|
I'm just starting the design phase of a new website for a favorite charity and could use some guidance. I'm still at the cocktail napkin and pencil stage of development, so a lot of flexibility is still available. First off, I'm using the tools I have on hand; upgrading or buying better tools is out of the question. The development will be done using VB.Net 2003 and Access 2000/2003 and hosting will be on an ASP.Net enabled site.
I want the design to include a public section available to anyone, and a section accessible to members only, via username and password stored in an Access database. Most of the site content, public and private, will be in the same database. The member login will establish the user's level of access - view, change, administer the site - public visitors will have no access to private areas. The functions and information available to each member will be controlled by entries in a local table, Users, specifying the member's role on the site, and the whole database will be password protected. Therein lies the question. This master password will have to be embedded in the script code somewhere to enable the application to open its own tables to verify user status. I'm concerned about this password being discovered by bots and hackers.
I realize that nothing is perfect, but what is currently the best practice for this sort of thing? Should I save it in an Application-level variable? Embed it in a server script? Hide it in a stored procedure and pray that no one ever stumbles across the name of the proc? What is considered best practice for this sort of thing? I know it's done all the time, but I haven't done it yet myself. Thanks for any guidance...
"My kid was Inmate of the Month at Adobe Mountain Juvenile Corrections Center" - Bumper Sticker in Bullhead City
|
|
|
|
|
hi,
Before getting into development i recommand you to go through the concept ' Security in Asp.net '.
Espicially : Type of securities, Role based security etc
Sreejith Nair
|
|
|
|
|
I've stored the password in an encrypted string in the web.config before. The problem then becomes where do you store the key to decrypt it again (so, back to the same issue) In my case it was embedded in the assembly. (Looking back, I would do it defferently now)
Would you not be able to use MSDE? You can hook it up to Access so you can use the design tools there, you can also take advantage of its better security model. You could then allow the ASP.NET account to log into the database through a trusted connection.
I hope this helps.
Do you want to know more?
Not getting the response you want from a question asked in an online forum: How to Ask Questions the Smart Way!
|
|
|
|
|
Colin Angus Mackay wrote:
Would you not be able to use MSDE?
In theory I could use any of several database engines, but Access is what their hosting service supports. SQL Server is available, but at an additional charge. The encrypted string is probably adequate, though, as the data isn't anything someone would work very hard to get - just a member phone list and such for the members' convenience. It is private, however, and should be kept from the idly curious. Thanks for the idea.
"My kid was Inmate of the Month at Adobe Mountain Juvenile Corrections Center" - Bumper Sticker in Bullhead City
|
|
|
|
|
Hi, I am a little new to the code project. Any way, I have Windows ME and do not have the Microsoft .Net FrameWork. I was wondering if their is a program that can notify me when i get new mail.  I would like it if it can surport 2 gmail acounts(My Father and I have one gmail account each and we share the same computer). I would like it to stay in the System tray. I will give a gmail invite to the one you can find a program that I can use. Thanks 
|
|
|
|
|
|
Thanks I will use the G-Tray. So far from what I have used of it it is allright. Thanks
Try My gmail group at the hyper link below.
Browse Archives
|
|
|
|
|
That bold font bothers me.
Signature under construction.
|
|
|
|
|
Is this possible to do effectively in IE?
I've been trying to do this all day. I've figured out that when you load a PNG with the AlphaImageLoader filter you can't set the opacity filter or change the object's visibility. And when I try to apply a new AlphaImageLoader filter with a different png it takes way to much time for an effective rollover effect.
Does anybody know of a way to do this?
|
|
|
|
|
Assuming the filter has already been applied, you can just set the src property of the filter, instead of applying a new filter. The only problem is finding the filter - this code seems to work for me:
function findAlphaImageLoader(el)
{
if (!el || !el.filters || 0 == el.filters.length)
return null;
var filter;
for (var index = 0; index < el.filters.length; index++)
{
filter = el.filters[index];
if ("undefined" != typeof(filter.src) && "undefined" != typeof(filter.sizingMethod))
return filter;
}
return null;
}
"These people looked deep within my soul and assigned me a number based on the order in which I joined." - Homer
|
|
|
|
|
|
i m wprking on file and folder objects.how can we display folder file in two columns? like this
file1 file2
file3 file4
and so on
any person can help me in codding
thanks
|
|
|
|
|
Hi ,
every one know the password charector this is '*******' but i want to use other font charector other than **** is it possible and how
|
|
|
|
|
I'm putting together a system that includes a client-side .exe that needs to be maintained automatically. I have a two-fold problems to this:
1) I need to be able to run the client side .exe. Is the only way to do this through an active x control or is there another way? I'm exploring options as I've never created an active x control.
2) Automatically updating the exe. I understand there is an MS tech called BITS that will acheive this, but it is limited to Win XP. I need to come up with an automated update systems that checks versions and if needed, notifies the user and automatically updates whatever is needed (files, the exe itself, configuration stuff, etc). What do you suggest I use to acheive this? Is there a way to easily incorporate something like ghost installer or am I going to have to write a custom module that performs this for me and embed it in the client exe?
Any suggestions and insight are greatly appreciated as I am not well versed in what's available for web development.
Thanks!
|
|
|
|
|
I need to design a web-facing concert ticket reservation system.
