You searched for the word(s): userid:669340

More Search Options

RSS Available

• Re: create user wizard problem

  You'll need to get the remote host to attach your database to SQL Server and then you need to create a connectionString for connecting to the remote database. You can ask your host to attach your database and to provide you with a connectionString. Or at least ask the host to provide the parameters you need to build the connectionString.

  Posted to Security (Forum) by hypercode on 1/2/2010

• Re: Help needed..

  karimsultan, I am not trying to nit-pick but just to be informative. With this word karim123+ the plus (+) sign is considered nonalphanumeric But with mohan451_ the underscore (_) is considered as alphanumeric So, you can not use the underscore(_) character for a nonalphanumeric

  Posted to Security (Forum) by hypercode on 1/2/2010

• Re: using .mdf file for membership

  You'll need to get the database attached to SQL on the remote server and write or acquire a connectionString for connecting to the database. Ask your host to attach the database. Also, ask the host to provide a connectionString for connecting to your database once it has been attached.

  Posted to Security (Forum) by hypercode on 1/2/2010

• Re: Prevent direct access to image files?

  Hua-Jun Li, In the case where I am using wildcard mapping, I am only preventing access to non-aspx files fron Unauthenticated Users. If the user is Authenticated, then he can access the files. I have tested and found this method prevents unathorized access to files stored in secure directories. If you try direct access in browser such as: http://myssiteej/myydir/myfile.jpg you will be directed to login page. After logging in, you can then get the file.

  Posted to Security (Forum) by hypercode on 12/31/2009

• Re: Prevent direct access to image files?

  Hua-Jun Li, The use of HttpHandlers is great. I use HttpHandler. I also use "wildcard mapping" to aspnet_isapi.dll in IIS for preventing direct access to files. Wildcard mapping is much simpler and requires no code. Is there any reason why I shouldn't use "wildcard mapping" ? Other than portability, does using an HttpHandler have any advantage over wildcard mapping? Thanks

  Posted to Security (Forum) by hypercode on 12/30/2009

• Re: Prevent direct access to image files?

  Set "wildcard mapping" in IIS6 and .Net 2.0. Takes about 10 seconds in IIS6 from the "Home Directory->Configuration" propertiy page in IIS. If your site is on a paid host, request "wildcard mapping" to be set for your site. I have done this and it works. What happens when you request the picture or other non-aspx file is that the aspnet engine does not process the request. IIS processes the request so therefore the aspnet security is not in play. aspnet only processes

  Posted to Security (Forum) by hypercode on 12/25/2009

• Re: Prevent direct access to image files?

  With "wildcard mapping" IIS passes all requests to aspnet for processing and so non-aspx files will be processed as if they were aspx files. Secured files with extensions such as .jpg, .html or.doc can only be accessed by authorized users. If the request to a secure file is not from an authenticated/authorized user, the request is denied and the user is redirected to the login page. If you try "wildcard mapping" you will see that it works.

  Posted to Security (Forum) by hypercode on 12/25/2009

• Re: Prevent direct access to image files?

  [quote user="guenavan"] This is not what topic starter was after [/quote] You're right. Thanks for straightening me out. For some reason, I interpreted the topic that these were secured images. Anyway what I said above will protect all files in secured directories. Maybe a little too much Christmas cheer for me huh?

  Posted to Security (Forum) by hypercode on 12/25/2009

• Re: minRequiredNonalphanumericCharacters- not working, no matter what

  Accidental double post. I'm sorry

  Posted to Security (Forum) by hypercode on 12/22/2009

• Re: minRequiredNonalphanumericCharacters- not working, no matter what

  Try these settings exactly as I have it and make sure you have no syntax errors. connectionStringName="DataBaseConnection" enablePasswordRetrieval="false" enablePasswordReset="true" requiresQuestionAndAnswer="false" applicationName="/" requiresUniqueEmail="true" passwordFormat="Hashed" maxInvalidPasswordAttempts="5" minRequiredPasswordLength="6" minRequiredNonalphanumericCharacters="0" passwordAttemptWindow

  Posted to Security (Forum) by hypercode on 12/22/2009