securing data in asp.net

From: Sulafa Malik (SMalik_at_uwic.ac.uk)
Date: 07/09/03

  • Next message: Vinay Panchal: "Re: A potentially dangerous Request.QueryString value was detected"
    Date: Wed, 9 Jul 2003 10:28:02 +0100
    
    

    Hi everyone,

    I am new to asp.net development, and need help on security, I am developing
    a web application that would be accessed from the internet, the web
    application runs on the web server and gets data from the database on
    another server, basically, Iam trying to apply two layers of security for
    the web application, the first layer is using the standard asp.net security
    methods which are either Window Authentication or Integrated window
    Authentication, the second layer of security is to ensure that the data is
    secured and protected from unwanted access. I am aware that you can specify
    database user id and password in the web.config file but this is a text file
    and i dont want to specify user id and password in a text file where it can
    be easily accessed.

    The security methods used by asp.net protects web pages but not data from
    the database, I am trying to apply a second layer of security I would be
    very grateful if you could help and advice

    Many Thanks
    sulafa malik


  • Next message: Vinay Panchal: "Re: A potentially dangerous Request.QueryString value was detected"

    Relevant Pages

    • Re: securityadmin
      ... add the database user to db_datareader, ... fixed server role Security Administrators. ... I can go ahead and add that login as a database user and add them ...
      (microsoft.public.sqlserver.security)
    • Re: setting a password on a button on the switchboard
      ... Could you send me the sample database for the fourth option (4. ... > Security in an Access database can probably be broken down into two big ... > points about being easier than User Level Security, ... > What type of data are you trying to protect? ...
      (microsoft.public.access.forms)
    • Re: access 2003
      ... security in access 2003. ... The data will go on the server and the program database ... than the alternative of creating an mde file. ... MDW file from the written record. ...
      (microsoft.public.access.conversion)
    • Re: access 2003
      ... security in access 2003. ... The data will go on the server and the program database ... than the alternative of creating an mde file. ... MDW file from the written record. ...
      (microsoft.public.access.conversion)
    • Re: Is this possible??
      ... I understand Windows security but since I've not seen A2007 live, ... The backend is on the server in it's own file. ... database, but everyone does not need to have access to tblwage which is ...
      (microsoft.public.access.tablesdbdesign)

  • Quantcast