I want to increase the security of my website, does creating http module that block certain ip address will increase security?
Since IP Address can be manipulated if I'm not mistaken, I'm not sure that creating HTTP Module will help.
I need a way to block users from their IP if necessary. What's the best way to approach this? Can I use Request.ServerVariables["REMOTE_ADDR"] and store the ip address as a string in the DB?
View 3 RepliesI have built an online CMS that is forms authenticated. The CMS allows administrators to upload files to the website. These files are stored outside of the Forms Authenticated section of the site so that they can be accessed from another site I have built. This other site is also forms authenticated, so users must log in and then they can access the files on the CMS site. site1.com: CMS for administrators only. Site stores all the files. site2.com: Access site.
My second website (The access site), is basically an empty shell that is filled with all of its content through the CMS using an SQL database and then displayed on the page. This works fine as only authenticated users have access to the interface used to view and download the files. My problem was, even though there is no public interface to find the files, someone could surely type [URL] and the video would be available to them. I dont really know what to do here, is there any way that people could be blocked from retrieving the files like this?
I have a client who wants me to block his site from certain countries. Each month I add all the new IP address ranges for these countries into a sql database. If the user has a blocked IP address, the site directs them to a phoney 504 error page. This way it doesn't appear that the site is being blocked, but rather is just having difficulites. Thats the way we want it.
It works fine however, there are some users (5%) who get a 500 error. No rhyme or reason. It works across all browsers and operating systems. I have no way of finding out why from my hosting service. I can't dupliate it. I have the following code that runs at Page_Init
[Code]....
the purpose of this HttpModule? It's showing up on my HttpModuleCollection list, but I don't know what's it's for.System.ServiceModel.Activation.HttpModule
View 3 Repliesi have an aspx page which on page load needs to populate a text box with the current users email address (user is in Active Directory), any body know how to retrieve the email address from Active Directory, i have read this article on the web but am a bit confused
string userName = Environment.UserName;
string domainName = Environment.UserDomainName;
//Set the correct format for the AD query and filter
string ldapQueryFormat = @"LDAP://{0}.com/DC={0},DC=com";
string queryFilterFormat = @"(&(samAccountName={0})(objectCategory=person)(objectClass=user))";
SearchResult result = null;
using(DirectoryEntry root = newDirectoryEntry(rootQuery))
{
using(DirectorySearcher searcher = new DirectorySearcher(root))
{
searcher.Filter = searchFilter;
SearchResultCollection results = searcher.FindAll();
result = (results.Count != 0) ? results[0] : null;
}
}
string primaryEmail = result.Properties["mail"][0] as string;
There is no defintion of rootQuery- so not sure what that is, or a definition for searchFilter
i have developed one website,
this website should be free of cost to india.
if any other abroad countries, it should not access without paying the money...
how can i do this concept...
I have an application where in the User Authentication is from the AD useing Directory services.
If i type in the address of a valid page from the application into the Address Bar, it throws me to the Login Page.
However if i am logged in and i type in the address of a valid webpage, the application takes me to the page. Is there any way that this can be restricted.
If i type in the URL into the address bar the application should throw me to the Home page of the application.
we have one e-commece website which combine one ip address and 4 domains, I want apply for one ssl certificate bind ip for this site, is it possible to be used for 4 domains? is it possible to apply for certificate for ip address?
View 1 RepliesI would like to develop a web application in which I can track the details(IP address...etc) of my website visitors....using vb
to implement the above web application
In my update Membership account routine, I have the sub:
[Code]....
This sub runs successfully and everything is updated, including the membership question and answer, except the membership.getuser.email address which is not updated.
I have a create user wizard on my page. Requires Security question hasbeen set to false. Once a new user is registered they can log in fine. If they forget their password, i have written code so that the user can enter the email address they used to register and a replacement is sent. The problem is I have written an application that is accessed by different people. So if the user that registered the account leaves the company
View 1 RepliesI want to know how to get the unique address of PC over the internet, LAN,WAN,Without any network connection,Coz For Some Security Reason...
as well as i want to know about the following....
Windows IP Configuration:-
1. Host Name
Ethernet Adapter Local Area Connection:-
1.Physical Address (MAC Address)
2.IP Address
3.Default GateWay
4.DHCP Server
5. DNS Address
I want to know unique Address for PC which should not be the same address for other PC Around The World...
