Articles - Security

0

Like

WinRT has a built-in authentication client that can be used to authenticate users through Facebook, Twitter, Flickr, Google, etc. This post covers the process of authenticating users with Google. ...Read more
Posted by: Avalaxy
On 26 Sep 2012 | Views: 494 | Categories: Security, C#, Microsoft.net
0

Like

For the past couple months, I was helping patching up several legacy web applications from Cross-Site Scripting and SQL Injection vulnerabilities. I found lots of articles regarding this topic through Google but reading about it and experimenting with it are virtually two different things. So I decided to put together a small sample code to examine the vulnerabilities that I found. You are welcome to download this sample code. ...Read more
Posted by: Michael
On 16 Jun 2012 | Views: 414 | Categories: Security
0

Like

I found several fine jQuery plug-in to display the user's password strength but I prefer to have something somewhat similar to the ASP.NET AJAX PasswordStrength control. After spending some time doing research, I was able to find all the necessary resources and assemble the jQuery plug-in to achieve the goal. Listed below are the features of the plug-in and I have put together a demo, everyone is welcome to download it. ...Read more
Posted by: Michael
On 17 Apr 2012 | Views: 643 | Categories: Security, jQuery, ASP.NET
0

Like

How many sites have you seen that requires you to login? I guess the answer to this question is "almost all of them". Well, the idea behind this article is to understand how ASP.NET lets us create sites with an authentication and authorization mechanism in place and how we can use ASP.NET server controls to quickly and efficiently implement this. ...Read more
Posted by: Teena
On 27 Mar 2012 | Views: 606 | Categories: Security, ASP.NET
0

Like

Applying security and redirection to a view when a user cannot access a controller or a controller action in MVC. I chose the following solution because using integrated security with ASP.NET user / privileges is the easiest way to secure an application. Moreover, it fits very well with the third party tools as Telerik. For example, the Telerik menu automatically adjusts without a line of code by the simple fact that a user does not have the role to access a controller or action. ...Read more
Posted by: Teena
On 27 Mar 2012 | Views: 478 | Categories: Security, MVC
0

Like

On this video we explored two important items: the Text property and the Validators collection. For the Text property we found out that we can add html to the property and have that html render with the error. We changed the text to bold on the first attempt, and then displayed an error icon by adding the <img> tag to the Text property. Regarding the Validators collection, we added code to the PreRender event that loops over all the validators on the page to get their ControlToValidate. Once we get that control, we check whether the data is valid. If it was not valid we changed the backg ...Read more
Posted by: Pedro Cunha
On 12 Jan 2012 | Views: 716 | Categories: Visual Studio 2010, Visual Studio, Security, ASP.NET
0

Like

In this video, we start our discussion on validation controls. We explain the need of these controls and their importance for data validation. Any control with the ValidationProperty attribute can have its data validated using the validation controls. These controls validate the data on the client side and the server side. We can turn off the client validation by setting the EnableClientScript property on the validation control to false. The example we create in this case uses the RequiredFieldValidator to make sure the user enters data for the name and the quantity. Then we add the CompareVal ...Read more
Posted by: Pedro Cunha
On 12 Jan 2012 | Views: 602 | Categories: Visual Studio 2010, Visual Studio, Security, ASP.NET
0

Like

Authorization is the process of allowing or denying particular resources to user or role in ASP.NET.

We will discuss this topic with an example. First, create a new website and check everything with examples.

Once we create a website, open the web.config file and check how it would be if you observe in configurationsection under system.web section, we are able to see only authentication mode. There is no authorization mode that exists which would be just like this: ...Read more
Posted by: Teena
On 26 Dec 2011 | Views: 418 | Categories: Security, ASP.NET
1

Like

As you know, MD5 is a very common hash algorithm which is usually used to encrypt the user’s password stored in database or verify data to ensure it’s not be changed in a complex transaction with multiple steps like online payment while transmit among parties.

In PHP, there is a built in function md5(string $str) which easily calculates the md5 hash of a string. However, with .Net Framework Web or Windows application, you have to write something to encrypt a string with MD5 hash algorithm.



Read more: http://4rapiddev.com/csharp/asp-net-c-create-md5-hash/#ixzz1cpJAC9Qi ...Read more
Posted by: Michael
On 05 Nov 2011 | Views: 1795 | Categories: Security, ASP.NET
0

Like

.NET 2.0 File.Copy() (build using VS2005) function does not throw any exception if you want to copy a file in Windows 7 protected folder like "C:\", "C:\Program Files", etc. and it does not perform the copy operation too. Actually it performs the desired copy operation in virtual file store, i.e., %localappdata%\VirtualStore. This works as expected if you run your application as administrator. Below is a tip to check if the folder is protected or not, i.e., you can use File.Copy() method as a target folder in File.Copy() . ...Read more
Posted by: Teena
On 31 Oct 2011 | Views: 495 | Categories: Security
Page 1 of 2
Other lins

.Net Techies
Other lins