I am trying to figure out what approach to take to secure my website, and want to make sure I am considering the right things. In particular I want to understand the approaches and whether I am considering the right things relative to bot-generated intrusions, and deliberate intrusions.
About the website:
A. The CreateUser Wizard of asp.net will be used to allow someone to create an account by providing a username and password. This well all be managed by the membership bits of asp.net using whatever security built-in with that.
B. My intention (havent figured out how to do this part yet) is that someone who has created an account must then pay a $25 fee to become a Paid Member, and there will be some code-behind step that tests a user who has entered a valid username and password to see if they are Paid Members. If not they would be directed to the MakePayment page, otherwise they can proceed into the site.
C. Paid members will enter ...
Go to the complete details ...