ASP Security Issue

From: Amit (avmit702_at_hotmail.com)
Date: 09/29/04 

Date: Wed, 29 Sep 2004 01:57:20 -0700

Use windows authentication of ASp and sql server 's SSPI
to get in to the database and then you can even opt for
the impersonation ... also in that case get the username
and password from the registry ;) ... i know i replied in
abstraction .... hope you can understand what i
mean .......
well as far as the user can download the actual file the
answer is no ... but a hacker can offcourse do so...

>-----Original Message-----
>Hi All
>
>I wonder whether it is safe to store the database
username and password in a
>ASP page.
>Is there any chance that a user can down load the actual
file?
>
>Thank you,
>Shmuel
>
>
>.
>

Relevant Pages

  • Re: ASP Login Script not working
    ... Here is a pretty good code solution, however it uses sql server as the backend. ... Don't use a DNS connection...rather use an absolute path to the database. ... I'm sure if I were more knowledgeable with ASP I would do just that, but alas I'm not and your reply helps me little ... created a small Access database called UserDB.mdb, which stores the username ...
    (microsoft.public.inetserver.asp.db)
  • Re: Can I pass ASP Basic Auth Credentials to an APS.NET Forms Authentication site?
    ... assuming I can get the Username and Password. ... > application which uses basic authentication and one asp.net applicaiton ... The user ID and password database is the ... > A (ASP), so we can get username and password in ASP web application first ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: ASP Login Script not working
    ... I'm sure if I were more knowledgeable with ASP I would do just that, but alas I'm not and your reply helps me little ... I am trying to protect a portion of a web site by allowing users to register ... created a small Access database called UserDB.mdb, which stores the username ...
    (microsoft.public.inetserver.asp.db)
  • Re: ASP Login Script not working
    ... And by the way here is a simple overview of how I deal with the login of ... database, sets the username and userlevel session variables accordingly, ... J. Paul Schmidt, Freelance ASP Web Designer ...
    (microsoft.public.inetserver.asp.general)
  • Re: Validate logins with ASP, MS Access and Cookies error
    ... If you plan to do much more ASP, I would advise looking for tutorials ... return another column from the database that stores the users 1st ... 'create connection and recordset objects ... Set cnStr = Server.CreateObject ...
    (microsoft.public.inetserver.asp.db)