dll file loaded on server for security purpose

Question

Hi all,

I have made an web application, for security purpose i have uploaded aspx page and dll of aspx.cs file on server, i want to know whether these dlls can be read easily by others or not.

Thanks,
Vijay

Jean Paul · Answer

Hello Vijay, The dll files of the aspx pages should be stored in the bin folder. (you can try this by creating a new web site and publishing to local IIS) As the dll files are in bin folder and the bin folder is a special folder in IIS that is not shared outside, I think there is no activity to be done. For you curiosity, you can check with http handlers which are used to handle custom request extensions. Also about making the .Net assemblies more protected against disassembly/reverse engineering you can refer to .Net Obfuscators. Special folders in IIS: http://msdn.microsoft.com/en-us/library/t990ks23.aspx Regards, Jean Paul

Jean Paul · Answer

You're Welcome.. Vijay

Vijay Yadav · Answer

Hi Jean, Thanks for your information, it is good. Regards, Vijay

Vijay Yadav · Answer

Hi Jean, Thanks for your reply, as you said that i need to add some additional mechanism to prevent .dll extension file can you tell me how to do it.. or do you have any idea how to do it. Thanks, Vijay

Jean Paul · Answer

The dll files will be having the compiled code of .cs file and it will give us pre-compilation advantage. The dll files uploaded outside the bin folder will be able to accessible to the users by specifying the dll name along with url. (but the user need to know the exact dll files) Probably you need to add additional mechanism to prevent .dll extenstion files non-downloadable (like .cs)