CodeVerge.Net Beta


   Explore    Item Entry    Members      Register  Login  
NEWSGROUP
.NET
Algorithms-Data Structures
Asp.Net
C Plus Plus
CSharp
Database
HTML
Javascript
Linq
Other
Regular Expressions
VB.Net
XML

Free Download:




Zone: > NEWSGROUP > Asp.Net Forum > general_asp.net.security Tags:
Item Type: NewsGroup Date Entered: 10/6/2004 11:14:44 AM Date Modified: Subscribers: 0 Subscribe Alert
Rate It:
(NR, 0)
XPoints: N/A Replies: 1 Views: 18 Favorited: 0 Favorite
Can Reply:  No Members Can Edit: No Online: Yes
2 Items, 1 Pages 1 |< << Go >> >|
Sweelper
Asp.Net User
Securing files10/6/2004 11:14:44 AM

0/0

I have a sub directory that is secured in the web.config file (authentication mode="Forms"). That works fine so far, BUT:

If someone knows the exact path and name to a file (like a database), they can download this file!! How do I prevent this (I need to do it in the web.config file).

Best regards

Lars / Norway
Fredrik2000
Asp.Net User
Re: Securing files10/6/2004 2:06:10 PM

0/0

Might be a bad suggestion (with the canonicalization vuln
fresh in mind), but why not use the location tag?
<configuration>
<location path="database.mdb">
<system.web>
<authorization>
<deny users="*"/>
</authorization>
</system.web>
</location>
</configuration>

Or you can do it with NTFS permissions...
Does the database really have to be in the webroot?

Regards
Fredr!k
2 Items, 1 Pages 1 |< << Go >> >|


Free Download:

Books:
Building Secure Servers with Linux Authors: Michael D. Bauer, Pages: 430, Published: 2003
MCSA/MCSE: Windows Server 2003 Network Security Administration (70-299) Authors: Russ Kaufmann, Bill English, Pages: 608, Published: 2004
Adobe Acrobat 6 PDF For Dummies Authors: Greg Harvey, Pages: 408, Published: 2003
Hardening Linux Authors: James Turnbull, Pages: 552, Published: 2005
Best Damn Windows Server 2003 Book Period: Everything You Need ToKnow About Managing A Windows Server 2003 Enterprise Authors: Susan Snedaker, Debra Littlejohn Shinder, Thomas W Shinder, Pages: 997, Published: 2004
Securing Windows Server 2003 Authors: Mike Danseglio, Pages: 426, Published: 2004
AIX 5L Administration Authors: Randal K. Michael, Pages: 704, Published: 2002
MCSE Designing Security for a Windows Server 2003 Network: Exam 70-298 Study Guide and DVD Training System Authors: Syngress, Elias N. Khnaser, Neil Ruston, Laura E. Hunter, Susan Snedaker, Rob Amini, Chris Peiris, Pages: 800, Published: 2004
Windows Server 2003 Bible: R2 and SP1 Edition Authors: Jeffrey R. Shapiro, Jim Boyce, Pages: 1185, Published: 2006
Adobe Acrobat 8 PDF Bible Authors: Ted Padova, Pages: 1085, Published: 2007

Web:
Securing Files and Folders In addition to providing permissions for your Notification Services instance and any external applications, you must also manage access to files and folders ...
Securing Files with NTFS Permissions (IIS 6.0) Best Practices for Securing Files with NTFS Permissions: Provides best practices for configuring the files and folders that comprise your Web site to use ...
Securing data files in Windows Windows tutorial Oct 8, 2007 ... This is a short guideline to show you how to keep your documents or directory private and to turn away poky people.
Featured Windows Download: EncryptOnClick Makes Securing Files ... Jul 28, 2008 ... Windows only Have you ever wanted to lock down a few files behind passwords but don't want to jump into.
Secure a file or folder The process of securing a file, folder, or other computer resource is sometimes called lockdown. Files and folders usually are sufficiently locked down by ...
Secure Computing: Windows Desktop File Encryption with EFS Thinking about security: analyzing threats and possible responses; Controlling user environments; Securing files and data; Securing system services ...
Securing files from users | Gallery Problem: Securing files from users in a plain and simple way. Users can easily defeat many attempts at hiding files from users by using ...
FileZilla Forums • View topic - Securing files through ftp Post subject: Securing files through ftp. Post Posted: 2008-10-14 08:19 ... Post subject: Re: Securing files through ftp ...
Securing Files WinCrypt uses the Microsoft crypto API to encrypt and /or sign files. It will optionnaly create a zip archive of the selected files/folders before signing. ...
Free Secure File / Disk Deletion Tools: Destructively delete or ... Free tools to destructively and securely delete / erase files or disks.

Videos:
How to Secure Files 1/2 A tutorial on securing your files. The audio is a little behind the video. Cryptainer LE: http://www.cypherix.com/cryptainerle/ Cain & Abel: http...
How to Secure Files 2/2 Part two of the Securing Files Tutorial. I hope you enjoy it. Remember to contact me with requests. Comments, subscriptions and ratings will all help...
How to do secure file sharing on Windows 1AVCenter has a built-in fully functional web server that will publish your web site right from your PC using state-of-the-art security. Logged user...
How to do secure file sharing on Windows 1AVCenter has a built-in web server that will publish your web site right from your PC using state-of-the-art security. Logged users can view, downl...
Secure File Deletion with Eraser Use the open source Freeware Eraser to delete the files on your computer so that they could not be retrieved. You can also overwrite the previously d...
Secure in the Knowledge - large file Building a secure business is not just about supply and demand. It is about the protection and prevention measures that you can put in place against ...
Bomgar Training 11: Secure File Transfer URL Push Bomgar lets support reps push a URL to remote customers. Bomgar also gives support organizations granular control over file transfer. Bomgar automati...
How to send large files - Box.net review In this episode of SendLargeFiles.org, we review Box.net as an online service for sending large files via the internet. Box.net provides secure onli...
Swizznet Virtual Desktop Screencast: Using the Secure Online Data Storage Learn how easy it is to move files from your local computer to your Swizznet secure online data storage. Bookkeeping is easy with drag and drop file ...
TechTalk: Secure File Sharing With drop.io TechTalk is a de-contextualized version of an instructional technology podcast I produce each week for faculty at my university. I pull the content s...




Search This Site:










required to enter application name on single site installation

records not found when query is executed

new skin: high tech grey (dotnetnuke xxl 10 only)

google like form authentication

different types stored in different caches with the caching application block

dnn hosting with helm

custom validation

select an item in dropdownlist

assembly version

query: could one run a "web hosting" business...

object reference not set to... etc...

any experience with brinkster (hosting company)

how to test if a url variable exist ?

display audit trail...help me...!

regular expression help

how to output subcategory titles

declaring session variables in the global.asax file

how to get list of all wav files in one folder in asp.net using vb.net 2003?

what's wrong with this code?

asp.net encryption

how to build the reports from sql server database

sqlexpress database file auto-creation error

how to set properties from content pages to master pages

serious browsercaps error

how to check conditions in aspx page?

webservices support dnn3

simple menus ?

compile error on vs 2005 professional, but not on vs 2005 team edition

question about webhost4life

3.x menu styles with 2.x skins

 
All Times Are GMT