Passing Information Between Two ASP.NET Websites

anewell

I need to build website on my webserver which has information securely
passed to it from a web site running on a client's webserver.

My client has a website that has a secure login process running under
SSL. When a user has succesfully logged into that website they will be

able to follow a link to my website. As part of this link I need an id

of the user to be passed to my website so I know who the user is, I do

NOT need the user's username or password. The ids of all users is
already known to both websites.
My site can run using SSL and the simplest solution is to pass the id
of the user as part of the query string, i.e. the link is an anchor
with a HREF such as WWW.ADYSITE.CO. UK?id=123456789 ', but I do not know

how secure this is. I could envrypt the querystring so it is not
reable but I am not sure if this is necessary if I am using SSL, this
would mean that both the client and I would need to share envyption
keys.
I would like to limit the the amount of work the client will have to do

at their end so I need the simplest solution possible.
Any advice as to possible solutions would be welcome.
Regards
Ady

Apr 27 '06 #1

Subscribe Reply

1915

Sam Martin

you could encrypt the query string using .net's built in encryption support,
then use HttpUtility to Encode the string to make it url friendly.

(reply if you need an example)

end up with for eg.
http://sub.domain.com/postback.aspx?param=[your url friendly encrypted data]

This would rely on both servers knowing a shared encryption key and using
the same encryption algorithm.

Using SSL i the data passed between the servers will be encrypted - meaning
data intercepted between the servers will be secure, however the user would
be able to see the parameters being passed, in your case maybe their user id.

I would probably create a web service for doing what your suggesting. Very
similar method, just different implementation. Using VS.NET, create a web
service, it should be fairly obvious what to do with a little reading. You
then create a web reference to the service from the web app you want to call
the service. VS.NET creates a proxy class, which you can simply execute
methods from.

Food for thought

---------------------
Sam Martin
"an*****@valass is.co.uk" wrote:

I need to build website on my webserver which has information securely
passed to it from a web site running on a client's webserver.

My client has a website that has a secure login process running under
SSL. When a user has succesfully logged into that website they will be

able to follow a link to my website. As part of this link I need an id

of the user to be passed to my website so I know who the user is, I do

NOT need the user's username or password. The ids of all users is
already known to both websites.
My site can run using SSL and the simplest solution is to pass the id
of the user as part of the query string, i.e. the link is an anchor
with a HREF such as WWW.ADYSITE.CO. UK?id=123456789 ', but I do not know

how secure this is. I could envrypt the querystring so it is not
reable but I am not sure if this is necessary if I am using SSL, this
would mean that both the client and I would need to share envyption
keys.
I would like to limit the the amount of work the client will have to do

at their end so I need the simplest solution possible.
Any advice as to possible solutions would be welcome.
Regards
Ady

Apr 27 '06 #2

Similar topics

2564

Passing Cookies

by: Tom | last post by:

I know how to create a cookie using the HttpCookie. I know about setting its domain so it can be shared. So I have created a cookie on web site A and set it to expire in 10 minutes. Now I am on web site B, in VS.NET C# and I want to access the cookie created on web site A.

C# / C Sharp

4761

Passing data around inside applications

by: Simon Harvey | last post by:

Hi, In my application I get lots of different sorts of information from databases. As such, a lot of information is stored in DataSets and DataTable objects. Up until now, I have been passing around chunks of data in DataTables/DataSets, simply because that was the format that they were in when the data was taken from the database. Now, I know this maybe a pretty silly question with a standard "it depends" answer, but I'm going to...

C# / C Sharp

4758

Passing custom exceptions server to client

by: Ken Allen | last post by:

I have a .net client/server application using remoting, and I cannot get the custom exception class to pass from the server to the client. The custom exception is derived from ApplicationException and is defined in an assembly common to the client and server components. The custom class merely defines three (3) constructors -- the null constructor; one with a string parameter; and one with a string and innner exception parameter -- that...

C# / C Sharp

1850

passing information between ASPX pages

by: francois | last post by:

I would like to pass information between ASPX pages. For now, my navigation are hardcoded links. In some case I do a Response.Redirect("pages.aspx") Now I wonder is this is a good way to do. For exemple when I log out of my website, i go back to the logon page but I would like to write on the logon page something like "you succesfully logged out".

ASP.NET

1128

SQLConnection passing w/ user controls

by: David Gilbert | last post by:

Is better to pass the same SQL connection to all of my user controls. Should I make a global object for my SQL connection, or is there some other better choice out there. Thanks DG

Visual Basic .NET

1648

Passing text to Different Sites

by: BrendanMcPherson | last post by:

Hello, Im try to do some tricks to help make a "Search Many Sites from One Location". http://www.act.org.au/b_nexus.htm What I have decided to do is this: 1. You can choose which site you wish to visit from the first page, after pressing go it takes you to a frame page.

Javascript

1483

Passing connection string to business logic component

by: Stimp | last post by:

I am creating a DLL in VS.NET that will be used on .net and asp websites. What is the best way to pass a SQL connection string into the class methods? I can't use the web.config method since this won't be compatible with classic asp websites. Cheers,

ASP.NET

1001

Sending information between 2 web services on 1 web server.

by: cmpcrand | last post by:

Hello my name is Craig. I am wondering if it is possible to have 2 websites that are based on the same web server and if somebody enters some information into a textbox on 1 page and then clicks the button to send that information. Is it possible to have that information that was sent to appear on the second page if the other user refreshes that page. This isn't like a response redirect or session type variable thing. I realise that...

ASP.NET

911

Passing values between ASP.NET websites

by: Prefers Golfing | last post by:

I have two websites, Ping and Pong. I want to pass an object between them and have not had any luck with either HTTPSession or HTTPContext. Can this be done? Thanks. Ping code in button click event HttpContext.Current.Session.Add("DashboardObject", myObject); Response.Redirect(http://pong/);

ASP.NET

9721

What is ONU?

by: marktang | last post by:

ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...

General

9600

Changing the language in Windows 10

by: Hystou | last post by:

Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...

Windows Server

10633

Problem With Comparison Operator <=> in G++

by: Oralloy | last post by:

Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...

C / C++

10376

Maximizing Business Potential: The Nexus of Website Design and Digital Marketing

by: jinu1996 | last post by:

In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...

Online Marketing

10114

Discussion: How does Zigbee compare with other wireless protocols in smart home applications?

by: tracyyun | last post by:

Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...

General

7651

Access Europe - Using VBA to create a class based on a table - Wed 1 May

by: isladogs | last post by:

The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...

Microsoft Access / VBA

6880

Couldn’t get equations in html when convert word .docx file to html file in C#.

by: conductexam | last post by:

I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...

C# / C Sharp

5548

Trying to create a lan-to-lan vpn between two differents networks

by: TSSRALBI | last post by:

Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...

Networking - Hardware / Configuration

3011

Comprehensive Guide to Website Development in Toronto: Expert Insights from BSMN Consultancy

by: bsmnconsultancy | last post by:

In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

General