WebApp Sec mailing list archives

Re: Prevent security bypass


From: Igor Guarisma <iguarism () yahoo com>
Date: Tue, 4 Feb 2003 15:42:44 -0600 (CST)

There might be a way if you use cookies and
JavaScripts


-----
Igor Guarisma
Universidad Centra de Venezuela
Facultad de Ciencias
EScuela de Computación


 --- Chris Neil <Chris.Neil () abs-ltd com> escribió: > I
am new to this mailing list and so hope this
conforms to the guidelines as
I read them.

How do people address the issue of non-authenticated
users requesting html
pages directly from a site without logging in?

FYI. This is an IIS server. Our asp pages check the
user is logged in, but
with html pages we cannot.
My only idea so far is to convert all our html pages
to asp. Is there
anything less drastic?


Chris Neil
  Security Officer
  Chris.Neil () abs-ltd com
-------------------------------------------
ABS 
  Tel:     +44 (0) 1993 771221
  Fax:    +44 (0) 1993 775081
-------------------------------------------
 

=====


_________________________________________________________
Do You Yahoo!?
Información de Estados Unidos y América Latina, en Yahoo! Noticias.
Visítanos en http://noticias.espanol.yahoo.com


Current thread: