Tagged Questions
0
votes
0answers
28 views
Start/Stop Window Service from ASP.NET page
Is there a way to start / stop a windows service of a server in a different network
(not \\<server name>) from an asp.net page?
I tried using ServiceController but it's only work if it's in ...
0
votes
1answer
20 views
WCF Web Service BLL for single ASP.NET app simplest approach
What is the simplest effective approach for securing a WCF Web Service built to be a combined DAL/BLL consumed ONLY by a single small ASP.NET web app?
Background:
I am relatively a web development ...
0
votes
1answer
55 views
Security vunerability - What is this URL trying to do?
I've just received the following error from a few sites I run:
Error Caught in Application_Error event
Error in:
...
0
votes
0answers
12 views
Item Base Authorization in .NET
I am trying to find an authorization and authentication solution for my ASP.NET projects that can be used with object based needs. Like I have different kinds of elements and various actions on them. ...
2
votes
3answers
222 views
What type of attacks are possible on web applications?
I am going to start new web application (ASP .Net), but i am wondering how many type of attacks are possible on web applications which we need to take care of while building a web application.
As i ...
0
votes
0answers
10 views
Adding people from Intrantet to ASP.NET Roles
I am creating an Intranet website for an organization.
I am using ASP.NET role provider to manage user roles.
I have different ASP.NET Roles within the website.
I am adding people in the Network just ...
0
votes
0answers
36 views
Managing authentication for my Asp.net MVC web application
I am trying to accomplish the following:-
To build an Asp.net MVC 4 web application from scratch.
I want to use the current users and groups that are found on our company production active directory ...
1
vote
1answer
51 views
Asp.net custom error redirects not working
I'm trying to ensure that no non-standard error messages are sent to a user for security reasons. Generally I have standard error messages setup and it works perfectly fine. I use these tags in the ...
3
votes
1answer
57 views
What is the best way to log someone out of a web application?
I have an application that requires a username and password. When a user clicks on the log out button, it runs:
private void LogOut()
{
Session["SessionName"] = null;
...
1
vote
2answers
48 views
FormsAuthenticationTicket cannot be invalidated server side. Causing cookie reply attacks
I have an ASP.NET web application using forms membership authentication. We have recently been penetration tested and an issue that was flagged was the ability to steal a users account. If the ...
0
votes
0answers
42 views
Multiple Forms Authentication Cookies? Employee/Customer
Is there a way to have two forms authentication cookies for a web application in .Net?
I'm thinking of a scenario where a company employee would place an order for a customer. Instead of creating a ...
0
votes
0answers
103 views
HttpContext.Current.Request.ServerVariables[“REMOTE_ADDR”] Security
All,I have a stand-alone ePayment service which is implemented with an asp.net web service for my order management system , and I am using the CyberSource as the payment service, The responsiblity of ...
0
votes
0answers
40 views
Protecting querystring variable for use in SQL query parameter
I'm writing a simple website that will act as a discussion board/forums in vb.net.
When a user clicks on a forum, the forum id is put in a querystring variable that the "Topic" page reads and then ...
0
votes
0answers
29 views
Encrypted web.config section: unable to revoke access to an encryption key
I've encrypted connection Strings section in web.config as described in the article below:
Walkthrough: Encrypting Configuration Information Using Protected Configuration
...
3
votes
2answers
167 views
How to send sensitive data to an Asp.net Web API server
I have a Asp.net Web API project.
The project validates all the requests by receiving a parameter named sessionToken
http://myapi.com/api/applications/getApplications?sessionToken=xxx
However, i ...
