Friday, August 17, 2007

Limiting the Web Services Protocols

Open Web.Config

webServices
protocols
remove name="HttpPost"
remove name="HttpGet"
remove name="Documentation"
add name="HttpSoap"
/protocols
/webServices>

If you set web.config like this, it will allow only Soap protocol to access the web services. Through normal Internet Explorer, you cannot pass any parameters to the web services. Better security for production web services..

No comments: