Hi all,
I have made an web application, for security purpose i have uploaded aspx page and dll of aspx.cs file on server, i want to know whether these dlls can be read easily by others or not.
Thanks,
Vijay
Loading
Know the answer? Post it — somebody with the same question will find it here.
Sign in to answer this question
It is the same account you read, post and publish with — and you will come straight back to this page.
Jean PaulPosted Jan 25, 2011, 4:03 AM
The dll files of the aspx pages should be stored in the bin folder.
(you can try this by creating a new web site and publishing to local IIS)
As the dll files are in bin folder and the bin folder is a special folder in IIS that is not shared outside,
I think there is no activity to be done.
For you curiosity, you can check with http handlers which are used to handle custom request extensions.
Also about making the .Net assemblies more protected against disassembly/reverse engineering you can refer to .Net Obfuscators.
Special folders in IIS: http://msdn.microsoft.com/en-us/library/t990ks23.aspx
Regards,
Jean Paul
Jean PaulPosted Jan 25, 2011, 5:16 AM
Vijay YadavPosted Jan 25, 2011, 4:51 AM
Thanks for your information, it is good.
Regards,
Vijay
Vijay YadavPosted Jan 24, 2011, 11:56 PM
Thanks for your reply, as you said that i need to add some additional mechanism to prevent .dll extension file can you tell me how to do it.. or do you have any idea how to do it.
Thanks,
Vijay
Jean PaulPosted Jan 24, 2011, 10:07 AM
The dll files uploaded outside the bin folder will be able to accessible to the users by specifying the dll name along with url.
(but the user need to know the exact dll files)
Probably you need to add additional mechanism to prevent .dll extenstion files non-downloadable (like .cs)