I am looking to store a string field, a password, in a location that I can access within the code, but if you downloaded the code from a deployed place, you would not be able to access the password. Web.config is available for all to see, or else I would just slide it in there.
View 4 RepliesI am using web (asp.net 3.5). c#In my login form i accept username and password.what is best way of fecthing username and password from user and saving in sqlserver in terms of security .Is encription and decription only way? then how do i implement it?
View 8 RepliesI am trying to create a cookie for storing Username and Password.
This is so far I am :
[Code]....
But I am getting error :
[Code]....
I use this code to use in login
Code:
FormsAuthentication.HashPasswordForStoringInConfigFile(txtPassword.Text, "SHA1")
My question is how about, i how can convert into a string where it display the user password so that i can send it to the user when he/she forgot it?
I'm working on a blog and want to show my posts in eastern time zone. i figured that storing everything UTC would be the proper way. This creates a few challenges though:I have to convert all times from UTC to Eastern. This is not a biggie but adds a lot of code.And the "biggie" is that I use a short-date time to reference the posts by passing in a query, ala blogger. The problem is that there is no way to convert the short date time to the proper UTC date because I'm lacking the posted time info.
View 4 RepliesI am using asp.net mvc 2.0 to implement shopping cart application.My situation is , I have a order page, there i am adding the products to the Cart.Below it will show the Cart total.Next i will go to the shopping cart page to delete or editing the items.In this page it will show the same cart total as in the Order page.
But once again if i go back to the Order page to order some more products to the cart,the cart total in the order page is showing 0 amount. This is my Shopping cart controller action method,
public ActionResult ShoppingCart(int eventID)
{
Event e = eRepository.GetEvent(eventID);
var cart = Stalbans.Models.ShoppingCart.GetCart(this.HttpContext);
[Code]....
So once i will go to the shopping cart page from the order page and again coming back to the order page it has to show the same cart total. Actually data is persisted in the cart total but it is not showing .Because if you add one more item its amount will added to the existimng cart total and then shows the current cart total. So for the first time i click back at that it has to show the already existed cart total in the cart total value.
I am fetching data from .xls file and storing it in to database. Then my users work on a single table where I stored all .xls data. But the problem is that it takes tooooo much time.. So, I want to use cache. But I never used this... Can any one tell me this example how can I use cache with database for increasing application speed?
View 2 Repliesi want to add refence of Ajax what i do.
View 4 RepliesA customer has sent my a screen shot of their event log which shows an error from my ASP.Net app, the problem is it shows the line number where the error occurred but references my PC and the path into my files. Why? There's no references in my code
View 2 RepliesI have hosted a WCF service with windows authentocation enabled in it.Excerpts from web.config file are
<basicHttpBinding>
<binding name="NewBinding0">
<security mode="TransportCredentialOnly">
<transport clientCredentialType="Ntlm" />
[code]...
Error 1 The type or namespace name'CreateUser' does not exist in the namespace'LocalGarageFinder.Membership' (are you missing an assembly reference?)
I have checked the namespaces. all in. Security.Web.Security;
using System;
using System.Collections;
using System.Configuration;
using System.Data;
using System.Linq;
using System.Web;
[code]...
How generate OTP and send That OTP as mail in c#
View 1 RepliesI had a problem with my internet explorer where when i refresh page the submit button the a page would also execute which was leading to double entry of data . for that i had to right the code for the refresh page where it wud clear the cache and session or it wud not enter last session values .
protected void Page_Load(object sender, EventArgs e)
try
Session["DdlValue"] = DdlfacilityInsfindCsu.SelectedValue;
if (!IsPostBack)
Session["CheckRefresh"] = Server.UrlDecode(System.DateTime.Now.ToString());
GetDdl();
[code]...
I just finished setting up the environment for an ASP based web app on a Windows Server 2003 machine, IIS 6.0, ASP.NET 4.0., with custom service account.This is not a domain based setup, so I have created mirrored logins on both servers (WEB server and SQL Server 2005). Everything works just fine except the fact that every time I try to browse the main page, a login pop-up window will request login password confirmation. I tried many things so far. Making sure IIS is in NTLM Authentication mode, checking access rights for the local login I created, workarounds I found on MSDN, etc.
This happens only if I change the Directory Security to not allow anonymous access (Authenticated Access - Integrated Windows authentication only). If I keep both, or only anonymous, everything works fine.Is this the intended behavior? Am I doing something wrong here?I already tried everything I found on MSDN regarding these types of errors. If I do not enter a password for three times in a row, the error says "HTTP Error 401.1 - Unauthorized - Access is denied due to invalid credential."
I can recover my password but when I try to change my password to something a bit easier to remember it gives me:
Password incorrect or New Password invalid. New Password length minimum: 7. Non-alphanumeric characters required: 1.
I have a File Uploader in my ASP.NET application Using C#, we can upload any type like images, documents, pdf etc.
I m storing it in the Filesystem and having only the Name of the File in DB.My doubt is can we store the entire file, images in DB. State me Which is good practice and why we need to use it.
Either file System Storage or SQL DB Storage.
if user login first time in application in how i promot for change password in Asp.Net C#.
View 1 RepliesWhen a user that has their IE set to save passwords hits my "Reset Password" form, the first text box set with TextMode set to "Password" is populated with the users saved password. Understandable, this is not the affect I would like as this is their "old" password. I cannot set the text of a text box with mode set to "Password" (naturally). Does someone know how to suppress or clear this value when IE is saving passwords?
View 4 RepliesDoes anyone has a solution (sample code) for the following features:
Create a randomGuid/Cryptographically strong random number Send a unique URL containing the random number to the user's email address When confirmed, the user is asked to change password
My provider is currently parametrized this way:
[code]....
The security issues with this type of procedure have been discussed here before.
I am using Forms Authentication in a new ASP.NET 3.5 Application.I have created the Tables in my database and run the Web Site Administration Too.When I try to create a user I get a password error no matter what I throw at it and I am becoming sure of that this is a symptom of an a setup error and not a password problem.One of the things that I notice is that my aspnet_Applications is empty and I am not sure what is supposed to fill it.I have tried to delete all the aspnet tables and done the procedure again but with the same result.
View 1 RepliesI am using the below post to encrypt and decrypt the password.
ENCRYPT POST
Now my code is working for Encryption. But now what I want is,
When I am using Forgot passwprd functionality, I want to send the decrypted password to the respective user in the Email.
In my database table the password is saved in the Encrypted format.
I have the code decrypt code from the above mentioned post, the question is where to place in the below code so that it will decrypt it properly
Here is my code:-
protected void btnSubmit_Click(object sender, EventArgs e) {
DataSet ds = new DataSet();
using (SqlConnection conn = new SqlConnection(System.Configuration.ConfigurationManager.ConnectionStrings["DefaultCSRConnection"].ConnectionString)) {
conn.Open();
[Code] ....
My company has some unique password policies (such as a pwd cannot be re-used for 6 months, aside from the must include #, special character, upper & lower case)Can anyone suggest how to go about ensuring that a new user's password complies with these policies (using forms authentication in .net 3.5 framework)?
View 2 RepliesI using change password control, how can i change the password without enter the current password?
View 8 RepliesURL...how we can sending formatted email now in my Login.aspx page i have Textbox that when users forget their password they should type their Username on the textbox and after that click on send button.I want when users click on send button their user name that they type in textbox be on the email that send to me .
View 1 RepliesI'm using the ChangePassword method of membership provider to change the password and one of the requirement before calling the ChangePassword is to retrieve the current password. But I'm getting error:
padding is invalid and cannot be removed
below is my web.config:
[code]....