|
|
|
Hi all,
I have developed a web application. I need to prepare for audit trails here.
The following operations I have to develop.
===>
Logging of Authentication Process. Success and failed attempts.
Logging Authentication details changes.
Software error and failures logged Should not be possible to retrieve confidential authentication information from these logs (including passwords) Is it possible to uniquely identify both client host and user from these logs?
Is it possible to review these logs from within application?(Include Reporting of information from logs).
What level of information is logged by the application (read/write access, modification data, copy/paste data)?
Are log files time sequential and can they positively identify the time of action?
Is there any validation of event logs and can missing/deleted entries be discovered or recovered?
How long do logs exist for?
What method of backup and recovery event logs exist.
any reference? any link?
Thanks
|
|
|
|
|
|
Hello friends! Please, I need your advice and guidelines here. I designed a chat site with asp.net as frontend and sql 2005 as backend, and everything is working fine in my local system. The help I need here is
1. How can i host the site to be accessible by everyone within the global world.
2. Can I try it with free hosting?
3. What are the guidelines and requirement needed to make this succeful?
|
|
|
|
|
You need to host your site to server also you need to have domain name so that the site will be accessible publicly.
You can get cheap web hosting
go to http://www.freeasp.net
and get the godaddy discounted hosting pack(86% discount)
PS: I am not affiliated with any hosting provider
=====================================================
The grass is always greener on the other side of the fence
The difference between genius and stupidity is that genius has its limits." - Albert Einstein
|
|
|
|
|
You can try with Amazon web services
http://aws.amazon.com/[^]
You can use the free-tier for an year. Though there are limitation in speed and space, I would recommend this is a good start. Only your expense is going to be the domain registration.
I tried DiscountASP.NET[^] few times. Another good option for ASP.Net devs
modified 11-Aug-14 2:27am.
|
|
|
|
|
When you plan to host your website on air,
First thing you need to check is the legal issues bound to it.
- Software : You must have used the proper version of Visual Studio and SQL(eg : You cannot use a student version to publish a website on air for commercial purpose. You need to make sure your chat site is not commercial)
- When you register the domain, make sure the domain name is legally allowed to use.(In Australia , if it is .com.au, then I need to register the name first. Please check that)
- You country legal requirement. Eg (You may not be able to host your site on certain UK server)
I'm not 100% on above. Please consult with someone. Most of us(Techs) have no much idea on legal requirements.
|
|
|
|
|
This requires a lot of search, since the SQL Server 2005 is no longer used, latest version is 2014, so you can think, SQL Server 2008 must be compiled against atleast.
Secondly, both of these languages ASP.NET and SQL Server are backend languages, front-end is the HTML and the code that renders it.
Somehow, Microsoft's partners have some hosting for you, you can try out their demo or trial period too. But remember, don't fall for Free stuff, free stuff is most of the time fake, or of a bad user experience.
You're a chat program owner, don't disappoint your users by getting a free service, paying 100 a year isn't a bad idea after all.
http://www.microsoft.com/web/hosting/home[^]
Favourite line: Throw me to them wolves and close the gate up. I am afraid of what will happen to them wolves - Eminem
~! Firewall !~
|
|
|
|
|
I am trying to generate a PDF using iTextSharp. It's a fillable PDF. I am able to track all the fields except for some check boxes. All of those checkboxes are Yes/No checkboxes.
Now, the issue is, for some fields, the field type is coming as 'Other'. I am not sure what value should go in to these types.I am following the example in
Filling PDF Forms
I am getting the fieldtypes for some fields as follows:
<br />
<br />
Track - Other<br />
Gender - Other<br />
Spouse Gender - Other<br />
if Yes, please provide the following_2 - Other<br />
The first part is the formField name, and the second part is the type.
Since, it is Other type, these fields are not detectable. Please help.
|
|
|
|
|
I'm just guessing but usually other means a textbox that you write in your answer.
So you have a checkbox other, and when you click on it, a textbox appears or something.
So its still a checkbox, only the text or id assignment is "chk_gender_other" or something.
|
|
|
|
|
Correct.
I have two Sections called Gender and Spouse and then each section is having two checkboxes , Male and Female. The problem is, I am getting the id for the checkbox as
formFieldMap["Gender"]= ?
formFieldMap["SpouseGender"] = ?
How and what value should I pass to differentiate Male and Female Checkbox? I believe that I need to edit the PDF again to make the Id's unique.
|
|
|
|
|
Ah yes the naming formula
Took me about 10 years to get good at it.
i would of named it
cb_form_gender_male
cb_form_gender_female
cb_form_gender_other
txt_form_gender_other
cb is for checkbox
form is the name of the section, document, or something.
You should get the idea
|
|
|
|
|
Thank you. I changed the naming formula, it's coming properly now.
|
|
|
|
|
My IA department has run a security can on our MVC application and the following error was displayed: Information disclosure vulnerabilities are leaks of information from an application which are used by the attacker to perform a malicious attack against the application.
Applications should not disclose information not required for the transaction (e.g. a web application should not divulge the fact there is a SQL server database and it's version) This provides attackers additional information which they can use to find other attack avenues, or tailor specific attacks, on the application.
The designer will ensure the application does not disclose unnecessary information the users.
I am new to IA application security fixes so any recommendations would be great!
Thanks,
Steve Holdorf
|
|
|
|
|
|
My IA department has run a security can on our MVC application and the following error was displayed: Password transmitted in clear text or with an unapproved format are vulnerable to network protocol analyzers. These passwords acquired with the network protocol analyzer can be used to immediately access the application. The designer will ensure the application transmits account passwords in an approved encrypted format.
I am new to IA application security fixes so any recommendations would be great!
Thanks,
Steve Holdorf
|
|
|
|
|
That one sounds like they're recommending you use SSL / HTTPS.
Depending on the nature of your site, you might get away with a self-signed certificate, or a free basic certificate from StartSSL[^].
If the site collects or displays personal or financial information, then you should probably look at acquiring an Extended Validation certificate.
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
My IA department has run a security can on our MVC application and the following error was displayed: Resource Information in code can easily advertise vulnerabilities to unauthorized users. By placing the references into configuration files, the files can be further protected by the permissions and will be separated for ease of updating.
I am new to IA application security fixes so any recommendations would be great!
Thanks,
Steve Holdorf
|
|
|
|
|
I have to implement paging in a list which I'm getting via AJAX call as shown in following link(screen shot contains only paging):
http://i.stack.imgur.com/95TbM.png
I'm using Entity Framework approach for data access from database.
So I just need trick to fetch record in EF.
How to implement such type of paging through AJAX?
Thanks
|
|
|
|
|
|
I dragged a grid view control and put into my design page.Based on the user's input in text box i will create rows in java script and append to it.But grid view is not rendered in HTML so that i cannot append the rows to it.
|
|
|
|
|
GridView is a data control to display data that was supplied on the server! As you do not give no data source for the control it renders a simple <div> element with no content. If you want to do client side manipulation you probably need not use Web Form and its controls...
I'm not questioning your powers of observation; I'm merely remarking upon the paradox of asking a masked man who he is. (V)
|
|
|
|
|
Thanks..If I bind a data table to grid view in server side then only it is rendered as HTML table in client side otherwise it renders as div as you said.
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
