If I can create a class that encrypts strings and also decrpts strings via imports system.security .net 2.0 dll. If I can use it the code, why cant the hackers...
So you have encrypt/decrypt class in the app_code folders, so I guess this is compiled into one big DLL when the asp.net project is published..( i am a newbie).
SO I have a key in my codebehind aspx/ascx like "hjgflahfbf blhfbjhbjj252h5b21hg2452lnbjhgv" that means "MyPassword"
If a hacker gets this key and decompiles my project ( easy enough), wont he just use my decrypt class code to determine "Mypassword"...all over rover, my project is hacked ! Sure it may slow them down, but if the class is in my project isnt that giving the hackers the method to work out mypassword...???
...
Go to the complete details ...