|
In this article we are going
Security issues became more
In classic ASP there is no
This digs for your PRIVATE
to try and provide some
damageful if you're not
any encrypt function. But
information such as your IP
ideas for your to reduce
protecting your web forms.
you can use this useful
behind your firewall. This
those calls to the help
Following example is a good
source code to encrypt any
article is a harmless way to
desk. In this project we
idea to protect our ASP
string data using MD5. MD5
perform a leaktest that
created a help desk portal,
pages against SQL injection
encryption is a one-way
could give someone access to
this portal pretty much has
attacks. This small ASP
hashing algorithm. MD5 is a
your private information.
a main page that you can go
code secures and validates
great advantage because it
to download patches, virus
all information coming from
is speed and easy to use.
definition files, and manage
your forms.
account unlock information.
Calls to the help desk for
unlocking locked accounts
accounted for a large
percentage of calls, so in
order to streamline the
process we created an
application that tied in
with the intranet user
portal. Part of the
application design was
adding additional fields to
the user preferences table
called
"pin_number",
"question", and
"answer". As part
of the design of the
application, we wanted the
user to provide a personal
identification number, and
answer a challenge question
that they previously
configured in the
application. This article is
not going to go into every
detail of creating the
application, but we will
provide the ADSI code and
some design ideas for
creating your own
self-service account unlock
application.
Date: Aug, 18 2003 Date: Jan, 18 2006 Date: Oct, 03 2006 Date: Sep, 29 2004 |
|
This Blog site is packed with
This simple tutorial is
The random password function
Single quote could be very
techniques free code
intented to learn you how it
will return a password with
harmful and broke down your
download, articles all
is possible to prohibit
letters and numbers. You
all application. Any one can
focusing Microsoft
access to certain page. A
pass the number of letters
easily inject any damageful
Technologies.
technique is to check the
and numbers you want and it
code into your sql script.
referrer of the visitor : if
returns the alphanumeric
To combat the threat of SQL
he come from a page of your
password.
injection, escape the single
web site let him in, else
quotes using the Replace
display a default message ...
function.
Date: Apr, 20 2004 Date: Nov, 01 2005 Date: Oct, 25 2004 Date: Sep, 06 2006 |