I'm working on logging for all the updates in my web application. I.e, When some one is logged into application or some one changed any thing application, I'm logging everything in log table. But, I just want to know whether I can create log entry when I click on Logoff and I'm using Login Membership control.
View 3 RepliesI am wanting to from now on create a backdoor entry for every web application I build so that if need be I can shut it down.I had a nasty recent experience of a client not paying the bill, however the application was on his server, so when I used my backdoor access to alter a hidden record in one of my database tables to stop it from running, they had full control of the server and were able to look through ther SQL log and see what queries had been run at that time and then alter the record and prevent access to the table...
The only way I can think of that will be full-proof no matter where application is (providing there is web access), is to have ONE webservice running on my server with all apps listed, with a secure interface and the ability for me to turn off any application. Then every day, once a day, each of my client's applications (no matter which server they are on) communicates with this web service to see if it is allowed to run by referencing a GUID. This once a day check would be compiled into the main app DLL.
Is it possible to create an http module without making an entry into the web.config or GAC?
View 1 RepliesSuppose that you have a big Data Entry Web Application Like Microsoft CRM, what is the strategies and technologies that you follow to build a website like it?
I don't want to use any Dynamic Web Page Generation software, because it have a lot of limitations..
Also I don't want to design every page and repeat everything
While converting a desktop application to a web app, I've run across my ignorance when attempting to implement a multi-column data entry form using CSS. I'm resolved to avoid using tables for this type of thing, and while I found a good reference to laying out a data entry form, I can find nothing that applies to multiple-column layouts like this one:
http://i.imgur.com/qAYbv.png
I've been required to create an entry form to capture details relating to a travel booking. A user should be able to make a booking entering details related to the booking specifically the details of the persons that would be making the trip. This would involve a sort of parent-children relationship between the booking and the persons.
This would be relatively easy for me to achieve using web forms but then how can I easily achieve this is MVC using a single view? Do I have to create a sort of multistep form?
I already have 2 web applications running. both of them are using membership and accessing the same database but their application names are different. so basically in my aspnet_Users table, i have users with different applicationIDs and in my aspnet_Applications table I have 2 records in there. so i have 2 separate login locations
..app1login.aspx
..app2login.aspx
What my the business wants is to only have a single point of entry. so they want something like this
..applogin.aspx
and by verifying the username and password pair, my code should be able to route to the appropriate app and bypass its login form. (don't be concerned about the duplicate username between applications, it's been taken cared of)
so I'd like to solicit suggestions from you how should I implement this without modifying my existing setup? and where should I place this login web form in my website? this is the current site structure:
www.site.com/app1
www.site.com/app2
May i know how i can change postion of Create user button in Create USer Wizard as i want to change according to requirement!
View 4 RepliesI am using a create User Wizard for registering a user and have converted it to a a template to capture additional information. In the CreatedUserEvent handler in Code Behind I am getting the UserName of the new user and their unique GUID key. This is then added to a seperate data table with addditional info captured from the user. The textboxes within the create user Wizard have validation controls. If the user has missed an entry these fire and it shops the process of creating the user.
BUT If I then complete the textboxes and then click submit it says the USER NAME already Exists! This is not what I want as the User just needs to correct the errors in the form and they should be able to keep their iniital User Name choice. Do I need to change the Event handler and if so am I still able to capture the USerName and Key so that I can add the data to the other non membership table.
im creating a multi step create user wizard for new members but I run into a problem. If the create of an account is in step 3 how do I capture the values from step 1 and 2. Should I try to pass the values to sessions or is there some other code. Here is some codebehind I tried so far (did not work).
[Code]....
[Code]....
can any one tell how to create the roles in asp.net? when ever Admin creates the roles, there it self he should assing the pages,which pages should be open when ever perticular person enters in to the site. When ever Admin wants to assing the Roles,all pages appear in grid view with check box,if he checks that pages,he able to access other wise he couldnot access that page.
View 1 Repliesim writing a stored procedure which call the procedure "aspnet_Membership_CreateUser".
To store users in the aspnet-table structure i have to generate a password salt and create a hash from password+password salt. Unfortunatly my createt user can't login.
