Building the project directly to live web server, security?

[David Lozzi]

I'm doing an app and am building and saving the project directly to the live production web server. Are there security issues with this? The vbproj files are saved there along with the codebehinds. If this is an issue, what's the best practice?

Thanks,

--
David Lozzi
Web Applications/Network Specialist
Delphi Technology Solutions, Inc.
dlozzi(remove-this)@delphi-ts.com

[Scott Allen]

The project and code files don't need to be on the server, so they
could only present more of a risk by being there. IMHO it is only a
small risk. ASP.NET will prevent web requests from fetching these
files.

You'll have to weigh the benefits of having the files on the server
versus the risk of someone reading your code. Do they serve as a
backup by being on the server?

--
Scott
http://www.OdeToCode.com/blogs/scott/

On Fri, 17 Dec 2004 11:50:06 -0500, "David Lozzi"
<dlozzi(remove-this)@delphi-ts.com> wrote:

I'm doing an app and am building and saving the project directly to the live production web server. Are there security issues with this? The vbproj files are saved there along with the codebehinds. If this is an issue, what's the best practice?

Thanks,

[David Lozzi]

They're on the server because I do not know any other way to do this. I
would have no problem keeping it all on my development server and then just
push out the necessary files, but how does that work with VS.NET?

Thanks

--
David Lozzi
Web Applications/Network Specialist
Delphi Technology Solutions, Inc.
dlozzi(remove-this)@delphi-ts.com
"Scott Allen" <bitmask@[nospam].fred.net> wrote in message
news:v4********************************@4ax.com...

The project and code files don't need to be on the server, so they
could only present more of a risk by being there. IMHO it is only a
small risk. ASP.NET will prevent web requests from fetching these
files.

You'll have to weigh the benefits of having the files on the server
versus the risk of someone reading your code. Do they serve as a
backup by being on the server?

--
Scott
http://www.OdeToCode.com/blogs/scott/

On Fri, 17 Dec 2004 11:50:06 -0500, "David Lozzi"
<dlozzi(remove-this)@delphi-ts.com> wrote:

I'm doing an app and am building and saving the project directly to the
live production web server. Are there security issues with this? The
vbproj files are saved there along with the codebehinds. If this is an
issue, what's the best practice?

Thanks,

[Scott Allen]

Are you doing a Project -> Copy Project from the VS.NET menu? If so,
there is an option to 'only deploy files needed to run the
application', and the IDE won't copy over source files.

The caveat is that the web server will need Front Page Extensions
installed and running. Some people really hate FPE and won't enable it
on a server.

--
Scott
http://www.OdeToCode.com/blogs/scott/

On Fri, 17 Dec 2004 13:50:50 -0500, "David Lozzi"
<dlozzi@(remove-this)delphi-ts.com> wrote:

They're on the server because I do not know any other way to do this. I
would have no problem keeping it all on my development server and then just
push out the necessary files, but how does that work with VS.NET?

Thanks

[David Lozzi]

Ah, thats how I get the over there.... excellent! Thank you!

I don't mind FPE, it only helps!

--
David Lozzi
Web Applications/Network Specialist
Delphi Technology Solutions, Inc.
dlozzi(remove-this)@delphi-ts.com
"Scott Allen" <bitmask@[nospam].fred.net> wrote in message
news:ge********************************@4ax.com...

Are you doing a Project -> Copy Project from the VS.NET menu? If so,
there is an option to 'only deploy files needed to run the
application', and the IDE won't copy over source files.

The caveat is that the web server will need Front Page Extensions
installed and running. Some people really hate FPE and won't enable it
on a server.

--
Scott
http://www.OdeToCode.com/blogs/scott/

On Fri, 17 Dec 2004 13:50:50 -0500, "David Lozzi"
<dlozzi@(remove-this)delphi-ts.com> wrote:

They're on the server because I do not know any other way to do this. I
would have no problem keeping it all on my development server and then
just
push out the necessary files, but how does that work with VS.NET?

Thanks