Wrox Home  
Search P2P Archive for: Go

  Return to Index  

asp_web_howto thread: Code location and security


Message #1 by "Stephen Biggerstaff" <stephenb@w...> on Wed, 17 Jan 2001 10:40:28 -0000
From Ralph Wolfe [ralph_wolfe@h...]



I recently developed an ASP application which I wish to protect the source

code of. I would have built around DLL's however due to time constraint as

well as the complexity involved I was unable to do so in VB. Is there a

way

I can encrypt the source code with a tool or component. I tried using 

Microsoft's Script Encoder however would prefer using another if there one

available.



The other query I have is that, is it possible to have all my ASP files on

one server (eg mine) and the corresponding include HTML files on another 

server (eg client). if so how can I go about do so. Can I do it in the 

following way.



<!-- #include file="http://www.yourserver.com/file.asp" -->

or

<!-- #include virtual="http://www.yourserver.com/file.asp" -->



I appreciate any help.



regards,



ralph

Message #2 by "Unterste, Andreas" <unterste@d...> on Wed, 17 Jan 2001 06:47:29 -0600
On securing your code, I'd be afraid that this also means a sincere

performance hit.



On the client side include, the propsoed doesn't work because the #include

gets processed before the page is send to the client and the server has no

access to the client machine. Even doing it with JavaScript is tricky

because you need to allow the script to read the clients disk which humble

me wouldn't allow you to do...





Cheers,

Andreas





-----Original Message-----

From: Stephen Biggerstaff [mailto:stephenb@w...]

Sent: Wednesday, January 17, 2001 11:40

To: ASP Web HowTo

Subject: [asp_web_howto] Code location and security





From Ralph Wolfe [ralph_wolfe@h...]



I recently developed an ASP application which I wish to protect the source

code of. I would have built around DLL's however due to time constraint as

well as the complexity involved I was unable to do so in VB. Is there a

way

I can encrypt the source code with a tool or component. I tried using 

Microsoft's Script Encoder however would prefer using another if there one

available.



The other query I have is that, is it possible to have all my ASP files on

one server (eg mine) and the corresponding include HTML files on another 

server (eg client). if so how can I go about do so. Can I do it in the 

following way.



<!-- #include file="http://www.yourserver.com/file.asp" -->

or

<!-- #include virtual="http://www.yourserver.com/file.asp" -->



I appreciate any help.



regards,



ralph



Message #3 by "TomMallard" <mallard@s...> on Wed, 17 Jan 2001 06:58:56 -0800
Convert your sensitive asp pages to VB COM objects and use MTS. Then you

call these from a logic asp page which just passes parameters in and out of

these objects. If you used option explicit and object oriented design this

isn't too big a deal, if you don't use explicit or your logic is messy, oh

well, lots of job security...



In any case it's very worth the trouble 'cause COM/MTS is very fast, will

hide your logic and is relatively easy to configure to networks.



tom mallard

seattle

----- Original Message -----

From: "Unterste, Andreas" <unterste@d...>

To: "ASP Web HowTo" <asp_web_howto@p...>

Sent: Wednesday, January 17, 2001 4:47 AM

Subject: [asp_web_howto] RE: Code location and security





| On securing your code, I'd be afraid that this also means a sincere

| performance hit.

|

| On the client side include, the propsoed doesn't work because the #include

| gets processed before the page is send to the client and the server has no

| access to the client machine. Even doing it with JavaScript is tricky

| because you need to allow the script to read the clients disk which humble

| me wouldn't allow you to do...

|

|

| Cheers,

| Andreas

|

|

| -----Original Message-----

| From: Stephen Biggerstaff [mailto:stephenb@w...]

| Sent: Wednesday, January 17, 2001 11:40

| To: ASP Web HowTo

| Subject: [asp_web_howto] Code location and security

|

|

| >From Ralph Wolfe [ralph_wolfe@h...]

|

| I recently developed an ASP application which I wish to protect the source

| code of. I would have built around DLL's however due to time constraint as

| well as the complexity involved I was unable to do so in VB. Is there a

| way

| I can encrypt the source code with a tool or component. I tried using

| Microsoft's Script Encoder however would prefer using another if there one

| available.

|

| The other query I have is that, is it possible to have all my ASP files on

| one server (eg mine) and the corresponding include HTML files on another

| server (eg client). if so how can I go about do so. Can I do it in the

| following way.

|

| <!-- #include file="http://www.yourserver.com/file.asp" -->

| or

| <!-- #include virtual="http://www.yourserver.com/file.asp" -->

|

| I appreciate any help.

|

| regards,

|

| ralph

|

|


  Return to Index