Hi
I am in need of some help with security here..
I am using Win2003 Server Sp2, SQl 2005 server
on the same machine
Lets say I must keep my ASP.NET web site using only HTTP and
on the asp.net page in the code behind,I generate a unique GUID
after which I write to an SQL 2005 database server on the same IIS server
storing the user ID and the GUID..
The user does not need to know the GUID only a popup message
Appears that they have won say a box of cakes at a certain pastry
store.
The user goes to the store where the sales clerk looks up a list
of user IDs and redeems the coupon with a box of pastries.
If I am unable to use SSL, how can I protect the ASP.net page
from hackers intercepting the POST command and generating
hundreds of coupons?
I heard about some 'anti-fogery' token from Microsoft .. will
this solve the problem? How would you secure this
transa ...
Go to the complete details ...