Professional ASP.NET 3.5 Security, Membership, and Role Management with C# and VB
Professional ASP.NET 3.5 Security, Membership, andRole Management with C# and VBASP.NET security covers concepts such as Web security, developing in partial trust, forms authentication, and securing configuration—just to name a few—all integral components to helping developers ensure reliable security. Addressing the ASP.NET developer's security view, this book offers detailed information on every major area of ASP.NET security that you'll encounter when developing Web applications. The book covers security in ASP.NET in general and includes the new additions and changes in ASP.NET 3.5.Microsoft MVP Bilal Haidar covers the security highlights and new features of Internet Information Services (IIS) 7.0, and offers a detailed look at the request lifecycle, as well as clear explanations of AJAX authentication and authorization. You'll explore ASP.NET Session State, Membership, and Role Management so you will have a solid ability to develop secure and robust Web sites with ASP.NET 3.5 in VB or C# code.What you will learn from this bookBest practices for developing secure ASP.NET Web applications, including protecting against AJAX threatsHow to securely access ASP.NET configuration files for reading and editing purposesTechniques for integrating security between ASP.NET and classic ASPVarious ASP.NET trust levels in both development and hosting stagesThe security context associated with the processing of the request by the different modules of ASP.NETThe security features for forms authentication and session stateHow to use Active Directory with the Membership and Role Manager featuresWho this book is forThis book is for ASP.NET developers who have experience with developing ASP.NET Web applications in either VB or C#.Wrox Professional guides are planned and written by working programmers to meet the real-world needs of programmers, developers, and IT professionals. Focused and relevant, they address the issues technology professionals face every day. They provide examples, practical solutions, and expert education in new technologies, all designed to help programmers do a better job.