what's the best way to build...

[weee]

a secure administration system?

[PeOfEo]

lol...thats a rather vague term. I would reccomend doing some HTTPS in asp.net, md5 and the like. There are a number of good articles about security in asp and asp.net on www.4guysfromrolla.com though.

[buntine]

Full of detail;)

It takes ALOT of work. Content Management Systems are one of the biggest and probably the hardest web applications to develop. I have recently finished a CMS for a company and it took over 4 months to complete.

Very tedious stuff... But still a whole lotta fun.

[PeOfEo]

humm but we are talking mainly about an admin area of a site where news, and basically all of the content can be controled? Security is going to be the key.

[Ribeyed]

Hi,

funny comment buntine ;)

PeOfEo

Content Management Systems = Admin pages, mate :)

Weee,
its going to depend on what content your are administering. Simple text based content can be secured with a database table with passwords and usernames, a login/log off page, use of cookies or session variables and an if statement rapped around the complete code for your page.
If sensitive data i.e. credit card numbers, people personal details the best way would to use a SSL certificate. They can be bought in various strengths of encryption.
Hope this helps

[PeOfEo]

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/secnetlpMSDN.asp?frame=true

[buntine]

Hi, just to further the last 2 posts.

Using SSL certificates is a good idea. Though, do a bit of research before you commit to one dealer as prices vary.

Also, there are several books on the market which go into detail about creating CMS with ASP. Check out www.amazon.com if you dont have a PC book store in city/town.

Regards.

[PeOfEo]

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetAP06.asp explains cryptography + certifs