Security :: Store Users IP Address Using 2.0 Registration Control?
Aug 5, 2010how to store users Ip address while registration using asp.net 2.0 Registration control.
View 1 Replieshow to store users Ip address while registration using asp.net 2.0 Registration control.
View 1 RepliesI have some webforms and the main page grabs the users email address when they login and a UserID. It's not uncommon for the user to keep the web page open all day. Is it good practice to store the email address and ID as a session variable and up the timeout to say 10 hours? Or is there a better way? My concern is A) Session variables timing out before the user login timesout B) Doing this incorrectly.
View 12 Replieshow to make login control allow users to login by either username or email address
View 1 RepliesI have been playing a bit with ASP.NET MVC 2 using VWD 2010.After a bit of struggling with profiles(thank you MS for putting 2 web.config files in the solution...) I decided that after all I like this technology. I always thought that dotNET would be great for server side stuff and I've been proven right.Anyhow, I'm gonna start a real project now and I want to do something weird(yes, I know, I shouldn't be wanting to do weird things, but it's just beyond me :-) ): say I have a company website with roles and a forum.When I click on the nickname of a user, I want to bring his/her profile up - just like you would be doing with any decent forum out there. Well, my final idea is a tad more interesting in this regard, but let's stick it at that: click and see profile page.Problem is, I want this profile to be different for company employees and users.
I want some general informations such as first and last name, date of birth, photo, etc and then for instance I do not want to show the address property for company users. Yes I know I might want to put the company address there or leave it at all blank and I would rather not display it at all.From what I gather about profiles, this is possible only using views and checking for the roles, doing something like:
if User.Role == Company
{
// Stuff here
[code]...
I have been diligently learning all about the asp.net membership framework and have a test site running it all. However, during my testing, it became apparent that deleting users would be useful. I can delete users from the "aspnet_users" & "aspnet_Membership" tables simply by right-clicking on the table in server explorer, selecting "show table data", highlight the rows and press delete!!
However, this is a pain and I would much rather do this properly from code behind.
I have found out that the membership schema supplies a large number of "stored procedures" including "Delete_Users" however, when I execute this one manually, I have no idea what the last two parameters are (number of tables and something else from memory - the first two "application name" and "username" are easy to copy in to the dialog.
show me a sample set of VB code that I can use behind a "Delete User" button on my webform including how I supply the parameters. I have set up a drop down list box from teh "aspnet_users" table which displays the "UserName" and has as the SelectedValue "UserId".
this is the ecenario, we're developing a web application in vb.net using vwd 05, and everthing has been great so far, we've recevied a lot ideas from the guys on this great forum. now we're facing a problem relating with usernames and userids.Our web application has 5 different roles, and theres a funtionality needed on a dropdownlist related to the user roles.
we're trying to store users full name and other data, i've seen the tutorials about storing addtional information and everthing is very clear there, the problem now is this code we have already to fill a dropdownlist.
Dim techUsers As String() = Roles.GetUsersInRole("tech")
For Each usr As String In techUsers
DropDownList1.Items.Add(usr)
Next
So basically were looking at storing the user id of the user just created with the create new user wizard to our table where full name is gonna be stored.
table is like this:
userid
full name
and other data required here. etc
so basically, we're filling the dropdownlist with the usernames of the users in the tech rol with the coded i posted above, but we need to instead of showing the username(which is our case is just number) ,show the full name of that users belonging to the tech role, obviouly its just a query, but how to get the full names of users beloning to a specified role? thats the main question and problem we have right now.
I am writing a simple plugin for IE. I need to store a password and username setting for the user who uses the plugin. I know that I can store the username/password in the registry, I can manually encrypt it using the encription classes with .NET, or I can store it in a config file and encrypt the config file. I was wondering if there is a specific pattern/mechanism that I should use to store password and username.
View 1 RepliesQuick question: is it possible to retrive a users certificate store i.e. list all of the client's Personal Certificates?
Just to be clear, I am talking about the certificates installed on the clients machine, not the servers. I have managed to list the server's certificates, but so far have been unsuccesful with the above.
Is it possible to find out the clients IP and possibly MAC address from non IE browsers (i.e. without using ActiveX)? If so, how?
View 1 RepliesI'm building an ASP.NET MVC 2 site, where I want to have users verify their email address after they register.
I want to send an email to the address with a link that the user can click to verify their email, and then handle the clicking of that link (the link will contain a specific id, of course).
