Ask a Question related to ASP.NET Security, Design and Development.
-
Tristan #1
Session Security in ASP.Net/VB.Net
uhm First time ive encountered this situation. I am getting a Security
Exception when referencing a Session Variable.
Line 54: Dim objCustomer As New Customer
Line 55: 'If Session("uid") > -1 Then
--> Line 56:
objCustomer.LoadCustomterDetails(CInt(Session("UID ")))
Line 57: 'End If
Line 58: lblFirstName.Text = objCustomer.FirstName
This is the Breakpoint where it falls over.
Here is the error:
Description: The application attempted to perform an operation not
allowed by the security policy. To grant this application the required
permission please contact your system administrator or change the
application's trust level in the configuration file.
Exception Details: System.Security.SecurityException: Requested
registry access is not allowed.
The session is created when a user Logs into the Web site and thier
Username/password is Validated by a customer Login object. The UID is
returned and assigned to the Session("UID")
In this situation the File that is referencing the session is within a
restricted zone which only keeps out anonymous uses. No roles ahve
been assigned at this stage. Also it is using standard
FormsAuthentication methods.
Any Suggestion Welcome!
Tristan Guest
-
Security based on session, what's wrong?
Hello, I'm working on a portal derived from IBuySpy, and I have changed I check username and pwd against a database, then I make a Session=... -
Regarding Session Security
I've been delving into persistent sessions more, and I'm just wondering... To prevent session-snatching (by someone else using the same session ID),... -
session.save_path is a big security hole!
Theres absolutely no control over session.save_path parameter in php. By setting it to every directory he wants, every user can: 1. (!!!)... -
CGI:Session and security
On Tue, Sep 02, 2003 at 04:32:30PM +0900, Volker Grabsch wrote: Have you ever tried it? Makeing a hidden form field form a session is not so... -
Session Security Question
Thats what I do... $_SESSION = true; If you need to get more complicated (i.e. some pages are only available to certain users) I just set the...



Reply With Quote

