ASP.NET Security Tutorials

How does Forms authentication work in ASP.NET

Forms authentication is a ticket-based or token-based system. When users log in, they receive a ticket with basic user information. This information is stored in an encrypted cookie that’s attached to the response so it’s automatically submitted on each subsequent request.

When a user requests an ASP.NET page that is not available for anonymous users, …

Learn more

How does SSL work with asymmetric encryption

Every certificate includes a public key which a part of asymmetric key pair. The public key is freely provided to anyone who is interested. The corresponding private key is kept locked and is available only to the server. Anything that’s encrypted with one of the keys is decipherable with the other. In other words client can …

Learn more

How do certificates work

When a client has to exchange sensitive data with a website, he/she must easily decide whether to trust the site. Certificates were designed to serve this need, by making it possibly to partially verify a user’s identity. Certificates can be installed on any type of computer, but they in most cases are found on web servers.

Learn more

How does Secure Sockets Layer (SSL) technology work

The SSL technology encrypts communication over HTTP. SSL is supported by a wide range of browsers and ensures that a spy (“bad guy”) can’t simply decipher information exchanged between a client and a web server. SSL is important for hiding sensitive information such as:

– Credit card numbers

– Confidential …

Learn more

How to restrict access to selected application pages

Web developer follows the approach described in the article when he/she wants to make some pages accessible to the public. In this case Web developer should implement the solution described in the article How to restrict access to all application pages in C# or in the article How to restrict access to all application pages in VB.NET …

Learn more

How to restrict access to all application pages in VB.NET

Web developer follows the approach described in the article, when he/she has to restrict access to the pages of his/her application to authorized users only. In this case Web developer should change the web.config settings of his/her application to specify Forms authentication, and then create an .aspx login page to collect user credentials and complete the authentication check.

Web …

Learn more

How to restrict access to all application pages in C#

Web developer follows the approach described in the article, when he/she has to restrict access to the pages of his/her application to authorized users only. In this case Web developer should change the web.config settings of his/her application to specify Forms authentication, and then create an .aspx login page to collect user credentials and complete the authentication check.

Web …

Learn more

How to create SQL Server Login with SQL Server Management Studio

Create a SQL Server login that uses Windows Authentication

1.In SQL Server Management Studio, open Object Explorer and expand the folder of the server instance in which to create the new login.

2.Right-click the Security folder, select New, and then click Login.

3.Enter the name of a Windows user in the Login name box.

4.Select Windows Authentication.

5.Click OK.

Create a SQL Server login …

Learn more