.net - Invalid Users Logging In. Memership Services?

Feb 16, 2011

I have a default page which has the login control, this page is in the main directory. Then I have a bunch of pages that I only want viewable to people that have logged in a "MemberPages" directory. My problem is when I click on login button on the default page, using a username and pass that is not in the DB, it still takes me to all my member pages

I went through the asp.net config and set the "MemberPages directory to deny all not auth users. But it still has the faded one that is inherited from the main that allows all and cant be changed (maybe that is the problem? But I can't delete it) What else?

Here is my web.config from the MemberPages directory.

<?xml version="1.0" encoding="utf-8"?>
<configuration>
<system.web>
<authorization>
<deny users="?" />
</authorization>
</system.web>
</configuration>

Here is my main web.config.

<configuration>
<connectionStrings>
<add name="LoginSQL" providerName="System.Data.SqlClient"
connectionString="Data Source=xx.xx.xx.xx;Initial Catalog=xxxx;UID=xxxxxxx ;pwd=xxxxx;"/>
</connectionStrings>
<system.web>
<compilation debug="true" targetFramework="4.0"/>
<authentication mode="Forms">
<forms name="Login" loginUrl="Default.aspx" timeout="20" />
</authentication>
<membership>
<providers>
<add connectionStringName="LoginSQL" applicationName="Login"
enablePasswordRetrieval="false" enablePasswordReset="true" requiresQuestionAndAnswer="true"
requiresUniqueEmail="true" passwordFormat="Hashed" maxInvalidPasswordAttempts="3"
passwordAttemptWindow="30" minRequiredPasswordLength="6" minRequiredNonalphanumericCharacters="0"
name="MySqlLoginProvider" type="System.Web.Security.SqlMembershipProvider" />
</providers>
</membership>
<profile>
<providers>
<clear/>
<add name="AspNetSqlProfileProvider" type="System.Web.Profile.SqlProfileProvider" connectionStringName="ApplicationServices" applicationName="/"/>
</providers>
</profile>
<roleManager cacheRolesInCookie="true" cookieName=".ASPRoles"
cookieTimeout="60">
<providers>
<add connectionStringName="LoginSQL" applicationName="Login"
name="MyRoleProvider" type="System.Web.Security.SqlRoleProvider" />
</providers>
</roleManager>
</system.web>
<system.webServer>
<modules runAllManagedModulesForAllRequests="true"/>
</system.webServer>
</configuration>

View 3 Replies


Similar Messages:

C# - Logging Users In Automatically Via An URL?

Jan 2, 2010

I am providing registered members of a website a weekly mailing which contains URLs to private pages on the website.

For usability purposes, I don't want the user to have to provide their credentials after they click on the URL.

I am using the ASP.NET Membership provider model.

Question

How can I implement this so that the user can be logged in by virtue of clicking a specialized URL link?

View 2 Replies

Membership Create Users, Logging In Works. But Then It Doesn't?

Feb 14, 2011

I have a application that connects to a remote sql server. I am able to create users and they are stored in the DB. Then I can go to the login page and login. But after a while, I am unable to log in and it just sits at the login page. The user is still in the DB

<configuration>
<connectionStrings>
<add name="LoginSQL" providerName="System.Data.SqlClient"

[code]...

View 1 Replies

Timeout - Automatically Logging Users Out Of Website On Close?

Mar 18, 2011

I recently inherited an asp.net website made up of multiple .aspx and .ascx pages and being rather new to web development and especailly asp.net. I have the site create a cookie upon login to automatically log users back in if the page times out on them while they're entering information.

I need the site to automatically log users out when the site is closed. Obviously using the me.close event on each page won't work because we don't want it to log people out every time they navigate to a new page in the site.

I've tried setting the timeouts in both IIS and in the files of the website to longer but it doesn't seem to have an effect.

Is there an easy way to automatically log users out when they leave the site but not when they navigate from page to page.

View 1 Replies

Security :: How To Prevent New Users From Logging In Immediately / Account Approval

Jul 17, 2010

I am implementing strightforward membership provider. I do not want new users to be able to login without being approved.

I have tried the setting on the registration wizard called DisableCreatedUser="True" and this does not work.

I also set LoginCreatedUser to False, and the user still gets logged in.

If I look in the SQL membership table, 'IsApproved' is set to 0 for the account, but they can still login.

