I have a website which uses membership/roles for security. However, I really want this site to be secure. My concern is one day something happens to server and the membership/roles is turned off.
Is there anyway that I could add an additional layer of security to website that would not be too intrusive?
This would be "on-top" of the ASP.NET security. My thought would be maybe a session cookie that is sent when a password is answered correctly.
Looking for ideas. I primarily want keep the site secure even if the security on the website is turned off. In worst case scenario, I imagine that someone might could even browse the files. This would require me to put the check in every page which sounds very cumbersome and a hack.