Coz MAC Address also can be change.. so how to know the unique address how is accesing my Website..
We are using Profile.FirstName and Profile.LastName to get current user's firstname/last name. How do we get current user's email address?
View 2 RepliesI am using .net membership, My question is how can i get a member email address by username?
View 1 RepliesHow do I give user's the ability to sign in using either their username or email address? How do I implement profile URLS so that domain.com/username Server.Transfers to ViewProfile.aspx?userID=342 How do I implement a multi-domain auth system for a single web app so that users can create the same username at different domains?
View 1 RepliesI created a website and i restrired the website such a way that i can be acessed from a IP i configured.I did this as shown in below steps which i got from:
http://support.microsoft.com/kb/324274
Under IP Address and Domain Name Restrictions, click Edit.
Do one of the following:To deny access, click Granted Access, and then click Add. In the Deny Access On dialog box that appears, specify the option that you want, and then click OK.The computer, group of computers, or domain that you specified is added to the list.
To grant access, click Denied Access, and then click Add. In the Grant Access On dialog box that appears, select the option that you want, and then click OK.
The computer, group of computers, or domain that you selected is added to the list. Click OK.
But its not working . I am able to browse from other machine which have a different ohter IP. Do i have to configure somewhere else ?
For some reason, I changed something today while installing an instance of SQL Server. And now if I try to use the i.p. address of the machine instead of the name of the machine in DATASource of my sqlconnection string, I get an error. It worked fine before.Also, what exactly is "networkService" as an option for security when creating an instance of SQl Server?
View 3 Repliesis there any java script that i can put it on my master page and block specific I.P address ? And navigate the user visiting from that blocked I.P address to a different page ?
View 8 RepliesWhen the member comes back to the site after verifingt the new email address, I need to check if he/she is logged on ( ie cookie is active) to the site for redirection. And If he/she is not logged on maybe log them on then redirect
View 1 RepliesI'm currently trying to figure out enabling my users, once logged in, to change their email address that they have registered. As far as I can see it's only held in the aspnet_Membership table.
The code I have so far is as follows, but it doesn't seem to be doing anything. No errors either so I can't go down that route yet!
[Code]....
I can't work out what's going wrong
how to store users Ip address while registration using asp.net 2.0 Registration control.
View 1 RepliesI have been playing a bit with ASP.NET MVC 2 using VWD 2010.After a bit of struggling with profiles(thank you MS for putting 2 web.config files in the solution...) I decided that after all I like this technology. I always thought that dotNET would be great for server side stuff and I've been proven right.Anyhow, I'm gonna start a real project now and I want to do something weird(yes, I know, I shouldn't be wanting to do weird things, but it's just beyond me :-) ): say I have a company website with roles and a forum.When I click on the nickname of a user, I want to bring his/her profile up - just like you would be doing with any decent forum out there. Well, my final idea is a tad more interesting in this regard, but let's stick it at that: click and see profile page.Problem is, I want this profile to be different for company employees and users.
I want some general informations such as first and last name, date of birth, photo, etc and then for instance I do not want to show the address property for company users. Yes I know I might want to put the company address there or leave it at all blank and I would rather not display it at all.From what I gather about profiles, this is possible only using views and checking for the roles, doing something like:
if User.Role == Company
{
// Stuff here
[code]...
I have been searching since some days for the best approach one can have in order to allow an authenticated user to change his/her email address.
This is the code I have but apparently it doesn't work and it doesnt even gives a error. The application seems to ignore it:
Change email address:
<asp:TextBox ID="txtEmail" runat="server"></asp:TextBox>
<asp:TextBox ID="txtPassword" runat="server"></asp:TextBox><br />
<asp:Button ID="changemailbtn" runat="server" Text="Button" />
<asp:Label ID="lblErrors" runat="server" EnableViewState="False"
[Code]....
I've been trying to work out this error for a while now and i still dont understand it because i have been following a tutorial online step-by-step but i recieve this error when i log in ?
What i am trying to acheive is when the user logs in then they are able to view their 'profile' such as their name, address etc. The login is validated against a table in a database, ...this is the error i am recieving:
Description: An unhandled exception occurred during the execution of the current web request. review the stack trace for more information about the error and where it originated in the code.
Exception Details: System.NullReferenceException: Object reference not set to an instance of an object.
Source Error:
[Code]....