I am providing registered members of a website a weekly mailing which contains URLs to private pages on the website.
For usability purposes, I don't want the user to have to provide their credentials after they click on the URL.
I am using the ASP.NET Membership provider model.
Question
How can I implement this so that the user can be logged in by virtue of clicking a specialized URL link?
I recently inherited an asp.net website made up of multiple .aspx and .ascx pages and being rather new to web development and especailly asp.net. I have the site create a cookie upon login to automatically log users back in if the page times out on them while they're entering information.
I need the site to automatically log users out when the site is closed. Obviously using the me.close event on each page won't work because we don't want it to log people out every time they navigate to a new page in the site.
I've tried setting the timeouts in both IIS and in the files of the website to longer but it doesn't seem to have an effect.
Is there an easy way to automatically log users out when they leave the site but not when they navigate from page to page.
I have some problems with getting my website to log out the authenticated user automatically when the session ends (the user closes the browser).
This is what I have in my web.config:
[code]...
When I close the browser, the user is still logged in. How do I make the website forget the user through an option, so the user himself can decide if the website should remember or not?
I just realized after i created a test account i was not in any roles. Is there a way to automically add new users into the role Users? Have i missed this some where?
View 8 RepliesI have a default page which has the login control, this page is in the main directory. Then I have a bunch of pages that I only want viewable to people that have logged in a "MemberPages" directory. My problem is when I click on login button on the default page, using a username and pass that is not in the DB, it still takes me to all my member pages
I went through the asp.net config and set the "MemberPages directory to deny all not auth users. But it still has the faded one that is inherited from the main that allows all and cant be changed (maybe that is the problem? But I can't delete it) What else?
Here is my web.config from the MemberPages directory.
<?xml version="1.0" encoding="utf-8"?>
<configuration>
<system.web>
<authorization>
<deny users="?" />
</authorization>
</system.web>
</configuration>
Here is my main web.config.
<configuration>
<connectionStrings>
<add name="LoginSQL" providerName="System.Data.SqlClient"
connectionString="Data Source=xx.xx.xx.xx;Initial Catalog=xxxx;UID=xxxxxxx ;pwd=xxxxx;"/>
</connectionStrings>
<system.web>
<compilation debug="true" targetFramework="4.0"/>
<authentication mode="Forms">
<forms name="Login" loginUrl="Default.aspx" timeout="20" />
</authentication>
<membership>
<providers>
<add connectionStringName="LoginSQL" applicationName="Login"
enablePasswordRetrieval="false" enablePasswordReset="true" requiresQuestionAndAnswer="true"
requiresUniqueEmail="true" passwordFormat="Hashed" maxInvalidPasswordAttempts="3"
passwordAttemptWindow="30" minRequiredPasswordLength="6" minRequiredNonalphanumericCharacters="0"
name="MySqlLoginProvider" type="System.Web.Security.SqlMembershipProvider" />
</providers>
</membership>
<profile>
<providers>
<clear/>
<add name="AspNetSqlProfileProvider" type="System.Web.Profile.SqlProfileProvider" connectionStringName="ApplicationServices" applicationName="/"/>
</providers>
</profile>
<roleManager cacheRolesInCookie="true" cookieName=".ASPRoles"
cookieTimeout="60">
<providers>
<add connectionStringName="LoginSQL" applicationName="Login"
name="MyRoleProvider" type="System.Web.Security.SqlRoleProvider" />
</providers>
</roleManager>
</system.web>
<system.webServer>
<modules runAllManagedModulesForAllRequests="true"/>
</system.webServer>
</configuration>
I have a application that connects to a remote sql server. I am able to create users and they are stored in the DB. Then I can go to the login page and login. But after a while, I am unable to log in and it just sits at the login page. The user is still in the DB
<configuration>
<connectionStrings>
<add name="LoginSQL" providerName="System.Data.SqlClient"
[code]...
I am implementing strightforward membership provider. I do not want new users to be able to login without being approved.
I have tried the setting on the registration wizard called DisableCreatedUser="True" and this does not work.
I also set LoginCreatedUser to False, and the user still gets logged in.
If I look in the SQL membership table, 'IsApproved' is set to 0 for the account, but they can still login.
I'm debugging some unexpected behavior and while tracing in to the .NET framework I see a bunch of stuff like this:
if (Logging.On) {
Logging.PrintInfo(Logging.Web, this, SR.GetString(SR.net_log_n_certs_after_filtering, filteredCerts.Count));
...
}
But (as expected by default) the execution steps right over these. Is there some way to turn on the logging? Or is that just something that the framework developers can do while making special builds of the framework?
We use windows authentication. User opens our website in tab1 and does some action but with out clicking on save he opens a new tab tab2 and opens the same website again. Now, if the user session in tab1 is active i need to warn users that the he is already logged on to application in some other browser and go to some log out page. But if the user session in tab1 is timed out then he must be able to continue with the website in tab2 as usual, but if he tries to do anything in tab1 he should go to session expired page.
I tried implementing it in following way.
I have a hidden field in each page which will be set to unique Id using GUID.NewID().
when user requests for a page the following code is executed.