View 9 Replies

Logging From Framework Internals (Logging.On) - How To Turn On Logging

Jul 6, 2010

I'm debugging some unexpected behavior and while tracing in to the .NET framework I see a bunch of stuff like this:

if (Logging.On) {
Logging.PrintInfo(Logging.Web, this, SR.GetString(SR.net_log_n_certs_after_filtering, filteredCerts.Count));
...
}

But (as expected by default) the execution steps right over these. Is there some way to turn on the logging? Or is that just something that the framework developers can do while making special builds of the framework?

View 1 Replies

State Management :: Logging Out Users When User Opens Website In Two Browsers Or Two Tabs Of Same Browser?

Sep 20, 2010

We use windows authentication. User opens our website in tab1 and does some action but with out clicking on save he opens a new tab tab2 and opens the same website again. Now, if the user session in tab1 is active i need to warn users that the he is already logged on to application in some other browser and go to some log out page. But if the user session in tab1 is timed out then he must be able to continue with the website in tab2 as usual, but if he tries to do anything in tab1 he should go to session expired page.
I tried implementing it in following way.

I have a hidden field in each page which will be set to unique Id using GUID.NewID().
when user requests for a page the following code is executed.

[Code]....

View 1 Replies

Performance - What Logging Listener Should Be Used In Production ( Logging Application Block)

Sep 10, 2010

I'm using MS Enterprise Logging Application Block in an ASP.NET website.

For production launch, I will set up a log listener in one of these locations:

Sql Server database
Windows event log
Text files

Which has the least impact on performance?

NB - I can't switch to Log4Net or ELMAH at this point, so don't suggest that in your response.

View 3 Replies

Enterprise Library Logging Not Logging To Event Log?

Jun 3, 2010

I spent a day trying to make Ent Lib Logging work and log anything into database or event log. I have a web application and console application with the same Ent Lib config but only the console application is capable to log into the Event Log. I tried everything with permissions but I don't know what exactly I am doing — which services should have what. It does not work!

I read articles like this[URL] and I want to try to give the ASPNET account those permissions. I am using Windows 7 and I cannot find ASPNET user account. So where is it?

This is the config file which is automatically generated from Ent Lib utility and it works only on App.config, not on web.config:

[code]....

View 4 Replies

Security :: Logging In, Logging Out And Still Logged In?

Jan 12, 2011

I think my subject line explains my problem in a nutshell.. I have a login page, I login like I should and everything works.I logout and when I type/paste the address to the page, in the address field, I still reach it just like if I was still logged in..The page I type in the address field is in a subfolder, only suppose to be able to be reached by logged in users and in this folder,ith it's own web.config-file:

<?xml version="1.0"?>
<configuration>
<system.web>

[code]...

View 9 Replies

Security :: Forms Authentication Failed "The Ticket Supplied Was Invalid" For Users Using A Proxy?

May 11, 2010

Since we updated our website to .NET 4.0, users using a proxy-server can't login in our webapplication anymore.In the event-viewer on the server this error is thrown:Forms authentication failed for the request. Reason: The ticket supplied was invalid.This problem only exists for users with a proxy, all other users can login normally.We are not using a web garden or multiserver (load balance) environment, just a webserver and a databaseserver.

View 4 Replies

Web Forms :: How To Find All The Web Services And Windows Services Running On A Server

Feb 4, 2011

How to Find All the Web Services and Windows Services Running on a Server in ASP.Net. I have the server details with me and want to find all the Web services running on it.

View 1 Replies

Configuration :: Deploy Window Services And WCF Services Using Web Package?

Apr 3, 2010

I am using Visual Studio 2010 Release candidate1. I have to deploy my web application which consists of a website, certain window services, certain WCF services and Sql Server 2005 database.I read Vishal Joshi's blog(http://vishaljoshi.blogspot.com/2009/09/overview-post-for-web-deployment-in-vs.html) detaing Web Package in VS2010. I want to know how to deploy window services and WCF services using Web Package. Also, I want to create a web setup (.msi) for deployment instead of Web Package so that the .msi takes care of all the application and database deployment like the web package does.

View 1 Replies

Installation :: State Services Not Found In Services.msc?

Jul 20, 2010

I installed vs2010 in my machine and opened solution (of same version copied from other machine).

But getting stateservices error message..Moreover i am unable to find asp.net services in the list of services under serives.msc.

