I am passing values through query string. I want to restrict the user to modify the url to get the unauthorized permissions.I want to encrypt the url so that user can not understand and decrypt and use in the code.How can i do this.If there is any method to restrict the user to modify the url,
View 2 Replies
I have web.config file and it is encrypted completely and hosted in one server,Now I got one requirement to change admin person mail id. So I need to decrypt the web.config file and update the mail id then encrypt the config file again. Please tell me how to do this using aspnet_regiis -pdf commands?
View 1 Repliesi need to implement a standard encryption decryption logic across an entire project platform which has different clients implemented using different platforms as follows:
iphone app (objectiv c)
website (classic asp)
webservice (asp.net)
samsung bada app (c++)
the iphone app as well as the website need to send info to webservice using encrypted query strings
the web service then decrypts this and processes the info further
wanted to know the simplest way to achieve this. is there some free and ready to use binary available with an easy to use api to achieve this?
encryption needs to be as secure as possible
edited: currently we use AES on the website and webservice front
I am trying to encrypt/decrypt a file with CAPICOM in javascript. I have to encrypt file with private key and decrypt with public key. But I dont know how to do this with CAPICOM.
View 1 RepliesThis is meant to be easy ...so ive been told, but still cant get it to work!I have a sql database hosted on a shared server which requires the use of sql authentication.As a result I require to encrypt my sensitive data in the config (connection strings etc).I understand that you can do this using aspnet_regiis etc, but ive been told that as I have no direct acccess to the server, I may need to program the encryption.
I have seen a few examples, but as a novice I have been banging away at this, looking at an errors screen most of the time!
We are designing a .net web application that has an external and internal site.
Both sites need to encrypt data only the internal site needs to decrypt data.
We are wondering what are the best practices for:
Which encryption method to choose?
Where to store the encryption / decryption key?
I used the following command to encrypt my connection string but an error ocurred,
"The connection name'DatabaseConnectionString1' was not found in the applications configuration or the connection string is empty" How can I encrypt it while keeping the application working? What if I move the encrypted application to another computer? Will it work?
I have a Triple DES Key generated by java code from a third party vendor. It is a 3 part key.
We need to use this key in our VB.NET application. When I try to combine this key and use it in my app
'Dim desTransform As ICryptoTransform = desCrypto.CreateEncryptor(EncryptKey(Key), EncryptIV(IV))' gives me an error ' Specified key is not a valid size for this algorithm)
I am new to cryptography and do not understand the algorithms well. How can I use the java generated key in our app for encrypt/decrypt.
I want the encryption and decryption codes in C# for RSA, MD5 and HMAC-SHA1 for generated key.
View 1 Repliesexplain me Secure Socket Layers (SSL) and how it provide the functionality of encryption and decryption of data ?
View 1 RepliesI have to Encrypt and Decrypt Back the Password field in sql server i have used the pwdencrypt and pwdCompare() but i dont have to compare but i have to display the password back using the Decrypt technique Is there any algorithm which i can use only for encryption and decryption of password field?
View 4 RepliesFor our website, we have decided we would like to maintain our user passwords as encrypted binary data in our database. We are using ASP.NET 3.5 to host our site and SQL Server Express 2008 for the database, both running on the same server. When a user logs in and submits a username and password, there will need to be some sort of encryption or decryption in order to verify the credentials. To me, it would appear that there are 3 ways to do this:
1)[C# Encyrption] On User creation, perform encryption in the Web App and submit the encrypted password to the database. To verify credentials at Login, perform the same encryption on the submitted password and ensure that it matches the value stored in the database.
2)[SQL Encryption] On User creation, submit the plain-text password to the database and have it perform one of the SQL encryption variants during INSERT. To verify credentials at Login, have the database perform decryption on the password during the SELECT statement, and compare the plain-text submitted password to the one in the database.
3)[Mix] On User creation, submit the plain-text password to the database, and have it perform one of the SQL encryption variants during INSERT. To verify credentials at Login, perform the same encryption algorithm used by SQL on the submitted password ( is this possible? ), and ensure that it matches the value stored in the database.
Does anybody have an opinion as to which of these options is best? Number 1) is the most familiar to me, and would be the easiest to use with LINQ to SQL ( which is our current data model ), so I am leaning towards that. But if there are better options I would love to know about them.
I have requirement to encrypt the windows service config file and web.config connection strings, I could able to do that for web.config with aspnet_regiisC:WindowsMicrosoft.NETFramework64v2.0.50727>aspnet_regiis -pe "connectionStrings" -app "/application.ui")But I am still looking similar kind of way for windows service config file to encrypt and decrypt..exe.config file snippet as below
<?xml version="1.0" encoding="utf-8" ?>
<configuration>
<configSections>
[code]...
I was reading about how it is a good idea to encrypt the connection strings for security purposes. I came up with a solution that I think may be somewhat elegant, but there may be big flaws in my thinking. I am overworked and tired :)
Basically I have a setting in the web config EncryptConnectionString. In the Global.asax. Application_Start I am checking this in the config. If it is true, I am encrypting the connection strings. If it is false, I am decrypting the connection string.