[Code]....
I want to create B'day schedule ...as per birthdate i wnt to send sms ...by using asp.net.......how cna i do ds..?
View 1 RepliesI'm using MS Enterprise Logging Application Block in an ASP.NET website.
For production launch, I will set up a log listener in one of these locations:
Sql Server database
Windows event log
Text files
Which has the least impact on performance?
NB - I can't switch to Log4Net or ELMAH at this point, so don't suggest that in your response.
how to auto login the user like in facebook.
what i mean that if the user ticks remember me then next time he will be auto logged in
Lets take an example of online ticket booking system. Many users could be booking the tickets at any point of time. a GridView displays the list of Allotted and Free seats If a seat gets booked, this information must get updated in all the opened pages in user's browser. User need not require to refresh the page to see if a seat is booked or not Should i put GridView in update panel and keep looking into the databse constantly ??? This could turn out to be a heavy work if databse is too large any other alternative?? or should i stick with the above approach....?
View 10 RepliesI spent a day trying to make Ent Lib Logging work and log anything into database or event log. I have a web application and console application with the same Ent Lib config but only the console application is capable to log into the Event Log. I tried everything with permissions but I don't know what exactly I am doing — which services should have what. It does not work!
I read articles like this[URL] and I want to try to give the ASPNET account those permissions. I am using Windows 7 and I cannot find ASPNET user account. So where is it?
This is the config file which is automatically generated from Ent Lib utility and it works only on App.config, not on web.config:
[code]....
I think my subject line explains my problem in a nutshell.. I have a login page, I login like I should and everything works.I logout and when I type/paste the address to the page, in the address field, I still reach it just like if I was still logged in..The page I type in the address field is in a subfolder, only suppose to be able to be reached by logged in users and in this folder,ith it's own web.config-file:
<?xml version="1.0"?>
<configuration>
<system.web>
[code]...
I have an asp.net web app that uses forms-based authentication, a SqlMembershipProvider (using an encrypted password format), and a SqlRoleProvider. I need to know if it's possible to administer the users (create new users, assign them to roles, etc.) from a windows application - the powers that be don't want any administrative functionality in the web app itself.
Here is the membership provider definition from web.config:
[code]....
So, obviously, I have a Sql Server database that contains the users and roles for the web app. I'd like to create a separate windows app that references the web app assembly, and use the configured MembershipProvider, RoleProvider, and machineKey to create users, assign users to roles, etc. If that's not possible, I can duplicate the configuration settings from web.config within the windows app. But I don't know how to do this either.
I need to stop users users using the browser back button and potentially submitting an old version of a form.
I'm storing a guid in a session variable and also writing the value to a hidden form field and then checking the session value against the hidden field value if a user does try to navigate back and submit an old form.
If the form is submitted and the user wants to complete a new copy of the form then a new guid is generated both to the session and to the hidden form field. Now, if the user decides to hit the back button a few times to get the old form and tries to submit it again, the page checks the current guid in session against the guid stored in the form field and it finds a mismatch and prevents the form being submitted.
This works as expected in Chrome and Firefox, but in IE6, when the user hits the back button to view the old form, the new guid value appears in the hidden field of the old form! This means the user can submit the old form again, which we definitely do not want.
Allow Admin Users to Access Basic Users Accounts?
View 4 Replies[Code]....
after successful creation of 3 users on my web site now cannot create users
different return for added users and for rejected users?
[Code]....
We have implemented the ASP membership and roles..and we would like to display the users currently logged in and also display the number of users online so we can display that on the page. The list of users woudl only be available to our admins. BUt the number of users will show for everyone.
View 9 RepliesI have used Login Control + Change Password + Create User Wizard in my project. Everything is working fine. I want to know that how to get the List of Users and also to Update/Delete users.
View 1 RepliesIn a system I am creating, the customer requires all changes to data to be logged to a database table - with only changes being logged (i.e. if they only change 1 value on a form full of 10 fields, it'll only audit that one change). So essentially I need to be able to compare the old values to the new values.
This is of course easy - I've done this before, but it was rather messy - I would manually check each field in the database and compare it to the new one to decide if it should be audited. Is there any easier way, of perhaps automatically getting the changed column name/values? Or do I have to do it my 'messy' way?
Pretty much all of the changes to be logged are done using LINQ to SQL - so perhaps there's a way to compare the database table to the modified one, before calling submit changes?
Has anyone signed up to webspark ? I thought Id check it out, but whenever I try to log onto the site I get this error
Error 310 (net::ERR_TOO_MANY_REDIRECTS): There were too many redirects.
I can nevr get access to the site, has anyone else used webspark or had this problem ? If you have used webspark, is it any good ?
I'm writing an application in asp.net mvc.I have got presentation layer, controllers and viewModel layer, document layer ( document model [I use ravendb] and repositories) and a framework layer.Currently I'm wondering how to design logging. I have chosen Nlog + Ninject.Logging extensions.My question is what information should I write to log ? ( in debug / release )I know that all exceptions should be logged...
View 1 Replies