In this article, I’m going to present asymmetric encryption and decryption implementation using the RSA algorithm provided by the cryptographic service provider (CSP). for simplicity let's consider there are only three objects/people involving in this transaction. (for this application, I implement one-direction transactions only) Bob (Reciever) Alice (Sender) Eve (Eavesdropper) …

There can be situations where we have to use both windows authentication connections strings and SQL server authentication connection strings. for such situations, we can do an impersonation approach. Example ConnectionStrings can place like the following This is the Impersonate Class we can use for this App settings values need set like the following for the Windows User. So We have to update our source code on the Windows authentication access side like the following, SQL authentication side not require any upgrade.

in this article, I’m going to show how to inject the entity framework’s backend service layer method using Autofac in a .NET console application. — Below diagram showing this application structure overview. This is the dataset using for the demonstrations.

#CSharp #Log4Net #Autofac #ConsoleApplication #DependancyInjection Here I’m going to share the simplest way we can use Autofac to inject the log4net log instance and ensure that the Log property will not be null at run time. …

It's a common business case in most of the applications that need to upload to file(s) to server or database. so in this article, I want to discuss/share about how to tackle insecure file upload scenarios. Type of file uploading scenarios Static file(s) directly upload to server(on-premise or cloud) Static…

This is about log forging in ASP.NET MVC Log Forging is Writing unvalidated user input to log files that can allow an attacker to forge log entries or inject malicious content into the logs. Log forging vulnerabilities occur when: Data enters an application from an untrusted source. The data is…

Using these steps we can convert web.configs to encrypted strings with the assist of .NET framework given tools. For development and we don’t have any sensitive information on our dev machines, then there’s no much point of using this practice other than for testing. However on a live server or…