I love keeping information in my Web.config file's appSettings section; it lets me change the behavior of a Web site just by changing values in a text file. I especially like keeping connection ...

One of my clients, for instance, has a Web-based product installed at several of their customers' sites. Options in the web.config file let customers configure how much JavaScript is used in the ...

The web.config file is application-specific and is created by default when you create a web application or a web site in Visual Studio. Note that there is another config file named aspnet.config ...

Anyone with read access to the Web.config file could access the authenticated Web application. It is possible to store the SHA-1 or MD5 hash of the password value, rather than storing the password ...

Likewise, the Machine.config system file provides ASP.NET configuration settings for the entire Web server and forms the base settings for Web.config files used within an ASP.NET application.

That's what we are doing now with powershell (rather web.config references a /config/appsettings.config file). Swap them out as part of the build. Environment config files themselves sit in a ...

For the web.config to be useful, the application has to be able to decrypt it. If you were to store the decryption key in a file next to web.config, obviously an attacker would just grab that file ...

Registering your handler The mapping information for the HTTPhandlers are available in the configuration files. Here’s how a section of your machine.config file might look like.

The C# code when the look at the app.config during runtime to grab the proper datasouce. What I have found is that this is easy to do with an .EXE file but apparently a lot messier using a DLL.

2. Leaving Tracing Enabled in Web-Based Applications The trace feature of ASP.NET is one of the most useful tools that you can use to ensure application security by debugging and profiling your ...