Security :: Webconfig File / Doesn't Get Sent To SuperUser.aspx
Feb 20, 2010
I have the following webconfig file that redirects (once logged in) a specific user...but for some reason it's not seeing the redirect location. So, for some reason when john123 log's in he doesn't get sent to superUser.aspx. It's as if it's not seeing the location path.
I have an ASP.net website running with the authentication mode on the web.config file is Windows. The webpages at the root do not need to have login & password form.
Now I created a subfolder called 'reports' and would like to implement a few web pages with the login & password authentication form.
Question, do I need to create another web.config file in the 'reports' folder and update the authentication mode="Forms"?
still, I do get the error that I have to provide at least one alphanumeric character.I do so and the error is still the same.why? is my regex wrong? I also took out the "confirm password" step. is that ok?
I'm trying to create web securityOn the web authenticate any user that is in the database.But there is a directory called "Administration".I just want to give access path "Administration" to Triqui
I have created the asp.net application and Hosted on Different Server(i.e Test,Development). its is an Intranet Application But When I tried to Host on Production the WebApplication dont work when I check the "Integerated Authentication" and when I check the "anonymous Access" i get null value for the HttpContext.Current.User.Identity.Name.ToString() returns null. and User.Identity.IsAuthenticated also return false. what changes do I have to make in IIS and Webconfig of my application so that it can run on ProductionSERVER
I would like to use the webconfig file to store some values, which will be used in my application in order to execute some methods, one a parameter for a timer, the Interval property and the other to pass as parameters in a method.
So, my questions are:
Where in the webconfig can save these parameters in order to make them accessible to the applicationHow do I access these parameters in my application in order to use in the aspx page for the timer control and in the code behind for a method to use
I have a dropdownlist which is connected to object data source for displaying data, now what I need is to connect to database using semicolon seperated list from web.config connection strings and then connect that to dropdownlist.
I'm new to java and android, originally from an asp.net/c# background.I am looking for a config file in java, similar to the webconfig of app config with .net but there doesn't seem to be one.
I have created a webservice, which debugs fine with no errors, and published this on my localhost server for testing.
I have created a windows app which calls the webservice but am hitting problems as soon as I reach the point where the webservice tries to connect to its database.
The connectionstring is held within the web.config file of the webservice as
, and as I said before, this works perfectly when debugging the webservice application directly.
However, the windows application is not seeing the connection properly, if I use the statement as above I get a debug error stating that it is a NULL reference. If I change it to
I no longer get a debug error, but the connection is not made. On testing the above code it believes the name for connection 0 is "localSqlServer" and in both the web app and the webservice the error below is returned.
>>An attempt to attach an auto-named database for file \MyServerMyDirectoryMyProjectMyProjectApp_Dataaspnetdb.mdf failed. A database with the same name exists, or specified file cannot be opened, or it is located on UNC share.
why the windows application see's the correct connection string code as null? Is there additional security I need to add for the web.config file to be accessible? Or does the connection strings need to be relicated within the app.config of the windows app?
Both applications are written in C# and I use Visual Studio 2010, ASP.Net version 4.0.30319
it's possible to protect aspx page from modification in a production environment?
I explain: We are developping a web application that is installed in our customers environments so once it's installed we don't manage it.
This application manages critical and encrypted data that the IT (of our customer) should not have access to, for instance their customer's password. So I would like to know if it's possible to prevent any modification of the aspx page to insert script to retrieve session data or catch keyboard entries once the web application is installed.
I have a simple login screen that now has to receive its parameters from another web site. I am not sure what we have to do. The other web site, will get the user id and password. the person there is asking me, does he just redirect user tohttp://reports.ourwebsite.com:90/login.aspx?username=Bill&password=testthis is the codes: First is Login.aspx<%@ Page Language="C#" AutoEventWireup="true" CodeBehind="Login.aspx.cs" Inherits="Reports.Login" %><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> xmlns="http://www.w3.org/1999/xhtml"
I have a folder called /Error in the root directory for an ASP.Net site. The site is completely public, so there is no authentication of users. Inside the Error folder, I have a file called errorlog.aspx, where I log unhandled exceptions. I don't want the public to be able to view this file. I created a web.config file inside the Error folder.
[Code]....
However, I'm still able to view errorlog.aspx by typing the URL into the browser. What am I missing?
I tried to set the session state in my webconfig file and got this error.. <sessionState timeout = "60"/>
Parser Error Message: It is an error to use a section registered as allowDefinition='MachineToApplication' beyond application level. This error can be caused by a virtual directory not being configured as an application in IIS.
However if I tried to set it in anther aspx page it seems fine...is there a reason for setting up the virtual directory as an app in IIS ..what are the benefits of doing this, and is it always necessary?
i would like to know if there's a combo like jCryption (jCryption) - PHP but for jQuery - ASPX.I mean, I have been searching for a combo to send data both ways (Client-server, server-client) with jQuery to ASPX. The best I found was jCryption that sends data from JavaScrpit to PHP. I need a combo to send data from JavaScrpit to ASPX.
PD: Please don't tell me to use HTTPS, it's not enough to ensure the data communication on a client - server application.
I am having some trouble, I am very new to asp.net, and the last problem I had, I spent about 59 hours trying to solve, Now I have a new one !
:D well, I guess this is part of the learning process...
Well, in Visual Studio 2010, I clicked New Website. @ C# language, ... The template it gives is pretty nice, it creates a database MDF file, and a login/register setup ready to go !...
You guys can see it live AT CLICK HERE ...
Everything is working, well at least here at the local machine...
There are 2 pages in there, Default.aspX, and About.aspx ... I want to allow ONLY logged in users to view those 2 pages... I tryed a few things, added my account to a role called ADMIN,
In the web.cong I changed Allow"*" to allow"ADMIN" ... still didn't work.. Also, I was trying to avoid using roles for now, and I was trying to find a way to do this for individual pages in the same directory as well... If possible with out touching the web.config file...