Publishing Websites and Security

Chris

I am looking at publishing websites via VS. One thing I am unclear about is
security. These are probably stupid questions...

Our network people are really cagey about opening up FTP on the server. I
think the bosses have a fear of someone logging on a stealing all the source
code so we have some really ridiculous ways of deploying things. So couple
of questions:

The precompiled code - is it really easy to reverse engineer?
The http route - how secure is this. How do you prevent people from
capturing the upload, do you need to do it over an SSL line or does VS take
care of that.
Would there be a way of making the deployment process one way. You can
upload but you can't download.
And this is really stupid but how do you secure it so only certain people
can deploy. I don't see that in the tutorials.

Regards, Chris.

Jul 22 '07 #1

Subscribe Reply

1358

Mark Rae [MVP]

"Chris" <no****@nospam. comwrote in message
news:eM******** ******@TK2MSFTN GP05.phx.gbl...

The precompiled code - is it really easy to reverse engineer?

It's as easy as any other compiled .NET assembly, because that's what it is.
There are obfuscation tools available:
http://www.preemptive.com/products/dotfuscator/ and others...

The http route - how secure is this.

As secure as the http protocol is, because that's what it uses...

How do you prevent people from capturing the upload, do you need to do it
over an SSL line or does VS take care of that.

Visual Studio.NET won't automatically secure an upload natively for you...

Would there be a way of making the deployment process one way. You can
upload but you can't download.

That's not really a Visual Studio.NET question... Something like that would
need to be done at network level...

And this is really stupid but how do you secure it so only certain people
can deploy. I don't see that in the tutorials.

Well, one possibility would be to use Web Deployment Projects:
http://msdn2.microsoft.com/en-us/asp.net/aa336619.aspx They deploy a
solution onto your network, so you could restrict access to the deployment
folder as required. Then, you would FTP the files from the deployment folder
to your website, using an FTP account for which only your network
administrators know the password...
Your organisation maybe needs to take a bit of a step back here, though, and
ask itself just how secure does all this *really* need to be...

There's paranoid, and then there's paranoid...
--
Mark Rae
ASP.NET MVP
http://www.markrae.net

Jul 22 '07 #2

Similar topics

1263

Publishing software

by: postings | last post by:

Hi I work for a small company that publishes a number of paper based newsletters for companies. It also supplies these newsletters as PDF's and sends weekly updates (e-bulletins as we call them). It also have a related conference business. They are finally deciding to scrap their old websites and update them. They basically need a top portal that shows the news from every publication downwards. They need a website for every newsletter...

ASP.NET

1406

Publishing web site

by: philip | last post by:

I tried to publish on my address 'philippewarein.com' a minimal site. There is only one page, with some words : "This is my first site" This is the HTML code of this page, code created by Visual Studio 2005 : <%@ Page Language="VB" AutoEventWireup="false" CodeFile="Default.aspx.vb" Inherits="_Default" %> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

Visual Basic .NET

1658

Problem publishing to one of my servers but not others from VS 200

by: EqDev | last post by:

Hello I have set up a new windows server 2003 standard edition for training (on new software we have developed) and am having problems publishing webs to it from VS 2005. I have a C# Web Service and a test web site. I can publish to other servers but not the one for training. Notice that the message states that publish succeeded, but no files are copied.

.NET Framework

1319

Publishing .ASPX ?

by: Siva | last post by:

I am new to ASP.NET. I want to publish a page on IIS. That page will accept the request pages from users and hand in that request to BizTalk 2004 receive port. Does anyone know how can I do this? Or any good website where I can learn this? I have no idea about how to make the asp.net page to talk with BizTalk. What kind of development tool I should use to create this page? What about "ASP.NET Web Application" from VB.NET? This is the...

.NET Framework

2001

Visual Studio 2005 ASP.net publishing of virtual directories

by: Angelo Cook | last post by:

how do you prevent the publishing of virtual directories in VS 2005. I have been using VS2003 and developing websites for years. I have been using virtual directories for images, icons, styles and scripts. Which in dot net 1.1 and VS2003 when I copied or published my web sites the virtual directories were ignored. Now I am trying to convert to VS2005 and dot net 2.x and now my development environment now sees the virtual directories and...

ASP.NET

1351

Pros and Cons - publishing vs Copying

by: Elmo Watson | last post by:

Since I came from the HTML world many years ago - I am just in the habit of copying/FTPing all my ASP.Net websites to the remote server However, I have a friend who says that Publishing is the only way to go and it's the 'MS' way to do it I've had nothing but trouble trying to do this, many times, with different errors popping up, either in publishing, building before publishing, or running after publishing...

ASP.NET

1576

Publishing ASP.NET Web Application Fails

by: =?Utf-8?B?RWFnbGVSZWRASGlnaEZseWluZ0JpcmRzLmNvbQ== | last post by:

I have an ASP.NET application that I have been deploying by using the publish option on the project which compiles the project into a directory on my machine. It has been working fine and then suddenly it is indicating failure. I look in the output directory and all the files seem to be there. When I use aspnet_compiler or simply compile the project in VS2005 there are no errors. What is happening? How can I find out what is causing...

ASP.NET

1840

Access 2007 / ADO Provider for Internet Publishing

by: lyle fairfield | last post by:

For several years the ADO Provider for Internet Publishing has been available in Access for putting files on IIS websites and retrieving them. Public Sub TestADOInternetPublishingProvider() Dim c As ADODB.Connection Set c = New ADODB.Connection c.Open "Provider=MSDAIPP.DSO;Data Source=url=http://www.ffdba.com/" End Sub (I experimented with many different Data Source manifestations.)

Microsoft Access / VBA

1919

Membership permissions after publishing an ASP.NET Membership site.

by: Tino Donderwinkel | last post by:

Hi all, I have create a simple ASP.NET site that uses the ASP.NET Membership components. It uses a SQL Server as a provider. The application works fine when it's running on my own machine. After I publish the site to a remote webserver and recreate the database over on the remote site, the permissions on the folders are gone. I can succesfully log on, log off, and do all the 'normal' membership stuff,

ASP.NET

9670

What is ONU?

by: marktang | last post by:

ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...

General

9518

Changing the language in Windows 10

by: Hystou | last post by:

Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...

Windows Server

10211

Maximizing Business Potential: The Nexus of Website Design and Digital Marketing

by: jinu1996 | last post by:

In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...

Online Marketing

9033

AI Job Threat for Devs

by: agi2029 | last post by:

Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...

Career Advice

7538

Access Europe - Using VBA to create a class based on a table - Wed 1 May

by: isladogs | last post by:

The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...

Microsoft Access / VBA

5436

Trying to create a lan-to-lan vpn between two differents networks

by: TSSRALBI | last post by:

Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...

Networking - Hardware / Configuration

5560

Windows Forms - .Net 8.0

by: adsilva | last post by:

A Windows Forms form does not have the event Unload, like VB6. What one acts like?

Visual Basic .NET

4111

transfer the data from one system to another through ip address

by: 6302768590 | last post by:

Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system

C# / C Sharp

2917

Comprehensive Guide to Website Development in Toronto: Expert Insights from BSMN Consultancy

by: bsmnconsultancy | last post by:

In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

General