| Thread | Last Post | Replies |
|
| Changing Windows password by .NET code? | 04 Jun 2004 16:16 GMT | 5 |
I'm using Windows authentication in one of my ASP.NET projects because this way it's easy for me to define which users has access to which page (using the NTFS file system security settings). Now my users want to change their passwords via a web interface. Does
|
| Funky FormsAuthentication Cookie Behavior. | 03 Jun 2004 18:51 GMT | 1 |
We are having a problem where the HttpCookie.Value for FormsAuthentication is different between when it is created in Login.aspx.cs and when it is retrieved in Global.asax.cs. This problem happens whether the cookie is create with the encrypted authentication ticket or something ...
|
| file traversal | 03 Jun 2004 06:05 GMT | 2 |
In classic asp you could help mitigate file traversal problems by uncheking the allow parent paths option in IIS home directory/configuration/options which disallowed the use of the ../ syntax. However this does not seem to work in asp.net, any way to enforce this? Also does ...
|
| FormsAuthentication Class Question | 02 Jun 2004 13:03 GMT | 5 |
First, here's a quick description of what I have so far. I have a website that I am building that contains both asp and asp.net pages. I have configured the site using a custom HTTPHandler, web.config, and a custom HTTPModule so that all requests (both asp and asp.net) go through ...
|
| SSL comunications | 02 Jun 2004 13:02 GMT | 3 |
I would like to run my ASP.NET application in SSL mode. I load htm page with three frames and the IE shows this Security Information "This page contains both secure and nonsecure items. Do you want to display the nonsecure items ?" when I
|
| Win2k, IIS5, IIS Lockdown Tool, URL Scan | 01 Jun 2004 20:24 GMT | 2 |
I run Win2k Workstation (Spk4) with IIS and the .NET Framework version 1.1. I develop on this platform with ASP.NET using Visual Studio .NET 2003. I am planning to install the latest version of the IIS Lockdown tool (with URL scan).
|
| easy to understand web security info | 01 Jun 2004 13:36 GMT | 3 |
Can anyone tell me where I might find easy-to-understand information on web security. I have read lots of stuff by Microsoft (Threats and Countermeasures, etc), but all I've seen presupposes I know alot already, which I don't. Any help would be appreciated, thanks.
|
| Error loading XML file c:\windows\microsoft.net\framework\v1.0.3705\Config\machine.config | 01 Jun 2004 03:49 GMT | 3 |
I had many ASP.NET web applications that I created before I had to rebuild my machine. After a fresh install of XP Pro, VS.NET 2003, etc, I now get the following when running them. Note that I've already added the following to the web.config file just before the
|
| Forms authentication - login fails | 01 Jun 2004 03:25 GMT | 1 |
I have an ASP application using Forms authentication. On my development web server everything works and login is successful, but when I move my application to the production server the login page is loaded but all login attempts fail.
|