Hi All
My clients want using web service(asmx) as data layer, and all db based operation is done by passing parameters to different web service methods.
My question is that, how can I make the websevice only accessable by my website?
What I've done so far includes
1. web serive will use SSL to communicate with web site.
2. Web service checks SoapHeader for id and password to make sure the requirements is made by my website.
3. HTTP GET and HTTP Post is disabled for web service
PS. I heard that iis could be configured to respond to specific ID address only, maybe I need to do so?
what else can I do to make it safer? any suggestions will be welcome
thanks a lot
...
Go to the complete details ...