I have an internal application which uses URLs with query string parameters. Some of these parameters represent the actual Database-IDs (I know bad practice - subject to sql injection). Updating every screen to use encrypted parameter(s) is a very lenghty
process. Is there a way to encrypt/decrypt these parameter(s) without changing the screens. I prefer some approach where the request parameters are encrypted at the user and then decrypted at the server end automatically. The application is .net 2.0 running
on IIS 6.0.
...
Go to the complete details ...