Hi
I would like to ask the communioty about the following
on CODE BEHIND security.
I have a page that on load
Method #1
========
Code behind on page load :
1. Generates a randomnumber
2. Random number is then encrypted with RSA
3. Stored in a Session variable
When the user presses a BUTTON on the form
1. The page will generate randomnuber #2 and compare
2. It against the randomnumber in the session variable
(After decrypting it)
Is is ok to store the RSA keys in the code behind?
or should it be obtained via a database call?
cam code behind ever be compromised in this
implementation?
Method #2
Code behind on page load :
1. Random number is generatred and Stored in Sql Database
2. When User presses button on web page
3. the button code behind geneates another
random number and compares it ...
Go to the complete details ...