|
 |
asp_web_howto thread: Code location and security
Message #1 by "Stephen Biggerstaff" <stephenb@w...> on Wed, 17 Jan 2001 10:40:28 -0000
|
|
From Ralph Wolfe [ralph_wolfe@h...]
I recently developed an ASP application which I wish to protect the source
code of. I would have built around DLL's however due to time constraint as
well as the complexity involved I was unable to do so in VB. Is there a
way
I can encrypt the source code with a tool or component. I tried using
Microsoft's Script Encoder however would prefer using another if there one
available.
The other query I have is that, is it possible to have all my ASP files on
one server (eg mine) and the corresponding include HTML files on another
server (eg client). if so how can I go about do so. Can I do it in the
following way.
<!-- #include file="http://www.yourserver.com/file.asp" -->
or
<!-- #include virtual="http://www.yourserver.com/file.asp" -->
I appreciate any help.
regards,
ralph
Message #2 by "Unterste, Andreas" <unterste@d...> on Wed, 17 Jan 2001 06:47:29 -0600
|
|
On securing your code, I'd be afraid that this also means a sincere
performance hit.
On the client side include, the propsoed doesn't work because the #include
gets processed before the page is send to the client and the server has no
access to the client machine. Even doing it with JavaScript is tricky
because you need to allow the script to read the clients disk which humble
me wouldn't allow you to do...
Cheers,
Andreas
-----Original Message-----
From: Stephen Biggerstaff [mailto:stephenb@w...]
Sent: Wednesday, January 17, 2001 11:40
To: ASP Web HowTo
Subject: [asp_web_howto] Code location and security
From Ralph Wolfe [ralph_wolfe@h...]
I recently developed an ASP application which I wish to protect the source
code of. I would have built around DLL's however due to time constraint as
well as the complexity involved I was unable to do so in VB. Is there a
way
I can encrypt the source code with a tool or component. I tried using
Microsoft's Script Encoder however would prefer using another if there one
available.
The other query I have is that, is it possible to have all my ASP files on
one server (eg mine) and the corresponding include HTML files on another
server (eg client). if so how can I go about do so. Can I do it in the
following way.
<!-- #include file="http://www.yourserver.com/file.asp" -->
or
<!-- #include virtual="http://www.yourserver.com/file.asp" -->
I appreciate any help.
regards,
ralph
Message #3 by "TomMallard" <mallard@s...> on Wed, 17 Jan 2001 06:58:56 -0800
|
|
Convert your sensitive asp pages to VB COM objects and use MTS. Then you
call these from a logic asp page which just passes parameters in and out of
these objects. If you used option explicit and object oriented design this
isn't too big a deal, if you don't use explicit or your logic is messy, oh
well, lots of job security...
In any case it's very worth the trouble 'cause COM/MTS is very fast, will
hide your logic and is relatively easy to configure to networks.
tom mallard
seattle
----- Original Message -----
From: "Unterste, Andreas" <unterste@d...>
To: "ASP Web HowTo" <asp_web_howto@p...>
Sent: Wednesday, January 17, 2001 4:47 AM
Subject: [asp_web_howto] RE: Code location and security
| On securing your code, I'd be afraid that this also means a sincere
| performance hit.
|
| On the client side include, the propsoed doesn't work because the #include
| gets processed before the page is send to the client and the server has no
| access to the client machine. Even doing it with JavaScript is tricky
| because you need to allow the script to read the clients disk which humble
| me wouldn't allow you to do...
|
|
| Cheers,
| Andreas
|
|
| -----Original Message-----
| From: Stephen Biggerstaff [mailto:stephenb@w...]
| Sent: Wednesday, January 17, 2001 11:40
| To: ASP Web HowTo
| Subject: [asp_web_howto] Code location and security
|
|
| >From Ralph Wolfe [ralph_wolfe@h...]
|
| I recently developed an ASP application which I wish to protect the source
| code of. I would have built around DLL's however due to time constraint as
| well as the complexity involved I was unable to do so in VB. Is there a
| way
| I can encrypt the source code with a tool or component. I tried using
| Microsoft's Script Encoder however would prefer using another if there one
| available.
|
| The other query I have is that, is it possible to have all my ASP files on
| one server (eg mine) and the corresponding include HTML files on another
| server (eg client). if so how can I go about do so. Can I do it in the
| following way.
|
| <!-- #include file="http://www.yourserver.com/file.asp" -->
| or
| <!-- #include virtual="http://www.yourserver.com/file.asp" -->
|
| I appreciate any help.
|
| regards,
|
| ralph
|
|
|
|
 |