w3schools
Search W3Schools :  
  
HOME HTML CSS XML JAVASCRIPT ASP PHP SQL MORE...   References Examples Forum About

Web Building Security

« Previous Next Chapter »

You are offering your IP address to the entire world at this very moment.

Make sure you are not offering access to your private data at the same time.


YOUR IP ADDRESS IS PUBLIC

Accessing the Internet is a security risk.

When you are connected to the Internet, an IP address is used to identify your computer.  If you don't protect yourself, this IP address can be used to access your computer from the outside world.

A fixed IP address is a larger security risk.

If you're using a modem with a dial-up connection, you will get a new IP address every time you connect to Internet.

With an ADSL or cable connection users sometimes keep the same IP address for several months, this represents an increased security risk.

If you have a fixed IP address, you give Internet hackers all the time they need to search for entrances on your computer, and to store and share (with other hackers) information they find on your computer.


Your Network Shares

Personal computers are often connected to a shared network. Personal computers in large companies are connected to large corporate networks. Personal computers in small companies are connected to a small local network, and computers in private homes often share a network between family members.

Most often networks are used to share resources like printers, files and disk storage.

When you are connected to the Internet, your shared resources can be accessed by the rest of the world.


A Common Windows Security Problem

Unfortunately, many Microsoft Windows users are unaware of a common security leak in their network settings.

This is a common setup for network computers in Microsoft Windows: 

  • Client for Microsoft Networks
  • File and Printer Sharing for Microsoft Networks
  • NetBEUI Protocol
  • Internet Protocol TCP/IP

If your setup allows NetBIOS over TCP/IP, you have a security problem:

  • Your files can be shared all over the Internet
  • Your logon-name, computer-name, and workgroup-name are visible to others

If your setup allows File and Printer Sharing over TCP/IP, you also have a problem:

  • Your files can be shared all over the Internet

Computers that are not connected to any network can also have unsecure network settings, because the settings were changed when Internet was installed.


Solving the Problem

For Windows 2000 users:

You can solve your security problem by disabling NetBIOS over TCP/IP:

  • Open Windows Explorer
  • Right-click on My Network Places
  • Select: Properties
  • Right-click on Local Area Network
  • Select: Properties
  • Select: Internet Protocol TCP/IP
  • Click on Properties
  • Click on Advanced
  • Select the WINS tab
  • Select Disable NetBIOS over TCP/IP
  • Click OK

If you get the message: "This connection has an empty......", ignore the message and click on YES to continue, and click OK to close the other setup windows.

You should restart your computer after the changes.

For Windows 95, 98, or ME users:

You can solve your security problem by disabling NetBIOS over TCP/IP:

  • Open Windows Explorer
  • Right-click on My Network Places
  • Select: Properties
  • Select: Internet Protocol TCP/IP
  • Click on Properties
  • Select the NetBIOS tab
  • Uncheck: Enable NetBIOS over TCP/IP
  • Click OK

You must also disable the TCP/IP Bindings to Client for Microsoft Networks and File and Printer Sharing:

  • Open Windows Explorer
  • Right-click on My Network Places
  • Select: Properties
  • Select: Internet Protocol TCP/IP
  • Click on Properties
  • Select the Bindings tab
  • Uncheck: Client for Microsoft Networks
  • Uncheck: File and Printer Sharing
  • Click OK

If you get a  message with something like: "You must select a driver.........", ignore the message and click on YES to continue, and click OK to close the other setup windows.

If you still want to share your Files and Printer over the network, you must use the NetBEUI protocol instead of the TCP/IP protocol. Make sure you have enabled it for your local network:

  • Open Windows Explorer
  • Right-click on My Network Places
  • Select: Properties
  • Select: NetBEUI
  • Click on Properties
  • Select the Bindings tab
  • Check: Client for Microsoft Networks
  • Check: File and Printer Sharing
  • Click OK

You should restart your computer after the changes.


Protect Your Server

iisPROTECT provides a complete range of password protection, authentication and user management solutions:

iisPROTECTasp: Protect areas of your web site and require username and password. Grant/deny any users/groups on a per resource basis. Extensive Web Interface for user/group admin, use any DB backend, store custom data, set user start/end dates, email users, audit logins.

iisPROTECT: Protect all web site files including images, databases,html,ASP etc. Protect entire directories, users / groups independent from Windows accounts, complete web administration, does not require cookies or any programming. Complete turn key solution.

iisPROTECTquota: All of the features of iisPROTECT plus: prevent concurrent logins and password cracking attempts, set quotas on hits, logins, kb per user.

Read more about iisPROTECT


« Previous Next Chapter »


Altova® XMLSpy® - The industry-leading XML editor!

Altova XMLSpy

Whether you're new to XML or already an advanced user, the user-friendly views and powerful entry helpers, wizards, and debuggers in XMLSpy are designed to meet your XML and Web development needs from start to finish.

  • XML editor
  • Graphical XML Schema / DTD editors
  • XSLT 1.0/2.0 editor, debugger, profiler
  • XQuery editor, debugger, profiler
  • XBRL validator & taxonomy editor
  • Support for Office Open XML (OOXML)
  • Graphical WSDL editor & SOAP debugger
  • Java, C#, C++ code generation
  • And much more!

Download a free trial today!

  Altova XMLSpy

WEB HOSTING
Best Web Hosting
PHP MySQL Hosting
Top 10 Web Hosting
UK Reseller Hosting
Web Hosting
FREE Web Hosting
Top Web Hosting
Windows Hosting
WEB BUILDING
Download XML editor
FREE Flash Website
FREE Web Templates
Website Monetization
FLIGHT TICKETS
Find the cheapest flight
to any destination now!
EDUCATION
US Web Design Schools
HTML Certification
JavaScript Certification
XML Certification
PHP Certification
ASP Certification
STATISTICS
Browser Statistics
Browser OS
Browser Display
W3Schools.com HOME | TOP | PRINT | FORUM | ABOUT
W3Schools is for training only. We do not warrant the correctness of its content. The risk from using it lies entirely with the user.
While using this site, you agree to have read and accepted our terms of use and privacy policy.
Copyright 1999-2009 by Refsnes Data. All Rights Reserved.