473,804 Members | 3,031 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

How to Secure the ASP Code

Hi,

I v a problem that i have to secure my asp code. I tried "screnc.exe ", it is
very useful but not hard to crack.

Anybody who can give an alternate and better way.

Thanks in Advance

Jul 19 '05 #1
4 1983

AFAIK there isn't any other way of protecting your asp code besides encoding
them with screnc.exe.
Another way to protect your code is to port your site to a compiled binary
(VB or C++) but that's a lot of work if your site consist out of ASP code
for the largest part.

An intermediate way to do this could be to take a very vital part of your
site, and only port that to a COM object, which you use in your ASP pages.
If you include a protection mechanisme in that COM object, it'll be a lot
harder to crack, but it'll still leave your ASP code vulnerable for
snooping. It'll just make it a lot harder to simply copy your app.

"SQL Sever News Group" <zu***********@ hotmail.com> wrote in message
news:el******** ******@TK2MSFTN GP11.phx.gbl...
Hi,

I v a problem that i have to secure my asp code. I tried "screnc.exe ", it is very useful but not hard to crack.

Anybody who can give an alternate and better way.

Thanks in Advance

Jul 19 '05 #2
"SQL Sever News Group" <zu***********@ hotmail.com> wrote in message news:<el******* *******@TK2MSFT NGP11.phx.gbl>. ..
Hi,

I v a problem that i have to secure my asp code. I tried "screnc.exe ", it is
very useful but not hard to crack.

Anybody who can give an alternate and better way.


There's a product called ASP Lightning which converts your ASP code to
DLLs.

http://www.asplightning.com/asplightning/

Basically it creates on object for an entire ASP page, then creates a
couple of lines of code for the new ASP page (named the same as the
old page) which calls that particular object.

We were going to use it until a project of ours fell through, but I
played around with it for a couple of weeks and it worked very well.
The only "issue" that I found is that it was a bit picky as to some
ASP syntax. For example, it required a space before an after a "&"
symbol when conbine two strings. i.e.

response.wrte(" hello "&name)

is no good

response.write( "hello " & name)

is good
Jul 19 '05 #3
You might try something like this:

PCbit
http://www.pcbit.com
Advanced HTML Optimizer

Best regards,
J. Paul Schmidt, Freelance ASP Web Consultant
http://www.Bullschmidt.com
ASP Design Tips, ASP Web Database Demo, Free ASP Bar Chart Tool...
*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!
Jul 19 '05 #4
Please note that the site address Larry mentioned for ASP Lightning is
http://www.infomentum.com/ASPLightning/ and not
http://www.asplightning.com/asplightning/

Thanks
Amar

Larry Bud wrote:
"SQL Sever News Group" <zu***********@ hotmail.com> wrote in message news:<el******* *******@TK2MSFT NGP11.phx.gbl>. ..
Hi,

I v a problem that i have to secure my asp code. I tried "screnc.exe ", it is very useful but not hard to crack.

Anybody who can give an alternate and better way.


There's a product called ASP Lightning which converts your ASP code

to DLLs.

http://www.asplightning.com/asplightning/

Basically it creates on object for an entire ASP page, then creates a
couple of lines of code for the new ASP page (named the same as the
old page) which calls that particular object.

We were going to use it until a project of ours fell through, but I
played around with it for a couple of weeks and it worked very well.
The only "issue" that I found is that it was a bit picky as to some
ASP syntax. For example, it required a space before an after a "&"
symbol when conbine two strings. i.e.

response.wrte(" hello "&name)

is no good

response.write( "hello " & name)

is good


Jul 22 '05 #5

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

4
2915
by: debedb | last post by:
Hi all, I have a link, <A onClick="javascript:foo()">. The foo() function does w = window.open('', fieldid+'mywindow', prop); w.document.open(); d = w.document; And proceeds to write stuff there.
68
3736
by: Roman Ziak | last post by:
Hello, I just downloaded MS Visual Studio 2005 Express Beta. When I tried to compile existing valid project, I get a lot of warnings like 'sprintf' has been deprecated, 'strcpy' has been deprecated etc. I opened STDIO.H and figured that one has to define a macro _CRT_SECURE_NO_DEPRECATE to stop these warnings. I started to search internet and found few links, and the following proposal
3
4171
by: Bill | last post by:
I'm running a C#.Net application that is using the HttpWebRequest to upload an xml file to a https site with FIPS complicancy turned on. On the "GetRequestStream()" method I get: "The underlying connection was closed: Could not establish secure channel for SSL/TLS." With FIPS turned on the secure website, only a FIPS compliant protocol can be used. Since SSL is not FIPS compliant then only TLS can be used. Unfortunately, this protocol...
8
2333
by: todd.freed | last post by:
Hey all, I have been racking my brain all morning to find a solution to this, and I am having no luck. Our webpage is created with Visual Studio C# and ASP.Net, hosted in-house using HTTPS with SSL. We got it up and running great in Dev but once we put it up on the secure server (HTTPS) we started getting Security Alert messages saying "This page contains both secure and nonsecure items." - It displays several of these on every page of...
14
4617
by: Usman | last post by:
Hi I'm working on an application that contains classes for licensing, authentication etc, including all the algorithms of encryption/decryption etc. I wanted to secure this code, but after compiling all the code, I just thought of trying a decompiler on the output file. The decompiler generated almost 99% of the exact code out of it, exposing all those algorithms that I need to secure. Even if I try a dotfuscator tool, still it does'nt...
40
2821
by: Robert Seacord | last post by:
The CERT/CC has released a beta version of a secure integer library for the C Programming Language. The library is available for download from the CERT/CC Secure Coding Initiative web page at: http://www.cert.org/secure-coding/ The purpose of this library is to provide a collection of utility functions that can assist software developers in writing C programs that are free from common integer problems such as integer overflow, integer...
7
4970
by: Robert Seacord | last post by:
The CERT/CC has just deployed a new web site dedicated to developing secure coding standards for the C programming language, C++, and eventually other programming language. We have already developed significant content for the C programming language that is available at: https://www.securecoding.cert.org/ by clicking on the "CERT C Programming Language Secure Coding Standard"
5
3688
by: walterbyrd | last post by:
I honestly don't know. But, I have seen articles and posts about how PHP is terribly insecure. I don't usually see comparisons to other common web languages. I think the big vulnerablity is supposed to be code injections. Another security issue would be having code stolen, but I think that PHP can be protected from that. Obviously, I don't know a lot about it.
0
2349
by: amitvps | last post by:
Secure Socket Layer is very important and useful for any web application but it brings some problems too with itself. Handling navigation between secure and non-secure pages is one of the cumbersome jobs. When a non-secure page references a secure page with relative URL, the web server generates error until absolute URL with https prefix is used. On the other hand when a secure page references a non-secure page, the non-secure page will be...
3
2756
by: zr | last post by:
Hi, Does usage of checked iterators and checked containers make code more secure? If so, can that code considered to be reasonably secure?
0
9705
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
9575
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
10564
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
10320
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
0
10073
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
6846
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
5645
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
2
3806
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.
3
2981
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.