外文翻譯----論維護(hù)asp應(yīng)用程序的安全性-jsp程序-資料下載頁
2025-05-12 11:21本頁面
【導(dǎo)讀】動(dòng)態(tài)的交互式Web服務(wù)器應(yīng)用程序。ASP使用的ActiveX技術(shù)基于開放設(shè)計(jì)環(huán)境，ASP還可利用ADO方便快捷地訪問數(shù)據(jù)庫,從而使得開發(fā)基于WWW的應(yīng)。用系統(tǒng)成為可能。但是，千萬不要輕視正確配置安全設(shè)置的重要性。序不被未授權(quán)的用戶訪問和篡改。當(dāng)擁有WindowsNT有效帳號(hào)的用戶試圖訪問一個(gè)有權(quán)限限制。的文件時(shí)，計(jì)算機(jī)將檢查文件的訪問控制表。該表定義了不同用戶和用戶組所。而且，一定要對(duì)應(yīng)用程序的文件應(yīng)用統(tǒng)一的NTFS權(quán)限。方式，Web服務(wù)器權(quán)限應(yīng)用于所有用戶，并且不區(qū)分用戶帳號(hào)的類型。應(yīng)用程序的腳本映射保證了Web服務(wù)器不會(huì)意外地下載asp文件的源代碼。這就是說，帶有相應(yīng)的cookie的HTTP請求被認(rèn)為是來自同一Web. 的訪問，Web服務(wù)器為每個(gè)SessionID指派一個(gè)隨機(jī)生成號(hào)碼。NT請求/響應(yīng)驗(yàn)證方式進(jìn)行連接。錄并將其目錄安全驗(yàn)證方式設(shè)置為WindowsNT請求/響應(yīng)式身份驗(yàn)證。方組織獲得客戶資格，第三方組織在發(fā)放資格證之前確認(rèn)用戶的身份信息。
【正文】 and operation of the way ASP pages. Unlike NTFS permissions to control the provision of applicationspecific user access to files and directories the way, Web server permissions apply to all users, and do not distinguish between the type of user account. To run for your ASP applications users, in the setting Web server permissions must be guided by the following principles: Asp file containing the virtual directory to allow read or script permissions。 of asp file and other script file that contains the virtual directory to allow read or script permissions。 to include asp files and other executive privileges to run the virtual directory of the document to allow read and executive authority. Fourth, Script mapping file Script mapping applications to ensure that the Web server does not accidentally download the source code asp file. For example, even if your asp file contains a directory set up a read permission, as long as the asp file is part of a script mapping applications, then your Web server the file will not return to the source code to the user . Fifth, Cookie security SessionID cookie to track the use of ASP Application or conversation during the visit to the Web browserspecific information. This means that the cookie with the HTTP request is considered to be from the same Web browser. Web Server Se ssionID cookies can be used to configure userspecific session information with the ASP application.
畢業(yè)設(shè)計(jì)相關(guān)推薦
鄂ICP備17016276號(hào)-1