|
In classic ASP there is no
Single quote could be very
Security issues became more
The random password function
any encrypt function. But
harmful and broke down your
damageful if you're not
will return a password with
you can use this useful
all application. Any one can
protecting your web forms.
letters and numbers. You
source code to encrypt any
easily inject any damageful
Following example is a good
pass the number of letters
string data using MD5. MD5
code into your sql script.
idea to protect our ASP
and numbers you want and it
encryption is a one-way
To combat the threat of SQL
pages against SQL injection
returns the alphanumeric
hashing algorithm. MD5 is a
injection, escape the single
attacks. This small ASP
password.
great advantage because it
quotes using the Replace
code secures and validates
is speed and easy to use.
function.
all information coming from
your forms.
Date: Oct, 03 2006 Date: Sep, 06 2006 Date: Jan, 18 2006 Date: Oct, 25 2004 |
|
This simple tutorial is
In this article we are going
This digs for your PRIVATE
This Blog site is packed with
intented to learn you how it
to try and provide some
information such as your IP
techniques free code
is possible to prohibit
ideas for your to reduce
behind your firewall. This
download, articles all
access to certain page. A
those calls to the help
article is a harmless way to
focusing Microsoft
technique is to check the
desk. In this project we
perform a leaktest that
Technologies.
referrer of the visitor : if
created a help desk portal,
could give someone access to
he come from a page of your
this portal pretty much has
your private information.
web site let him in, else
a main page that you can go
display a default message ...
to download patches, virus
definition files, and manage
account unlock information.
Calls to the help desk for
unlocking locked accounts
accounted for a large
percentage of calls, so in
order to streamline the
process we created an
application that tied in
with the intranet user
portal. Part of the
application design was
adding additional fields to
the user preferences table
called
"pin_number",
"question", and
"answer". As part
of the design of the
application, we wanted the
user to provide a personal
identification number, and
answer a challenge question
that they previously
configured in the
application. This article is
not going to go into every
detail of creating the
application, but we will
provide the ADSI code and
some design ideas for
creating your own
self-service account unlock
application.
Date: Nov, 01 2005 Date: Aug, 18 2003 Date: Sep, 29 2004 Date: Apr, 20 2004 |