Yeah - but if server security is sound on your web server the unwanted
parties will not be able to access the web files using frontpage - asp, xml,
html or otherwise  (unless you pass passwords using clear text and without
decent encryption so they can get your password whenever they want to!!!!

Nigel

-----Original Message-----
From: Rob [mailto:rob@m...]
Sent: 18 January 2001 17:56
To: Security_asp
Subject: RE: Security, Encryption, Urgent, Please help


I have this same issue.  My solution was to use include files and put them
in a folder with access rights for only the system.
when iis compiles the asp, it accesses the include folder at compile time,
yet is unavailable if anyone tries to "suck down" your site.

you may be told that asp files are safe because they spit out the html, but
we both know that front page will "suck down" entire sites, asp and all.
asp pages ARE NOT secure in this matter.

I had the above solution running at one time, then hooped myself somehow and
it failed.  I didn't have time to find the solution again.


Rob
Developer, Web Administrator
SQL Administrator, Technical Support

(xxx) xxx-xxxx

www.MarketWebSolutions.com
New! Application Service Provisioning
Need affordable and easy to use provincial,
national and/or global access for your
business applications?
We have the perfect solution!
call  xxx xxx-xxxx  or visit:
www.marketwebsolutions.com/ASP/



-----Original Message-----
From: Security_asp digest [mailto:security_asp@p...]
Sent: Thursday, January 18, 2001 1:02 AM
To: security_asp digest recipients
Subject: security_asp digest: January 17, 2001


SECURITY_ASP Digest for Wednesday, January 17, 2001.

1. Security, Encryption, Urgent, Please help

----------------------------------------------------------------------

Subject: Security, Encryption, Urgent, Please help
From: "Ralph" <ralph_wolfe@h...>
Date: Wed, 17 Jan 2001 11:56:06 -0000
X-Message-Number: 1

Dear Sir/Madam,

I have developed an ASP application of which I wish to protect the sourec
code of. I would have buitl the system around DLL's however due to
time-constraint was unable to and using Microsoft's Script Encoder is a no
no (very weak encoding architecture). I was hoping if anyone knew another
way of encrypting the files maybe via a component or a specific tool.

I was going through a forum in regards to my encryption query and found an
old answer ot it. The author suggested to actually created program that
would encrypt and decrypt on demand and to ensure copyright it would only
work on that particular registered machine. Is this possible?

I appreciate any help

Thank you,

ralph