473,327 Members | 2,112 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,327 software developers and data experts.

asp.NET dll-component: server security hole ?? (managed component)

I use asp.NET dll components on my website.
These are managed components, not like asp components that are un-managed.

Those who sell these components say that having an asp.Net component in the
/bin forlder of your website on a windows2003 server can cause no security
holes at all.

My hoster says the opposite...

So, what is the trought and if they are 100% safe, why is it so?

THX a lot
Nov 18 '05 #1
3 1535
Those DLLs won't execute unless you have ASPX pages calling them. Having
ASPX pages inherits them is usually not enough because the classes they
contain often lack an entry point.

So I think they won't bring security issues unless you're referring to
another type of security holes I can't think of.

"nicholas" <mu********@hotmail.com> ¦b¶l¥ó
news:e4**************@TK2MSFTNGP15.phx.gbl ¤¤¼¶¼g...
I use asp.NET dll components on my website.
These are managed components, not like asp components that are un-managed.

Those who sell these components say that having an asp.Net component in the /bin forlder of your website on a windows2003 server can cause no security
holes at all.

My hoster says the opposite...

So, what is the trought and if they are 100% safe, why is it so?

THX a lot

Nov 18 '05 #2
nicholas wrote:
I use asp.NET dll components on my website.
These are managed components, not like asp components that are
un-managed.

Those who sell these components say that having an asp.Net component
in the /bin forlder of your website on a windows2003 server can cause
no security holes at all.

My hoster says the opposite...

So, what is the trought and if they are 100% safe, why is it so?

THX a lot


A guess:
Having some dll sitting quetly in the bin folder is no risk.
Using that dll from your page could have risks, if that dll is a "trojan"
and does more than is advertised. How much do you trust
that "3rd party" that sold that dll? (If it's a commercial product,
usually you should be safe)

Hans Kesting

Nov 18 '05 #3
Thanks a lot, both of you !

It is a commercial product, so normally it should be OK.

THX

"Hans Kesting" <ne***********@spamgourmet.com> wrote in message
news:OV**************@TK2MSFTNGP11.phx.gbl...
nicholas wrote:
I use asp.NET dll components on my website.
These are managed components, not like asp components that are
un-managed.

Those who sell these components say that having an asp.Net component
in the /bin forlder of your website on a windows2003 server can cause
no security holes at all.

My hoster says the opposite...

So, what is the trought and if they are 100% safe, why is it so?

THX a lot


A guess:
Having some dll sitting quetly in the bin folder is no risk.
Using that dll from your page could have risks, if that dll is a "trojan"
and does more than is advertised. How much do you trust
that "3rd party" that sold that dll? (If it's a commercial product,
usually you should be safe)

Hans Kesting

Nov 18 '05 #4

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

1
by: Stefan | last post by:
Hi, I just downloaded PHP-4.3.3 for win32 and got the extensions folder and dropped it intot he root of the PHP directory and set it's path in the PHP.ini: extension_dir =...
3
by: Matthias Baas | last post by:
Hi, are there any guidelines about what to do if a Windows extension for Python 2.4 requires the C++ runtime (msvcp71.dll)? If I want to distribute a binary installer of an extension that...
4
by: Programmer | last post by:
Hi everyone Well here is my problem I hope you can help me
14
by: Neil Ginsberg | last post by:
I am using VBA/Access to send SMTP mail using CDO. I set a reference to "Microsoft CDO for Windows 2000 Library" (cdosys.dll). Everything works fine, both on my PC and on another PC. However, on...
11
by: Vijay Chegu | last post by:
I have built a 64bit ATL COM dll. When i register the dll on IA64 windows Enterprise server 2003, i get following error. DllRegisterServer in mydll.dll failed. Return code was : 0x80020009 ...
13
by: Metallicraft | last post by:
I have a vb6 application. On the main form is a picture box with one or two images and several pieces of text displayed in it. These are created on the fly using gdi32 routines that are all in a...
22
by: Brett Romero | last post by:
If my UI app uses three DLLs and two of those DLLs reference something named utilities.dll, does the UI app load utilities.dll twice or does the compiler recognize what is going on and load...
27
by: HKSHK | last post by:
Hello, I have this problem: I wrote some DLLs with VB.Net 2003 which I use with my programs. But I want to avoid that I have to go down to "DLL hell" and to copy all used dlls into each program...
15
by: Galen Somerville | last post by:
I have an app using a VB6 ActiveX.dll which I also have made as an exe. Both the dll and exe have exactly the same code and start in Sub Main. There is no form involved. I start this activex as...
13
by: Javad | last post by:
Hello I know that I should get the information of windows internet connections by using "rasapi32.dll" library, and I also have some sample codes, but I can't make them work. My exact need is to...
0
by: DolphinDB | last post by:
Tired of spending countless mintues downsampling your data? Look no further! In this article, you’ll learn how to efficiently downsample 6.48 billion high-frequency records to 61 million...
0
by: ryjfgjl | last post by:
ExcelToDatabase: batch import excel into database automatically...
0
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
1
by: CloudSolutions | last post by:
Introduction: For many beginners and individual users, requiring a credit card and email registration may pose a barrier when starting to use cloud servers. However, some cloud server providers now...
1
by: Defcon1945 | last post by:
I'm trying to learn Python using Pycharm but import shutil doesn't work
1
by: Shællîpôpï 09 | last post by:
If u are using a keypad phone, how do u turn on JavaScript, to access features like WhatsApp, Facebook, Instagram....
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you
0
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 3 Apr 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome former...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.