Of course, this is easy to manually implement, but is there anything already built in to ASP.NET that has such a function?
I saw some tutorials on asp.net website about users registration, but all of them they depends on Username as normal login such as "Username: John". The point here I am looking for solution accept Username as email account such as "[URL]".
How I can implement this via ASP.NET? I am using MS SQL 2005 DB, and Visual Studio 2008 SP1
storeprocedure code:
ALTER PROCEDURE sp_CheckForDuplicates
(
@UserName VARCHAR(50) = NULL,
@FirstName VARCHAR(50) = NULL,
-----------------------------
Error show :if (objReturnPara>0)
[Code]....
operator '>' cannot be applied to operands of type 'object' and 'int'
operator '>' cannot be applied to operands of type 'object' and 'int'
After filling all the required information in any registration form, I want to capture the Date of submitting the form in Sql Server 2005 how to achieve this using Asp.net C#?
My insert query is:
con.Open();
SqlCommand command = new SqlCommand("insert into data (UserID,Name,Email,Country,Date,Multiselect,Gender,Pincode)values('" + txtuserid.Text + "','" + txtname.Text + "','" + txtemail.Text + "','" + ddlcountry.SelectedItem.Text + "','" + s1 + "','" + lbmultiselect.Text + "','" + rblgender.Text + "','" + txtpincode.Text + "')", con);
command.ExecuteNonQuery();
I'm auto-generating a form in my ASP.NET page. This is already tested and working. I want to know if:If there are any security problems with storing the database ID as part of my controls ID? I can see think of 2 issues: the id will be visible in page source (not really important in this case), and the possibility someone could change the name of the control somehow? This second possibility is more serious. Is this a potential problem and how to void it?If there would be a better preferred way to associate a unique data with any type of control? Is it possible to store a custom item in the viewstate for the control?
View 5 RepliesIs it possible to use the PasswordRecovery control to recover a password using the email address instead of the user name?
Ideally I'd like to have the PasswordRecovery control allow users to enter their email address instead of their user name and then proceed to answer the security question.
we have a web site (Web Site 1) which is presently working and authenticates the users using ASP.Net login control.
We have a new site (Web Site 2) which will have a web page with user name and password fields and these values will be posted to Web Site 1. I am trying to authenticate those user credentials on Web Site1 using
Membership.ValidateUser(UserName, Password); method. but i am keep getting "User AuthenticatedObject reference not set to an instance of an object. " exception.
I need a way to block users from their IP if necessary. What's the best way to approach this? Can I use Request.ServerVariables["REMOTE_ADDR"] and store the ip address as a string in the DB?
View 3 Repliesi am new to asp.net, i am creating a small website for my college, in that.
Only the admin's can create other users...
Now while using the nw registration wizard, i hav to mention the role also in that page.
I've searched these forms this morning and spent hours yesterday trying to figure out why an email is not being sent to the user after he registers an account.
I followed this tutorial on how to setup the email sending http:[URL]
Allow Admin Users to Access Basic Users Accounts?
View 4 Replies[Code]....
after successful creation of 3 users on my web site now cannot create users
I want to create a user wizard from which the user can choose the roles during the registration procedure..
For this i followed a video tutorial and wrote the following code
<script runat="server">
Public Sub ActivateStep(ByVal sender As Object, ByVal e As System.EventArgs)
ListBox1.DataSource = Roles.GetAllRoles()
ListBox1.DataBind()
End Sub
[Code]....
This is the code i used.
When i run this.. It runned well...
But
-- it doesn's showed the complete wizard step..
-- it created the user with the provided user name
-- the user was not assigned with the role specified.
I want to append "AD" to the beginning of user names when they complete the CreateUserWizard. I thought I could do it through the "oncreatinguser" event, but it won't add the "AD". Can someone help out with this:
ASPX:
<asp:TextBox ID="UserName" runat="server"></asp:TextBox>
Code-Behind:
protected void CreateUserWizard_CreatingUser(object sender, EventArgs e)
{ TextBox userNameTextBox = (TextBox)CreateUserWizardStep1.ContentTemplateContainer.FindControl("userName");
MembershipUser user = Membership.GetUser("AA" + userNameTextBox.Text); }
How can i send email on registration?
it means when anyone signup in our site, the mail will be automatically sent to their mail Account.
how to add more information in the registration data? I want to add in addition to username and password, another TextBox.
View 4 Replies