Question #1 Is there a better way?
[code]....
I Actually want to simulate like those using asp.net(crypting string or image), but i don't know what is this type of encryption, and how i can generate, i would be grateful if I just know the name of it.
Full XML :
Code:
<wsse:Security xmlns:wsse="http://schemas.xmlsoap.org/ws/2002/07/secext"><wsse:BinarySecurityToken EncodingType="wsse:Base64Binary" ValueType="MicrosoftPassportAuthz" PassportAuthzVersion="1.0" SKI="j3uGjNQlgIXnP9TAxPTQC3tj6d8=">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</wsse:BinarySecurityToken><wsse:BinarySecurityToken EncodingType="wsse:Base64Binary" ValueType="AuthzServerSessionKey" PassportAuthzVersion="1.0">AQIAAANmAAAApAAA24wW4uH/THOd7Jlp6HapYoa85m9INyiHnsBs+bCrvvOOH/TLSQfywr/PBTtQNeupZEs49xNzvyMHL7y1EmWMyo77CdD/SRDNyvayapZFvxJJD0ALUgDGV/oFh4lswhiuQgPz32rFGd3FIApYkB3m/sYgzfqQdQaJdxH9SDGTCTI</wsse:BinarySecurityToken><dsig:Signature xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><dsig:SignatureValue>8ThmmMwbqhVi+S7FKU8UUZMCOdAQAdOrpR4O9wmkUGCj8oymEvxM7OZ+WGf0dIdlDirIGjFC+rhwJrKMftPcNmKInhLLkVPGkZG8KGB25p9QtNAV8dcY2xzqzSh/RrELm+HGTbERxbvYuiRIndG+r3Z8c/bQJXQl+kp+MsAS9Ms</dsig:SignatureValue></dsig:Signature></wsse:Security>
I want to encrypt the connection string in web.config, the problem is each time a developer changes the connection string in web.config and publishes, it needs to be encrypted every time in the web server. Is there any way that the connection string can encrypted automatically every time someone publishes it?
Note :- All of us work on our local machines other than the server. So encryption using local machine key is not an option.
Not sure if I'm posting the question in the right category.
1) I'm working in a project where encryption of data is high priority. Could some one suggest what would be the best encryption method to protect data from being cracked.
I'm using TCP/IP protocol.
2) Is HTTPS totally secured. If I'm using HTTPS, does that mean that there is no encryption of data required in the coding?
Is It Possible to send a string consists of (,.&') in a query string ?
View 7 RepliesWhen you need to store sensitive data such as CCs or SSNs, do you:1) Build your own encryption routine within the application, define a secret key somewhere in a config file, and then manually encrypt/decrypt data going to the database.2) Push all the problem to the database, using the built in DB capabilities (I think most vendors call it Transparent Database Encryption).What trade-offs have you find for your solution? Does writing your own routine perform poorly when compared to TDE? Is code maintainability, or conversely DB vendor lock-in an issue?
View 3 RepliesExample:
[URL]
I added the iis tag because I am guessing it also depends on what server technology you use?
I m facing some problem. i m not passing Dynamic string through query string..
I m using this code
string abc = "CPCB_" + TextBox1.Text + "_" + TextBox2.Text;
Response.Write("<script>window.open('xml.aspx?Flag=3&date='+abc,target='new');</script>");
I have a simple ASP.net page:
<form id="form1" runat="server">
<p><asp:TextBox id="input_box" runat="server"></asp:TextBox>
<asp:Button Text="OK" runat="server" OnClick="run" /></p>
</form>
I want to send input from input_box to a query string, and then keep this input in the input_box when the page reloads.
That's the code behind page:
protected void Page_Load(object sender, EventArgs e)
{
input_box.Text = Request.QueryString["input"];
}
protected void run(object sender, EventArgs e)
{
string url = string.Format("?input={0}", input_box.Text);
Response.Redirect(Request.Url.AbsolutePath + url);
}
Problem is that when query string is not empty, string from input_box cannot be passed to query string. How to correct it?
We are sending an HTML encoded string in the Query string. It was working fine on IIS 6 (windows 2003). We have recently moved the website to Windows 2008 (IIS 7.x). Since the move any Query String that contains "+" sign i.e., "%2b" gives error on the server "404 -File or directory not found."
View 2 RepliesI wanted to create a URL like http://localhost/menu.aspx/?id so that on typing this, it displays all the id's in the database. for eg:134
123
543
234
may be the id's which should be displayed after fetching from the database. However, it should be displayed as it it is without any control or without arranging in any gird etc. How can that be done?
I'm using webservice to integrate asp.net app with PeopleSoft. Sometimes, the value that I get from a querystring (eg in url below, request id =7) and pass it to PeopleSoft via webservice is blank, although the querystring contains key value pair. This causes the webservice integration piece to fail. What can cause this issue where the querystring value is blank? and how can I fix it?
[URL]
