Hi all,
I have developed a web portal using Asp.Net/Sql Server, where people are able to create their own web pages, participate in forums, etc. Now I wonder about security features. I only use stored procedures, so I believe that sql injection attacks are not a problem. The textboxes people can use have the default security limitations, so some tags aren't allowed (I think it's "<" and ">", for example).
The users' passwords are encypted, using a mechanism I came up with.
Is this enough? What other concerns are there? The web site is not a "high-risk" place, that is it's going to be a friednly place for hobbyists. The information that people put there is not going to be very secretive, so my major concerns are (probably) things like sql injections and other attacks that corrupts the db, spreads viruses or what do I know.
Thanks for any pointers. :-)
/Pettrer
...
Go to the complete details ...