Solved

Securing ASMX pages

Posted on 2004-10-14
4
864 Views
Last Modified: 2008-03-04
I have a ASMX web service page which has several functions. There is a Win app which calls functions from this web service page. This all works fine, except that the ASMX page can be accessed by anybody from the browser. With some of the functions, the user can even enter data into the fields (for functions that require parameters) and click a button to get the result.

How do I prevent users from accessing the ASMX page from the browser (or at least prevent them from using the functions) without affecting how the Win app is used? Thanks.
0
Comment
Question by:hobster
4 Comments
 
LVL 3

Accepted Solution

by:
Realmrat earned 25 total points
ID: 12317082
Buy "Building Secure Microsoft ASP.NET Applications" and read the 30 page Chapter 10: Web Services Security.  =]

This really is a big subject.

 - Joe
0
 
LVL 3

Assisted Solution

by:eekj
eekj earned 25 total points
ID: 12326103
Add a function that takes the an encrypted username and password then have your web service check these in a database. If the credentials are correct store the session id for that client in another database table. Each time one of the web service functions is called first check the sessionid from that client to see if they have been validated and only then allow them to execute the main part of the code for that function.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Replace &lt; with < 14 59
How useful is the free version of Selenium? 3 35
Reference issues in Visual Studio 3 30
c# - Best approach for objects in functions 3 14
We all know that functional code is the leg that any good program stands on when it comes right down to it, however, if your program lacks a good user interface your product may not have the appeal needed to keep your customers happy. This issue can…
This article is for Object-Oriented Programming (OOP) beginners. An Interface contains declarations of events, indexers, methods and/or properties. Any class which implements the Interface should provide the concrete implementation for each Inter…
This Micro Tutorial demonstrates using Microsoft Excel pivot tables, how to reverse engineer competitors' marketing strategies through backlinks.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question