access, which is why we may sign the HREF so we don't need to chec...

Prevent attacks on your website        
Total Hits: 87  |  Today: 0 Author: Prakash Kalakoti       Rating:  
Read Reviews | Write Review |   Your Rating: 

There are many ways of attacking a website like SQL injection, by injecting script, Session hacking etc. And you'll get lot of articles at CodeProject about this. In this article, I am trying to explain the use of CAPTCHA (I am not going to explain what CAPTCHA is ... search it on CodeProject or Google if you have not implemented it.) to avoid registration of dummy users to your database by a computer program. Using a simple example, I'll explain how any program can register thousands of dummy u...

Additional functionality for ASP.NET 2.0's CookieParameter        
Total Hits: 47  |  Today: 0 Author: Eric Newton       Rating:  
Read Reviews | Write Review |   Your Rating: 

The ASP.NET 2.0's CookieParameter is a good start to providing HTTP data directly to the DataSource controls, including SqlDataSource and the various other flavors. However, in my opinion, there were two glaring omissions from the code, including the ability to extract a keyed value in a multi-valued cookie. (See HttpCookie.Values collection, providing a name-value pair grouping.) Additionally, my last article introduced HttpCookieEncryption, a way to prevent tampering of cookie data. Note that ...

Secure File Download Using Basic Authentication        
Total Hits: 107  |  Today: 0 Author: Mohd Faraz (Lucky)       Rating:  
Read Reviews | Write Review |   Your Rating: 

Security has always been a top issue for all kinds of applications, especially Web applications. Web apps are accessible to almost the entire universe, and are open to attack. Most of the web applications provide the file download feature, the real time challenge is not in providing such a feature, but in securing such operations. Recently, I dealt with an application which demands for secure file upload and download, during which I did wide research, so I thought of sharing it with the world to...

How to : Using PHP Fusion 7 CAPTCHA        
Total Hits: 72  |  Today: 0 Author: Mohammad Dayyan       Rating:  
Read Reviews | Write Review |   Your Rating: 

PHP Fusion 7 has a greate CAPTCHA class under GPL license, so we can use it in our GPL projects.
This article shows you how we can use it....

Authorization Security Model in Web Applications Using .NET Attributes        
Total Hits: 127  |  Today: 0 Author: Samer Abu Rabie       Rating:  
Read Reviews | Write Review |   Your Rating: 

Security in web applications is something necessary nowadays; especially because everyday attacks are in increase. But in this article, we are not going to discuss the authentication of a web application, we are going to discuss a simple and powerful way for authorization instead....

Using SSL with System.Web.Management.MailWebEventProvider        
Total Hits: 66  |  Today: 0 Author: Svante Seleborg       Rating:  
Read Reviews | Write Review |   Your Rating: 

The web is full of desperate pleas for help by prematurely bald developers who have discovered the fatal flaw in the shiny new ASP.NET 2.0 System.Net.Mail.SmtpClient class. This is touted as overcoming all the problems of the old variant, that could not even be configured for credentials without resorting to some heavy-duty tricks. As has been discovered by countless people, while the new SmtpClient() class in ASP.NET 2.0 is neat, easy to use, and configurable via Web.Config, they forgot one thi...


DevASP.Net - Disclaimer - Privacy
© 2002-2010 DevASP.net