Security database

Question

User-1628192848 posted

Hello all

maybe this question is many time posted

I need good information about a SQL database that put users and password. My problem is that I must have it for different sites on the same server. I have IIS8 and SQL server 2014. I know the tool to create the database but info is not complete good. I need to know how create the database so that it is only for that site and not infected for other. I mean one site have his security as the other and both running on the same server use different SQL database. Hope some can give me a nice answer with good documentation

thanks

Answer 1

User614698185 posted

Hi Stefan Groenen,

I mean one site have his security as the other and both running on the same server use different SQL database. Hope some can give me a nice answer with good documentation

If your application needs to use SQL authentication, you need to consider the following key points:

1) Use a least-privileged account to connect to SQL.

2) Credentials are passed over the wire so they must be secured.

3) The SQL connection string (which contains credentials) must be secured.

For more information about Securing Data Access in ASP.NET, please see:

https://msdn.microsoft.com/en-us/library/ff649357.aspx

https://msdn.microsoft.com/en-us/library/ms178375.aspx

Best Regards,

Candice Zhou

Answer 2

User-1628192848 posted

This is not what I mean

I need to login to webpage, so the persons must be stored in correct database and also roles must be created. How to create those tables and make the correct link in your login page;

I don't find the good documentation for MVC5. All work with MDF table but I need info that works with an SQL database that is on a real SQL server not on sql express

Answer 3

User614698185 posted

Hi Stefan Groenen,

I think you want to save the site's use information into database when the Users are registered on the site. You could refer to the following links:

http://weblogs.asp.net/jongalloway/simplemembership-membership-providers-universal-providers-and-the-new-asp-net-4-5-web-forms-and-asp-net-mvc-4-templates

http://www.asp.net/web-forms/overview/older-versions-security/membership/creating-the-membership-schema-in-sql-server-cs

https://azure.microsoft.com/en-gb/documentation/articles/web-sites-dotnet-deploy-aspnet-mvc-app-membership-oauth-sql-database/

Best Regards,

Candice Zhou

Answer 4

User-1628192848 posted

That's already a good start but some are again with an MDF file what I not like to use and also not use azure

Answer 5

User614698185 posted

Hi Stefan Groenen,

I provide the tutorials about creating Membership Schema in SQL Server, the other database has the same principle. You could use then according to specific situation.

For more information, please see: http://www.asp.net/identity/overview/getting-started/aspnet-identity-using-mysql-storage-with-an-entityframework-mysql-provider

https://dev.mysql.com/doc/connector-net/en/connector-net-tutorials-asp-roles.html

Best Regards,

Candice Zhou