Home > Ask the Software Quality Experts > Application Security Questions & Answers > Creating password recovery mechanisms in ASP.NET
Ask The Software Quality Expert: Questions & Answers
EMAIL THIS

Creating password recovery mechanisms in ASP.NET

Dan Cornell EXPERT RESPONSE FROM: Dan Cornell

Pose a Question
Other Software Quality Categories
Meet all Software Quality Experts
Become an Expert for this site


Software quality news and advice
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


>
QUESTION POSED ON: 30 January 2007
I would like to know whether I can build challenge/response-based password recovery mechanism using the ASP.NET 2.0 version. Is there a factory of stubs which we need to implement or are there standard implementations provided?

>
EXPERT RESPONSE

Fortunately, the ASP.NET Membership controls have this implemented out of the box. The CreateUserWizard control allows you to collect a password recovery question and answer from new users and the PasswordRecovery control allows you to display the question, verify the answer and email out the response.

Both of these controls rely on a membership provider. This means you can either use the providers available from ASP.NET 2.0, such as the SQL Server provider, or you can easily implement your own if you want to store your user information in an Oracle database or other data store that is not supported out of the box. For more information about the ASP.NET 2.0 membership provider, check out this article.

More information:


Sound Off! -   Be the first to post a message to Sound Off!


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


RELATED CONTENT
Software testing tools and frameworks
On-demand software testing service pays off for three startups
Software testing in a virtual environment
Dynamic analysis tool from Coverity looks at concurrency defects
BMC tool helps resolve problems in Java and .NET applications
Automated functional testing boosts productivity at Arizona Federal
Brief: Sigma testing tool integrates with VMware virtual lab
Borland renews Silk test suite with RIA test scripting capability
Zephyr facilitates test management
iTKO integrates testing suite with performance monitoring tool
The state of performance testing

Application Security
Application security careers have bright future
How to prevent anti-DNS pinning attacks
Open source application security testing tools
Java application security features and measures
Web application security testing basics
Password recovery with .NET 2.O using C#
Free load and performance testing tools
The most effective time to do security testing
Finding backdoor threats within applications
SPML and SAML enhance application security in different ways

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
JUnit  (SearchSoftwareQuality.com)
NUnit  (SearchSoftwareQuality.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




All Rights Reserved, Copyright 2006 - 2008, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts