S*e
2 楼
做个网站
数据库,管理员密码啥的都放在了web.config里面
web.config在跟目录下,没有任何权限设置
这个安全吗?
数据库,管理员密码啥的都放在了web.config里面
web.config在跟目录下,没有任何权限设置
这个安全吗?
l*g
10 楼
为什么不用ASP.NET自动生成的用户名和密码管理?
s*o
12 楼
The content of the web.config won't be disclosed to anyone through your web
site, unless you tweak IIS explicitly. So, it's safe from those web users.
On the other hand, anyone who has a valid account on that server, and if the
ACL allows, is able to read your web.config content. To add protection to
this level, you can encrypt those sensitive information.
site, unless you tweak IIS explicitly. So, it's safe from those web users.
On the other hand, anyone who has a valid account on that server, and if the
ACL allows, is able to read your web.config content. To add protection to
this level, you can encrypt those sensitive information.
k*n
16 楼
如果别人能看到你webconfig。。。那就不是.net的问题了。。
S*8
17 楼
用 membership provider呀
d*m
18 楼
You can run aspnet_regiis.exe and pass the sections you want to encrypt.(
user user Store so that others who login the same server cannot decrypt it )
Note you don't need to write code to decrypt them, as asp.net does
http://msdn.microsoft.com/en-us/library/ff647398.aspx
【在 S****e 的大作中提到】
: 做个网站
: 数据库,管理员密码啥的都放在了web.config里面
: web.config在跟目录下,没有任何权限设置
: 这个安全吗?
user user Store so that others who login the same server cannot decrypt it )
Note you don't need to write code to decrypt them, as asp.net does
http://msdn.microsoft.com/en-us/library/ff647398.aspx
【在 S****e 的大作中提到】
: 做个网站
: 数据库,管理员密码啥的都放在了web.config里面
: web.config在跟目录下,没有任何权限设置
: 这个安全吗?
H*g
19 楼
顶楼上的。那个加密方式是SHA1吧
相关阅读
问个STRING比较的问题c# and asp.net entry level questions[合集] 要不要跳ASP.net and C# 坑?Code review数据库讲座 ---- 得给Beijing mm 还债了 (转载)这样的情况怎么加工资 (转载)asp.net有啥特殊好使的方法保护email?Outlook.com openned registration todayAny one has Pex and Moles MSDN version? Thank you!ajax,json,jquery怎么自学?10 Free Microsoft eBooks on Microsoft SQL, Windows Phone Pr (转载)网页上读者comment有必要存在server side吗?Build Giveaways小菜鸟求助,PDF header signature not foundDbSet<> 和 List<> 有什么区别?.net 4.0 parallel computing 的意义几个C# Developer的工作岗位免费讲座:SQL Server技术交流系列Data Warehouse入门07/25 周(转载)Microsoft released more sample codesc#中 使用linq从字典中选词 求助