I have a website that has a secure admin section with its own login page and a public area with another section that allows people to register and login (using a different login / register page). In my web.config file I have this entry <location path="MemberDetails.aspx">
I am using a login control from the toolbox currently. I have the following code that is invoked when the user click on the log in button:
Protected Sub Login_Authenticate(ByVal sender As Object, ByVal e As System.Web.UI.WebControls.AuthenticateEventArgs) Handles Login.Authenticate 'To attempt connection to database. Prompt if fail Dim myConnection As SqlConnection = New SqlConnection(ConfigurationManager.ConnectionStrings("connString").ConnectionString) Try myConnection.Open() Catch ex As Exception MsgBox("Cannot connect to server", 0) End Try 'Prepare SQL command to query,update or delete from database Dim sqlComm As New SqlCommand("SELECT * from Accounts", myConnection) 'Execute SQL command Dim reader As SqlDataReader = sqlComm.ExecuteReader() 'Retrieve result from reader While (reader.Read()) If Login.UserName = reader("Username") & Login.Password = reader("Password") Then e.Authenticated = True Response.Redirect("Management.aspx") End If End While 'Close the connection myConnection.Close() End Sub
Now my question is instead of using memebership table, I would like to do the authentication with my own sql server database and once the verification is done as shown in the above code, I want to activate the DestinationPageUrl. I tried using: e.Authenticated = True Response.Redirect("Management.aspx") to set the authentication to be successful after I am done with the verification but it still does not redirect.
I'm at the point where I want to allow users to register at my site and then allow users to login, so I am trying to get a feel for how everyone is handling this use case.
I have some tables in my project.. 'proof' is the final table where application registration is confirmed. i have to check whether the user register number is exists in proof table or not., then user should not be able to login by using their register no and email id....I t should display message as ' ur reference no and email id' is already submitted.
am working on a new site and i want to do tothings for security1. I want to encrypt the password of the user who register on my site and also decrypt it to enable him in login again.2. I will make an online exams so I want to disable the user functions to hack the exams materials such as (print page, print screen , or even selecting data manual by mouse )I googled a lot about this matter I found java scripts to make this but what about the users who will disable scripts on their browsers. So I want to do this with C# Code.
I created online store following MvcMusicStore tutorial in MVC 2. Used standard login view as shown in tutorial. I created database on new server and it's working well - I can search for albums etc. The problem is when I am trying to register new user - I am getting error listed below (can't log in too). I created new database using aspnet_regsql.exe. Server authentication is set to SQL Server and Windows authentication mode. Server Error in '/' Application. Login failed. The login is from an untrusted domain and cannot be used with Windows authentication. Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception Details: System.Data.SqlClient.SqlException: Login failed. The login is from an untrusted domain and cannot be used with Windows authentication. Source Error:
[Code]....
Line 125:Line 126: MembershipCreateStatus status;Line 127: _provider.CreateUser(userName, password, email, null, null, true, null, out status);Line 128: return status;Line 129: }
I created a table named Thread to store logged-on users' comments. It has CommentId, Topic, Comment, CreatedTime and UserId columns. I made CommentId as the primary key and UserId as the foreign key to the UnserId in the Membership table aspnet_Users.But when I insert those data into table Thread, I get an error "Cannot insert the value NULL into column 'UserId', table 'ASPNETDB.dbo.Thread'; column does not allow nulls. INSERT fails.The statement has been terminated." I have tried different ways to resolve this, but could not make the UserId in the table Thread match the UserId in table aspnet_Users. Yesterday, I found the Table Profile Provider Samples created by Hao Kung at http://www.asp.net/downloads/sandbox/table-profile-provider-samples. It should be be able to solve my problem. But the code was written in C#. Is there anybody who knows a VB version of this code, or a better way to solve my problem?
Perhaps this is a simpler VS9 question, but I want to link a SQLServer table with additional user data to the standard SQLServer membership table using the GUID userID as a foreign key. I go into design mode of my table, right-click on relationships, and click add in the dialog. but the left hand column shows me only the tables in my database. How do I get it to show the tables in the ASPNETDB.MDF database? I went through the tutorial (http://www.asp.net/learn/security/tutorial-08-cs.aspx), but it seems to magically appear in there without explanation.
How this line if (usrInfo! = null) add another variable that will be used to login.
This line (usrInfo! = null) works, but I have a database table "confirm". If I change in the Admin to "true", the user successfully logged on. If the base table "confirm" set to "false", the user will not be logged.
The following code works if (null! = & usrInfo & usrInfo. IsApproved), but instead of ' IsApproved ', I want to use table "confirm".
We have lot aspx files in our asp.net web application. but we are getting the below error in register and login page only and the error is coming only in FireFox.( User Agent: Mozilla)Authentication Mode : form authenticationOS Environment: Microsoft Windows Server 2003 Statandard x64 Edition and Service back 1Application Environment: Asp.net 2.0/C#
Our application lets the administrator create new users. Since the administrator is logged in, I have set Logincreateduser = false so that the administrator is not logged out even after creating the new user.
The problem is :I need the userid of the newly created user to store additional details of the user in another database table. I see that i can get the username using Createuserwizard1.username; but how do I get the userID?
I'm tasked with creating a single page with both login and register fields. I'm still a little new to MVC, so I'm trying to figure out the best approach. To add complexity, I'm required to have 3 fields that will display above BOTH forms. A pair of radio buttons toggles whether the user is new or existing, and slides down the respective fields.
Should my model have all possible fields for both forms on the page? Is it possible to validate only certain fields that I specify? Is there a way, on the client side, to "hide" the fields I don't need submittted, but still allow me to toggle between the login and registration fields?
Should I have 2 separate forms for each and have a model for each? If so, is there an example somewhere? The 3 fields mentioned earlier may cause a problem, since they'll be outside the form.
I've set up a system with forms based authentication and using the asp:Login control. When I put in an invalid password I get the approriate invalid password message. However when I put in a valid password, it does nothing...just returns to the login page again. I'm triple checked the login info. There is no error message, and the invalid attempts counter doesn't increment. When I put a break point in the Login_LoggedIn event of the Login form, it hits it, but User.Identity.IsAuthenticated is false. I'm not 100% sure it should be true at this point, as I'm pretty new to .NET but it seems kind of odd.
My user database is stored in a sqlserver 2005 db that already existed. I've added a new connection for it.In the authorization I have