Are Frontpage passwords secure?

From: COHENMARVIN (cohenmarvin_at_hotmail.com)
Date: 11/17/05


Date: 17 Nov 2005 12:50:17 -0800

I have some asp.net pages on my website. These access a sql server
database which has credit cards. So I need to protect my asp pages
from hackers. My question is: can the frontpage userid and password
that I used to access the website be intercepted? I have an ssl
certificate on the server, so would it help if in frontpage I always
opened the site with an "https" prefix instead of "http"?

Another question I have is similar but does not involve frontpage. If
I get my ISP to protect my asp folder with a Windows 2000 NTFS password
so that users who want to view the ASP pages have to type a password to
view the pages, can that password be intercepted? Suppose the page
is accessed by https://mysite.com/mypage.htm? Would the SSL protect
it? Suppose the user forgot to include the 'https' prefix?

Thanks in advance,
Marvin



Relevant Pages

  • Webiste conneciton to SQL Server hangs
    ... I have an IIS 6.0 website that accesses a SQL Server 2000 database through an ... I didn't write the website I just manage the IIS and SQL Server. ... When the link to the asp page is clicked it should access the database and ...
    (microsoft.public.sqlserver.connect)
  • Converting ASP site to .NET
    ... existing personal website to .NET from classic ASP. ... I'm assuming I want my aspx files in the root of my site in the same ... Previously I had my server set up so that the root folder of my web was ...
    (microsoft.public.dotnet.general)
  • Re: Forcing ASP.NET 1.1 isnt working
    ... Since the home page was asp (unmanaged code), ... the website require access to the 2.0 framework directory. ... (and without reconfiguring any existing apps to run under ASP.NET 2.0). ...
    (microsoft.public.dotnet.framework.aspnet)
  • Connection.Execute and SQL stored procedures
    ... ..asp, the connection object and MS SQL Server as the DB can help me out. ... Five of the six calls execute as expected. ... This particular stored procedure does quite a bit of work within the DB, ...
    (microsoft.public.sqlserver.odbc)
  • Re: Heres a rather broad question...
    ... I'm familiar enough with using ADO with VBScript/Javascript in ASP pages, ... authentication or permission issues with SQL Server 2000. ... IIS user doesn't have the proper permissions to access the database, ...
    (microsoft.public.data.ado)