Thanks for your answers. Isn't is useful to salt-hash username?In that case attacker can not understand which record corresponds to which user. Doesn't it make the job harder for attacker? Another point is that we implement all algorithms for hashing and also combining password and salt in code , as you know , .Net code is easily decompiled and in case of using a protector like XenoCode , It is still possible to access program code , so If attacker can read code , he will understand everything about algorithm and the way we combine password and salt , what is your suggestion?

Hi all , As you know , when implementing salted hash technique , we go through the following steps: 1)Generate a random salt using classes in Cryptography namespace. 2)Get Password 3)combine password and salt and hash it 4)Storing the salt in a field called SALT. 5)Storing the hashed value in a field Called Password Also we have a field called Username. When Authenticating , we follow these steps: 1)Get Username 2)Get Password 3)Combine entered password with salt in database 4)Hash it and then compare it to Password 5)If both matches , the user is valid. My question is that is it possible to Store salt inside password field instead of creating a seperate field for salt?So if attcker breaks into DB , he cannot extract the salt value and will not know what salt is. And another question is that is it a good idea to also Salt-Hash username?If yes , how do you implement this? Note that I use a uniqe salt for each password. Thanks in advance.

modified on Thursday, September 18, 2008 12:49 PM

Thanks , but Is there any alternative solution?

Hi all , I have a Form object which is added to a Panel , Is there any way to change the opacity of this form after becoming the child of panel? I searched through net , but couldn't find any solution . Thanks in advance .

Thanks But , I had made entire zone(My Computer,Local Interanet , Untrusted sites,Internet , Trusted Sites) to FullTrust and also Code Access Security for All_Code of Enterprise,Machine and User Level to FullTrust before , Note : I don't get security exception , I receive the following error : " myAppName has ecountered a problem and needs to close , sorry for inconvenience ....."

modified on Thursday, December 27, 2007 12:53:19 AM

Hi all , I have a .Net Application that is going to be used in a workgroup environment , I installed the app on the server machine and the suftware runs successfully and connects to sql server with no problem , I also installed prerequisites such as .Net framework 2.0 on lient computer and shared the app folder which is located on server machine . on client machine , When I want to run the app from UNC FileShare I get fatal error that asks to send error to microsoft , but when I copy the entire folder from UNC FileShare to local client , the app connects to server successfully and user can work with software. What's is the problem in your opinion? Note : I also made the shared folder FullControl and also adjusted Entire Zone in Microsoft .Net Framework 2.0 Configuration to FullTrust(On Server machine) , What causes this problem you think? Thanks in advance (Emergency!)

Thanks , another point is that when I use Online Option , Where the application.exe.config for each client is saved? as I told you that my app connection string is stored in app.config? and in Online Only option , the app is not cached in clinet machine anymore , Am I Right? Thanks a lot , my friend :)

Thanks agagin , My app is based on SQL Server 2005 , so if the server is down , running the application in offline mode will be useless , Am I Right? And when I use Online Only option , the "ApplicationName.application" runs the latest version , Am I Right?

Hi all , Is it possible to change crystalreportviewer Status Bar Texts or tooltips? Thanks in advance

Thanks

Michael Sync wrote:

No. You don't need to worry about the updates but we don't use that option in our projects.

Why?

Thanks a lot for your great help ,

Michael Sync wrote:

then create the virtual directory

Is it obligatory to create a virtual directory? Or it is enough to share that publish folder on server?

Michael Sync wrote:

The main reason why we need megaui tool is that it allows us to add the dlls without republishing the application

What is the problem if we republish the app?The clickonce deployment checks the app for updates when the client runs it , isn't it?And if we use "The application is available online only" , do we need to be worry about updates?because the app always runs the latest version directly from server?! Also my app has some fonts required to be installed and some files to be copied to client Application Data Folder , I think I should create a windows installer setup for that , yes? Thanks a lot again

I'm not developing the application in the environment that the server is located , I'm at home and working on project and the server pc is in the customer office somewhere else, In this situation how can I deploy the app? And would you please talk more about MageUI and how to access it? Thanks in advance ,

No idea?

Thanks , but Where is the client deployment cache folder located? and another issue is that Should Visual Studio be installed on the server machine or I can publish my app in my pc and then transfer it to Server pc and share it for other clients? Thanks in advance

Hi all , My .Net App ConnectionString(used to connect to sql server) is stored in app.config and is protected , now I'm gonna use clickonce deployment to publish my app on workgroup environment , also I have used "The application is available Online only" Option in clickonce deployment , How can I set connection string for my clients? Note that all clients are going to connect to sql server using the same SQL Server Login , Thanks in advance

hi all , How can I do something thay when user does not enter anything in maskedtexbox , it return string String.Empty? For example if my mask is "00/00/00" , if user does not enter anything , the text property returns "__/__/__" , ????? Thanks

hi all , I want tp populate a combobox with all SQL Server supported currency symols , where can I find this list and how can I read/write money values from a .net app? Thanks in advance

Hi all , Is it possible to reset an identity field in order to start from the seed? Thanks in advance ,

Hi all , What's the best solution to create a custome identity/autoincrement field in sql server 2005? thanks in advance ,

Thanks , But : Is there any other solution>