RE: Prevent security bypass

Chris,
You could create an ISAPI filter that would do the trick. You basically could have the ISAPI filter check for the existence of some authentication cookie, etc. There may already be existing ones out there as well.

You could also use Site Server's authentication component, or commerce server should be able to do the trick (both very expensive solutions).

Hope it helps.

Vinny Bedus
http://www.BitChangers.com/

-----Original Message-----
From: David Cameron [mailto:dcameron@itis-now.com] Sent: Tuesday, February 04, 2003 5:50 PM To: webappsec@securityfocus.com
Subject: RE: Prevent security bypass

They are the client so they control the client side code. Javascript, VBScript and any other client side solutions will only stop the casual browser, no more.

regards
David Cameron
nOw.b2b
dcameron@itis-now.com

> -----Original Message-----
Received on Tue Feb 4 21:45:59 2003

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek