I used ASP.NET Web site Administration Tool to set up security. I am
using Login control on my Form. While analyzing tables, I noticed that
the email of the user is stored in plain text and not in encrypted
format. Because of this, the security of the application is left in
the hands of the answer to the Security Question. If that is small and
weak, the security of the application can be easily bypassed.
using Login control on my Form. While analyzing tables, I noticed that
the email of the user is stored in plain text and not in encrypted
format. Because of this, the security of the application is left in
the hands of the answer to the Security Question. If that is small and
weak, the security of the application can be easily bypassed.