The new ASP.net Identity project has brought some useful code and interfaces for website security. To implement a custom system using the interfaces (instead of using the standard Entity Framework implementation included in the MVC 5 template) an IPasswordHasher is required.
I’m currently researching methods for storing user roles and permissions for .NET based projects. Some of these projects are web based, some are not. I’m currently struggling to find the best method to achieve what I’m looking for in a consistent, portable way across project types.
I’ve just read on the net about a newly discovered security vulnerability in ASP.NET. You can read the details here.
I need to avoid being vulnerable to SQL injection in my ASP.NET application. How might I accomplish this?
Base on this questions and the answers there, I like to ask what is the proper way of redirecting.
I’m wondering how to prevent Session fixation attacks in ASP.NET (see http://en.wikipedia.org/wiki/Session_fixation)
I am inheriting from System.Web.Http.AuthorizeAttribute to create a custom authorization/authentication routine to meet some unusual requirements for a web application developed using ASP.NET MVC 4. This adds security to the Web API used for Ajax calls from the web client. The requirements are:
I am getting the error below: Child actions are not allowed to perform redirect actions. Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code. Exception Details: System.InvalidOperationException: Child actions are not allowed to … Read more
I have an ASP.NET 3.5 application that uses ASP.NET forms authentication. I want to be able to get the Windows user name currently logged into the computer (NOT logged into the ASP.NET application, but into Windows) when data is edited in a page.
I have a web site and I want to block request from BOTs and attempt brute force login to my web site.