I would like to know the main objects required for the design and their major methods.
Please specify any non-obvious data structures or algorithms used.
Thanks.
|
|
|
|
|
Do you have any requirements for this project? The requirements will really drive your design. Not every ticket reservation system in the world works the same, and they all likely have very different designs. Whoever is playing the roles of analyst and designer in your project will be able to answer those questions.
Michael Hodnick
www.kindohm.com
blogs.kindohm.com
|
|
|
|
|
Thanks Michael,
this is a general system, I need to apply this design as a test.
These are the requirements I have.
Your help will be appreciated.
Thanks.
|
|
|
|
|
I personally have never designed or developed a concert ticket reservation system. I'd start by putting together requirements based on this information:
- What is the audience? Would the system be used by the general public or by ticket reservation staff?
- What technology limitations are there? Can any development platform be used (e.g. Windows, Linux, .Net, Java), or are options limited?
- How will the system handle venues/concert locations?
- What types of seating arrangements will venues have (e.g. general admission, reserved, sections, etc)
- How would reservation transactions work? Would special business rules need to be established (probably)? For example, what happens when two users try to reserve the same seats at a concert? Would the system need to prevent that?
- Will the system include a way to pay for tickets? How will the payment transaction be handled?
- Will the system need to restrict access to certain features or information to certain users?
- How will new events and venues be entered into the system?
- How will ticket prices be established and/or entered?
- Will the system need to be extensible? Will other developers need to use a system API to add custom features later?
- This is just the tip of the iceberg... there are many more questions to ask and answer
The design really depends on the answers to those questions. For a start, create objects and methods that are used to meet requirements. Then, refactor as you go and re-use objects and methods for other requirements. e.g. you may have a Venue class that is used to create, update, or delete venues, but also used to read venue information for a ticket reservation transaction.
Michael Hodnick
www.kindohm.com
blogs.kindohm.com
|
|
|
|
|
could someone help me with this please.
How can i accept both a background and foreground color. Currently either 1 or the other is accepted and rendered. here is the code. from what i understand its an if statement that will do this. thanks in advance.
//----------------------------------------------------------------
// Variable Initialization
//----------------------------------------------------------------
var bgcolor=String(Request("bgcolor"));
bgcolor = bgcolor == "undefined" ? "white" : bgcolor;
var fgcolor=String(Request("fgcolor"));
fgcolor = fgcolor == "undefined" ? "black" : fgcolor;
var this_url,this_color,this_variable;
//----------------------------------------------------------------
// Page Assembly
//----------------------------------------------------------------
this_parameter = "fgcolor";
label("Foreground Color");
start_table();
this_color="red";
cell(this_color,url(this_parameter,this_color));
this_color="green";
cell(this_color,url(this_parameter,this_color));
this_color="blue";
cell(this_color,url(this_parameter,this_color));
end_table();
this_parameter = "bgcolor";
label("Background Color");
start_table();
this_color="yellow";
cell(this_color,url(this_parameter,this_color));
this_color="gray";
cell(this_color,url(this_parameter,this_color));
this_color="purple";
cell(this_color,url(this_parameter,this_color));
end_table();
label("Results");
show_results();
//----------------------------------------------------------------
// UI Helper Functions
//----------------------------------------------------------------
function url(param,color)
{ var baseURL = "default.asp";
baseURL += "?" + param;
baseURL += "=" + color;
return(baseURL);
}
function start_table()
{ Response.Write("");
}
function end_table()
{ Response.Write("
");
}
function cell(color,url)
{ Response.Write("");
Response.Write("");
Response.Write(color);
Response.Write("");
Response.Write("");
}
function label(text)
{ Response.Write("
");
Response.Write("");
Response.Write(text + ":");
Response.Write("
");
}
function show_results()
{ Response.Write("");
Response.Write("");
Response.Write("This is some sample text");
Response.Write("");
Response.Write(" |
");
}
|
|
|
|
|
Hello all.
i have a div with some text between the div tags, and when i drag it around i dont want the text to be selected. Im looking for a solution that works for IE.
|
|
|
|
|
|
I have tried to write a asp page that count visitors on your web site at a point of time.
Now i use global.asa (Session_OnEnd, Application_OnStart)
but i don't want to use the global.asa, How can i do ?
thanks.
|
|
|
|
|
hi code guys!
sorry for bad subject but this small problem really put me on the back.
I have a web browser control in my c# app. Now the following code gives me access to page contents.
////////////
HTMLDocument myDoc= new HTMLDocumentClass();
myDoc = (HTMLDocument) WB.Document;
String var= myDoc.body.InnerText;
//now var has the body contents
//////////
All works fine but this code never goes into the frames. I need to access particular frame’s contents. I have tried different things but never got anything right.
Firstly I need the code to determine how much frames the particular page has.
Then I want to get first frame’s contents.
Thanks
|
|
|
|
|
I need to insert text into a and I need to insert text at the current cursor location. Any sample script? Thanks in advance.
Norman Fung
|
|
|
|
|
I want to display a string (this string contains HTML page) in MS WebBrowser. (Not file or Web page!)
For example:
string s = "test";
and I have axWebBrowser1 in the Form.
What I must do??????????????
Help me, pleeeeeeeeeeease!
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
