SecurityHelper Class

Contains methods for ensuring security

Inheritance Hierarchy

System.Object
  CMS.Helpers.SecurityHelper

Namespace: CMS.Helpers
Assembly: CMS.Helpers (in CMS.Helpers.dll) Version: 8.2.23

Syntax

public static class SecurityHelper

The SecurityHelper type exposes the following members.

Methods

	Name	Description
Public method Static member	EnsureCertificateSecurity	If some module allows acceptation of untrusted or expired certificate, this method register certificate validation callback.
Public method Static member	EscapeLikeQueryPatterns	Obsolete. Escapes characters for query which use LIKE pattern.
Public method Static member	GenerateConfirmationEmailHash	Generates hash for confirmation email which approves certain action (subscription to forum, password change, ...).
Public method Static member	GetMD5Hash	Returns SHA2 hash for input data.
Public method Static member	GetSafeQueryString(String)	Obsolete. Returns safe sql query string - escapes apostrophes and escapes wildcard characters _, %, [].
Public method Static member	GetSafeQueryString(String, Boolean)	Obsolete. Returns safe sql query string - escapes apostrophes and optionally escapes wildcard characters _, %, [].
Public method Static member	GetSecondsToShowScreenLockAction	Gets the time period when client should contact server to check ScreenLock state.
Public method Static member	GetSecurityAccessEnum	Gets the SecurityAccessEnum equivalent of the permission information from the given forum access encoded info.
Public method Static member	GetSHA1Hash	Returns the SHA1 hash byte array for given password string.
Public method Static member	GetSHA2Hash	Returns SHA2 hash for input data.
Public method Static member	HandleClickjacking	Adds protection against clickjacking - adding headers works only in integrated mode
Public method Static member	CheckPasswordPolicy(String, String)	Check password policy for specified password
Public method Static member	CheckPasswordPolicy(String, String, Int32, Int32, String)	Check password policy for specified password
Public method Static member	IsAutoCompleteEnabledForLogin	Returns whether Autocomplete is enabled for login usernames.
Public method Static member	IsScreenLockEnabled	Returns whether ScreenLock feature is enabled for given site.
Public method Static member	IsXFrameOptionsExcluded	Returns whether given path is excluded from adding X-Frame-Options HTTP header.
Public method Static member	LogScreenLockAction	Logs the call of this method as request for ScreenLock feature.
Public method Static member	SetSecurityAccessEnum	Gets the integer equivalent of the permission information specified by the SecurityAccessEnum.
Public method Static member	TryParseBasicAuthorizationHeader	Tries to parse Authorization header (Basic Authentication). Retrieves both username and password from header if parsing succeeded.
Public method Static member	ValidateCertificate	Returns true if current request should be excluded from checking Otherwise return real value
Public method Static member	ValidateConfirmationEmailHash	Returns whether hash for confirmation email is valid.
Public method Static member	ValidateSessionToken	Validates if session token is equal given token. In case that session doesn't contain token returns true.

Fields

	Name	Description
Public field Static member	EMAIL_CONFIRMATION_DATETIME_FORMAT	Date time format used in e-mail confirmation hashing methods.
Public field Static member	RegSquerBrackets	Regular expression for replacing squere brackets from like expressions.
Public field Static member	SESSION_TOKEN_HEADER	Http header which can contain session token.

Properties

	Name	Description
Public property Static member	UseViewStateUserKey	Use viewstate user key.