Plateforme Level Extreme
Abonnement
Profil corporatif
Produits & Services
Support
Légal
English
Security Users table with naked passwords
Message
Information générale
Forum:
ASP.NET
Catégorie:
The Mere Mortals .NET Framework
Divers
Thread ID:
00925092
Message ID:
00925118
Vues:
25
PMFJI,

Why don't you encrypt / decrypt on your own. I am going out on a limb, i don't think kevin intended his framework be an application generator.
I think the only reason the login screen is there is because it ties into the security model.

Also remember this is version "1.x.x.x" of the framework, so i am sure Kevin has a lot of new features up his sleave.

I found an example for you at GotDotNet
http://www.gotdotnet.com/Community/UserSamples/Details.aspx?SampleGuid=2d6979d2-8998-4a58-951c-831bb0395ec3

OR

http://tinyurl.com/53on9

-- Shawn



>What you say is true... the passwords are clearly visible. This, in my opinion, is the single biggest flaw of the framework. I feel that this should be addressed within the framework - and hopefully it would be the topmost priority of any bug fix or enhancement to the framework.
>
>Regards,
>Carl.
>
>>In the Users table the password is visible and not encrypted in any way.
>>
>>Is this a problem?
>>
>>Since I am not the administrator of our SQL Server can't administrators look at these tables and see those passwords?
>>
>>This application is for a Purchasing system and Internal Auditing would have a fit about this.
>>
>>Should I be developing a method to encrypt those passwords so no one can see them?
>>
>>Thanks.
Shawn Dorion
Geo Sektor Dot Com
Website: http://www.geosektor.com

Web Hosting Plans
Visit : http://WebHosting.Applications4u.com/
Précédent
Suivant
Répondre
Fil
Voir

Click here to load this message in the networking platform