Web Service, restricting access?
Posted on 2008-11-19
Using VS2005 Professional Edition I just created a basic Web Service on Windows Server 2003 and added a web method placed it on my LIVE server...
I then created a new website project and added a reference to the Web Service on the LIVE service (www.domain.com/servicename.asmx)
In my website project I can now access the functions in the Web Service and all works great.
But, here is my problem, it was almost too easy, surely anyone could do the same, if they managed to find out the name of the .asmx file on the LIVE server, then they would have access to my web service and all the functions inside. Ultimately I want to fill this service with database functions.
How can I restrict access to this web service or make it so that only my own .NET websites can reference this service?