ASP Security Schemes: Your Experience

[jfrost10]

Hi guys,

I posted this as well in the ASP.NET board, but I figure there may be more traffic here, so forgive the duplication


My company is creating an ASP.NET application, and we're trying to figure out what the best seurity strategy would be for it (i.e how to control page access). Just wondered if any of you could share your experiences with your apps and the security architecture you implemented for them.

Thanks,

Jack

 

[ElEye]

I've successfully used this:

http://www.asphole.com/StoriesRead.ASP?ID=32&SC=Goals

It uses an Access DB to store usernames/pws, which is updatable via an online form, and serverside includes which you add to all your pages. The end result is an .ASP login routine.

-Dave