Classic ASP Discussion - How secure is ASP?

Print Page | Close Window

How secure is ASP?

Printed From: Web Wiz Forums
Category: General Discussion
Forum Name: Classic ASP Discussion
Forum Description: Discussion on Active Server Pages (Classic ASP).
URL: https://forums.webwiz.net/forum_posts.asp?TID=4925
Printed Date: 30 March 2026 at 3:03pm
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com

Topic: How secure is ASP?

Posted By: sprychun
Subject: How secure is ASP?
Date Posted: 11 August 2003 at 3:39am

How secure are session variables and variables in general? Can someone use ASP to simply read all currently active variables such as names and passwords for a specific page, or is ASP much more secure like regular VB or C programming? If variables are insecure, is there a specific way or kind of variable / database system to use to keep passwords and such hidden?

Replies:

Posted By: sprychun
Date Posted: 11 August 2003 at 3:42am

If that post was too confusing (the more I read through it the more confusing it sounded) Essentially I want to make sure that the variable that I store from a database for a password cannot be seen by anyone else using hacking or that kind of thing. And, what is the best way to secure a database, just directory properties on the server?

Posted By: WebWiz-Bruce
Date Posted: 11 August 2003 at 3:58am

If you are using an Access database then you should place it on a folder outside of your web site so that it is not accessible through a web browser so that hackers can not download your database.

If you are using SQL srever as the database it could be possible to read in the password using packet sniffing tools as the data is passed across the network, so if you really wanted to be secure you could encrypt the password.

You should be fine with storing passwords in a ASP variable, don't use cookies through.

-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting