Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 4

Application security - Specific to security concerns for an application that are independent from the underlying operating system, or surrounding infrastructure. Pertains to the design / architecture, source code, patching and maintenance cycle, or deployment and configuration of this software.

0 votes

How to implement non-password authentication in a web site

I have met a good enough and simple authentication process of this service. It uses number of your mobile to send one time password via SMS.
garik's user avatar
  • 1,292
3 votes

What is the right way of storing database connection strings from the security point of view?

As an option, try to use application role to access sql server Benefits: Regular network administrators can manage data access without needing to consult the database administrator (DBA), simply by …
garik's user avatar
  • 1,292
13 votes
7 answers
3k views

Is an IP address blacklist good practice to prevent website attacks?

My website has a blacklist of IP addresses. The web application, in some way, detects all invalid, suspicious influences to it and remembers IP address and denies any requests from that IP address. …
garik's user avatar
  • 1,292
16 votes
3 answers
3k views

ASP.NET MVC Security Check List

I am planning to start a new web site on ASP.NET MVC 2 (3). Does anybody have a full (if possible) check list of actions or approaches I should go through to avoid most security issues?
garik's user avatar
  • 1,292