Hi.
I am about to develop an asmx-webservice with features accessible to all users logged in my system from js. The data shown is from the db so I don't want any security-issues in relation to this.
Another asmx-webservice is intended to give more secure informaition about sensitive data to administrators on the network but must also be js-accessible. My idéa is to block on extern IPs but can this cause a security-breach and can I check which requests coming from which sites so I can restrict specific calls to be accessible from specific sites (www....index.aspx or www...giveSomeInformation.aspx and block any call from other sites?)
Any other idéers I should consider or something to be concerned about?
...
Go to the complete details ...