RE: Prevent security bypass

["Vinny Bedus" <vbedus () BitChangers com>]

Chris,
You could create an ISAPI filter that would do the trick.  You basically
could have the ISAPI filter check for the existence of some
authentication cookie, etc.  There may already be existing ones out
there as well.

You could also use Site Server's authentication component, or commerce
server should be able to do the trick (both very expensive solutions).

Hope it helps.

Vinny Bedus
http://www.BitChangers.com/

-----Original Message-----
From: David Cameron [mailto:dcameron () itis-now com] 
Sent: Tuesday, February 04, 2003 5:50 PM
To: webappsec () securityfocus com
Subject: RE: Prevent security bypass

They are the client so they control the client side code. Javascript,
VBScript and any other client side solutions will only stop the casual
browser, no more.

regards
David Cameron
nOw.b2b
dcameron () itis-now com

> -----Original Message-----
> From: Igor Guarisma [mailto:iguarism () yahoo com]
> Sent: Wednesday, 5 February 2003 8:43 AM
> To: 'webappsec () securityfocus com'
> Subject: Re: Prevent security bypass
>
>
> There might be a way if you use cookies and
> JavaScripts
>
>
> -----
> Igor Guarisma
> Universidad Centra de Venezuela
> Facultad de Ciencias
> EScuela de Computación
>
>
>  --- Chris Neil <Chris.Neil () abs-ltd com> escribió: > I
> am new to this mailing list and so hope this
> > conforms to the guidelines as
> > I read them.
> >
> > How do people address the issue of non-authenticated
> > users requesting html
> > pages directly from a site without logging in?
> >
> > FYI. This is an IIS server. Our asp pages check the
> > user is logged in, but
> > with html pages we cannot.
> > My only idea so far is to convert all our html pages
> > to asp. Is there
> > anything less drastic?
> >
> >
> > Chris Neil
> >   Security Officer
> >   Chris.Neil () abs-ltd com
> > -------------------------------------------
> > ABS 
> >   Tel:     +44 (0) 1993 771221
> >   Fax:    +44 (0) 1993 775081
> > -------------------------------------------
> >  
>
> =====
>
>
> _________________________________________________________
> Do You Yahoo!?
> Información de Estados Unidos y América Latina, en Yahoo! Noticias.
> Visítanos en http://noticias.espanol.yahoo.com