Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Securing ASMX pages

Posted on 2004-10-14
4
Medium Priority
?
874 Views
Last Modified: 2008-03-04
I have a ASMX web service page which has several functions. There is a Win app which calls functions from this web service page. This all works fine, except that the ASMX page can be accessed by anybody from the browser. With some of the functions, the user can even enter data into the fields (for functions that require parameters) and click a button to get the result.

How do I prevent users from accessing the ASMX page from the browser (or at least prevent them from using the functions) without affecting how the Win app is used? Thanks.
0
Comment
Question by:hobster
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 3

Accepted Solution

by:
Realmrat earned 100 total points
ID: 12317082
Buy "Building Secure Microsoft ASP.NET Applications" and read the 30 page Chapter 10: Web Services Security.  =]

This really is a big subject.

 - Joe
0
 
LVL 3

Assisted Solution

by:eekj
eekj earned 100 total points
ID: 12326103
Add a function that takes the an encrypted username and password then have your web service check these in a database. If the credentials are correct store the session id for that client in another database table. Each time one of the web service functions is called first check the sessionid from that client to see if they have been validated and only then allow them to execute the main part of the code for that function.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In order to hide the "ugly" records selectors (triangles) in the rowheaders, here are some suggestions. Microsoft doesn't have a direct method/property to do it. You can only hide the rowheader column. First solution, the easy way The first sol…
Performance in games development is paramount: every microsecond counts to be able to do everything in less than 33ms (aiming at 16ms). C# foreach statement is one of the worst performance killers, and here I explain why.
This course is ideal for IT System Administrators working with VMware vSphere and its associated products in their company infrastructure. This course teaches you how to install and maintain this virtualization technology to store data, prevent vuln…
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…

609 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question