G
geekboy0001
If I create a .asmx file with methods to be used with Atlas, those
files will go into my website in a directory. That means they can be
accessed by anyone who can hit the URL. They will see the WSDL and
just start calling methods. They could run my AutoComplete methods
which take a partial name string and return matching names of people in
my database, etc. What is the best way to secure these web services
without passing a user ID and password in every method call?
files will go into my website in a directory. That means they can be
accessed by anyone who can hit the URL. They will see the WSDL and
just start calling methods. They could run my AutoComplete methods
which take a partial name string and return matching names of people in
my database, etc. What is the best way to secure these web services
without passing a user ID and password in every method call?