The generated password and password salt are not matching the membershipprovider.
The machinekey in the web.config has SHA1 as validation. But i used SHA1 to hash the password....
Does anybody know which algorithm is used by the membershipprovider to generate passwords?
I'm trying to dynamically create a url containing a FormsAuthenticationTicket that can then be emailed to a user who has forgotten their password. Then when the user follows the url they will be authenticated by the ticket in the url and be able to access the reset password page
I have tried creating a FormsAuthenticationTicket object and encrypting it but the string it produced seems way longer than the hash in the urls produced when using cookieless authentication.
What I want to do is produce a url say
eg. http://www.mysite.com/lkdjlkj_hashcode_lkoiojiionki/reset.aspx
that will be recongnised by cookieless authentication. But as I said the hash I come up with seems way to long and just not right at all.
you can see how long and different it is here by pressing the forgot password button..
[URL]
it says in the docs for FormsAuthenticationTicket that the encrypted ticket can be stored in a url. but I want to make it the same as those used by cookieless authentication so that it is recognised straight away.
I'm having VS 2008 and OS vista. When I try to create a web service in IIS it gives me a error tht I shud run the VS 2008 as admin then create a web service. When I run as admintrator and create the web service then no problem. Is it possible to create the web service without running as administrator?
View 6 RepliesDo we know the algorithm that asp.net uses to create the authentication cookie (when using forms authentication?)
Can we basically create our own copy implementation? if so, how?
What does it use to generate the encrypted cookie value, I know it uses whatever you pass into the SetAuthCookie call (which is usually the userID/username).
I would like to do login to the website using certificates.
I want to have a secure login.
How to create certificates for login?
How certification process?
I have problem to create digital signature. I created console application and it works there but when I want to run it at server there is exception. It looks like I have problem with reference to the file.
View 6 Repliesis there any method in .net framework to create a anonymouse user programaticly or i have to write a method?
View 6 RepliesI develop one application that create folder with special permission.
It works, but when I install the application on server I can't set any permission.
I think because it needs domain admin to set this permission... I've one account of one domain admin but how can I do to impersonate when the application set (try to set...) the permission ?
how can I create these using VB (or is there a template in Visual Web Developer?)
I'm trying to create the machineKey markup that will enable Password Recovery emails for users who have lost their encrypted passwords in the ASP.NET membership system.
try to create a activex. if i use printdocument class it will throw security exception on client side. how to assign print permission for a assembly?
View 1 Repliesi am developing a website in vb.net ,as i am having 3 urser,customer,admin,and employee
i have taken the loginpage and in the codebehind i have permission access to the customer,admin and employee,with different user names and password now my problem is how to make the page to recover the password if the user forget the username or password
As the title says, if I'm using SQL parameters, ie
SQLCommand cmd = new SQLCommand("select * from users where username = @user and password = @pass limit 1", Cxn);
cmd.Parameters.Add("@user", SqlDbType.VarChar):
cmd.Parameters.Add("@pass", SqlDbType.VarChar):
Can I just enter the parameters value as the direct entry from the input?
cmd.Parameters["@user"].value = txtBxUserName.text;
cmd.Parameters["@pass"].value = txtBxPassword.text;
I am trying to create a password generator which will do the following:
1) Generate a simpler password, than just completely random as this is what currently the Membership classes do if the above cannot be done then how can we kind of mimic the randomness but use a predefined list of perhaps common words?
2) if we have a Regex expression, is there any way a password can be generated randomly complying with that regex expression? (something extra to think about)
I have searched for an answer to my problem and could not find an answer anywhere.
I am rebuilding a website (converting it to use masterpages, usercontrols, asp.net memberships, etc using asp.net 4.0 C#) that has two different types of users. The problem is, the two different users have different roles ie. customers and employeers. Depending
on the role the user is assigned to they will have different things that should be stored in their profile.
For instance a customer would have all the basic elements of a profile, name, address, phone, etc. But it would also have some extra stuff like, a little bit about themselves, their resume, where they went to school, etc. On the other hand an employer would
have the basic elements but it would include details such as the position, a description of the position, contact for that position, etc.
Is there any way to have multiple profiles and still use the asp.net sql membership and profile provider?