Solved

Securing ASMX pages

Posted on 2004-10-14
4
863 Views
Last Modified: 2008-03-04
I have a ASMX web service page which has several functions. There is a Win app which calls functions from this web service page. This all works fine, except that the ASMX page can be accessed by anybody from the browser. With some of the functions, the user can even enter data into the fields (for functions that require parameters) and click a button to get the result.

How do I prevent users from accessing the ASMX page from the browser (or at least prevent them from using the functions) without affecting how the Win app is used? Thanks.
0
Comment
Question by:hobster
4 Comments
 
LVL 3

Accepted Solution

by:
Realmrat earned 25 total points
ID: 12317082
Buy "Building Secure Microsoft ASP.NET Applications" and read the 30 page Chapter 10: Web Services Security.  =]

This really is a big subject.

 - Joe
0
 
LVL 3

Assisted Solution

by:eekj
eekj earned 25 total points
ID: 12326103
Add a function that takes the an encrypted username and password then have your web service check these in a database. If the credentials are correct store the session id for that client in another database table. Each time one of the web service functions is called first check the sessionid from that client to see if they have been validated and only then allow them to execute the main part of the code for that function.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
COnsume rest client 6 36
Linq Help 1 35
c#  xml doc trying to pick out elements getting (Null reference exception when showing message box 6 38
how to read json value 2 31
Exception Handling is in the core of any application that is able to dignify its name. In this article, I'll guide you through the process of writing a DRY (Don't Repeat Yourself) Exception Handling mechanism, using Aspect Oriented Programming.
It was really hard time for me to get the understanding of Delegates in C#. I went through many websites and articles but I found them very clumsy. After going through those sites, I noted down the points in a easy way so here I am sharing that unde…
This Micro Tutorial demonstrates using Microsoft Excel pivot tables, how to reverse engineer competitors' marketing strategies through backlinks.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now