When we stand, I do not know the safety of the security did not!
General website that does not talk about security, but if it is e-commerce that,
That is not the end, so we propose that we do not just stand for safety
Then I'll talk about what I did when I met some problems: (just some personal opinion, certainly can't say so professional, also can not and other people (master) so to the point)
First: Landing security
Do not know that the attention has not, in the landing, if you do not restrict some characters, your landing there is no security to say, yesterday I encountered this problem, if you want to know the reasons for this see (lonely eldest brother wrote 0): http://www.2yup.com/asp/forum/ branch.asp?pid=0039071#f0039071
Second: the security after landing
If you leave the user alone, there is no limit, so there is no way to talk about security. So use a variable to limit the user (I am using: Add a sentence in front of each page
If session ("useronline") = "" Then
Response.Write "You are not a valid user, click Please launch"
Response.Write "<a href= ' # ' onclick= ' Window.close () ' > Launch </a>"
Else
' Write your own program.
End If
Session ("Useronlie") =user_name This is a landing write a word
Used to hold the user's information.
Temporarily say these two points other later met again (I am not)
^_^
