webservice security

Hi,

I am building an application using webservices, for example on my website there is a form, used to obtain data from webservice, I have already finisher the data providing, but I have to think about security too. Sou can you tell me some advices, what things I should do? How should I for example find out, whether the ws call comes from my form or not, or how often is the ws called, to protect it from bots?

I'd be very grateful for all advices, even theoretical.

Thanks

Re: webservice security

The simple way to authenticate .NET web service using custom SOAP header. in the web service you can check the username and password credential before call other web method. Here is a article about it.

http://www.codeproject.com/Articles/27365/Authenticate-NET-Web-Service-with-Custom-SOAP-Head

Re: webservice security

Thank you and what about if I want to call the webservice from javascript?

Re: webservice security

In the web method you can protected it with SOAP header, if you want to call it and pass user credential, then create a request object in SOAP format with header value in it and then send it to the server. For more about this, please check the following article.

http://www.aspnetajaxtutorials.com/2010/01/how-to-call-webservicescriptservice.html