View 2 Replies

Search Text Box Using Web Services & Without Using Web Services In .net?

Mar 4, 2010

I am using HTML controls while using Ajax in my .net project. Now I want to make my text box to be autocomplete. I am fetching a data using a query for the respective typed text but i am not sure how to bind that data to text box and show it the way it is being displayed in google and other famous sites. I would also love to know the way using web services. Which way is more efficient?

View 1 Replies

Together With WCF RIA Services Or WCF Data Services

Jul 12, 2010

Makes it sense to use ASP.NET applications together with WCF RIA Services or WCF Data Services (to encapsulate the data access layer) ? Or are these technolgies only useful for Silverlight applications.

View 1 Replies

C# - Administer Website (create New Users, Assign Users To Roles, Etc.) From A Windows App?

Feb 9, 2010

I have an asp.net web app that uses forms-based authentication, a SqlMembershipProvider (using an encrypted password format), and a SqlRoleProvider. I need to know if it's possible to administer the users (create new users, assign them to roles, etc.) from a windows application - the powers that be don't want any administrative functionality in the web app itself.

Here is the membership provider definition from web.config:

[code]....

So, obviously, I have a Sql Server database that contains the users and roles for the web app. I'd like to create a separate windows app that references the web app assembly, and use the configured MembershipProvider, RoleProvider, and machineKey to create users, assign users to roles, etc. If that's not possible, I can duplicate the configuration settings from web.config within the windows app. But I don't know how to do this either.

View 3 Replies

Web Forms :: Stop Users Users Using The Browser Back Button And Potentially Submitting An Old Version

Mar 25, 2011

I need to stop users users using the browser back button and potentially submitting an old version of a form.

I'm storing a guid in a session variable and also writing the value to a hidden form field and then checking the session value against the hidden field value if a user does try to navigate back and submit an old form.

If the form is submitted and the user wants to complete a new copy of the form then a new guid is generated both to the session and to the hidden form field. Now, if the user decides to hit the back button a few times to get the old form and tries to submit it again, the page checks the current guid in session against the guid stored in the form field and it finds a mismatch and prevents the form being submitted.

This works as expected in Chrome and Firefox, but in IE6, when the user hits the back button to view the old form, the new guid value appears in the hidden field of the old form! This means the user can submit the old form again, which we definitely do not want.

View 3 Replies

Security :: Allow Admin Users To Access Basic Users Accounts?

Aug 26, 2010

Allow Admin Users to Access Basic Users Accounts?

View 4 Replies

Security :: After Successful Creation Of 3 Users On My Web Site Now Cannot Create Users

Dec 6, 2010

[Code]....

after successful creation of 3 users on my web site now cannot create users

View 9 Replies

DataSource Controls :: Different Return For Added Users And For Rejected Users?

Jun 25, 2010

different return for added users and for rejected users?

[Code]....

View 4 Replies

Security :: How To Display Users And Number Of Users Online

Oct 12, 2010

We have implemented the ASP membership and roles..and we would like to display the users currently logged in and also display the number of users online so we can display that on the page. The list of users woudl only be available to our admins. BUt the number of users will show for everyone.

View 9 Replies

How To Get The List Of Users And Also To Update/Delete Users

Aug 11, 2010

I have used Login Control + Change Password + Create User Wizard in my project. Everything is working fine. I want to know that how to get the List of Users and also to Update/Delete users.

View 1 Replies

Security :: Automatically Add Users To Role Users?

Aug 4, 2010

I just realized after i created a test account i was not in any roles. Is there a way to automically add new users into the role Users? Have i missed this some where?

View 8 Replies

C# - Logging Changes Using LINQ To SQL?

Feb 23, 2011

In a system I am creating, the customer requires all changes to data to be logged to a database table - with only changes being logged (i.e. if they only change 1 value on a form full of 10 fields, it'll only audit that one change). So essentially I need to be able to compare the old values to the new values.

This is of course easy - I've done this before, but it was rather messy - I would manually check each field in the database and compare it to the new one to decide if it should be audited. Is there any easier way, of perhaps automatically getting the changed column name/values? Or do I have to do it my 'messy' way?

Pretty much all of the changes to be logged are done using LINQ to SQL - so perhaps there's a way to compare the database table to the modified one, before calling submit changes?

View 5 Replies







Copyrights 2005-15 www.BigResource.com, All rights reserved