c# - Authentication and RedirectFromLoginPage doesnt work properly asp.net -
im trying make homepage secured visit pages without login , have read lot authentication/authorization.
first problem still can visit home.aspx example if havent done login. ive set authorization deny users still works.
second problem put defualturl hom because want user redirected page after correct login still searches /defualt page....
hope can me.
here code..
login + code behind
<asp:content id="content1" contentplaceholderid="contentplaceholder1" runat="server"> <form id="form1" runat="server"> <br /> <table> <tr> <td> benutzer:</td> <td> <asp:textbox id="username" runat="server" width="120px" /></td> <td> <asp:requiredfieldvalidator id="requiredfieldvalidator1" controltovalidate="username" display="dynamic" errormessage="bitte benutzer eingeben" runat="server" /> </td> </tr> <tr> <td> passwort:</td> <td> <asp:textbox id="password" textmode="password" runat="server" width="120px" /> </td> <td> <asp:requiredfieldvalidator id="requiredfieldvalidator2" controltovalidate="password" errormessage="bitte passwort eingeben" runat="server" /> </td> </tr> </table> <asp:button id="btnlogin" onclick="btnlogin_click" text="einloggen" runat="server" /> <p> <asp:label id="msg" forecolor="red" runat="server" /> </p>
protected void page_load(object sender, eventargs e) { } protected void btnlogin_click(object sender, eventargs e) { datalayer.dataconnector dat = new datalayer.dataconnector("provider=sqloledb; data source=rzwsrv010;database=event;user id=event;password=event; persist security info=false"); datatable dt = dat.dataselect("select userid login username = '" + username.text.replace("'", "''") + "' , password = '" + password.text.replace("'", "''") + "'"); if (dt.rows.count > 0) { formsauthentication.redirectfromloginpage(username.text, false); } else { msg.text = "falsche benutzer oder passwort"; } } protected void page_load(object sender, eventargs e) { } protected void btnlogin_click(object sender, eventargs e) { datalayer.dataconnector dat = new datalayer.dataconnector("provider=sqloledb; data source=rzwsrv010;database=event;user id=event;password=event; persist security info=false"); datatable dt = dat.dataselect("select userid login username = '" + username.text.replace("'", "''") + "' , password = '" + password.text.replace("'", "''") + "'"); if (dt.rows.count > 0) { formsauthentication.redirectfromloginpage(username.text, false); } else { msg.text = "falsche benutzer oder passwort"; } } <?xml version="1.0" encoding="utf-8"?>
to use microsoft security have have membership bits in config believe. easiest way authentication run aspnet_regsql.exe against database want users. create tables etc work default microsoft security. might not how want implement work.
the aspnet_regsql inside microsoft.net folders such as
c:\windows\microsoft.net\framework64\v4.0.30319 <connectionstrings> <add name="platform" connectionstring="data source=[server];initial catalog=[database];persist security info=true;user id=[login];password=password" providername="system.data.sqlclient" /> </connectionstrings> <authentication mode="forms"> <forms loginurl="/login.aspx" defaulturl="/home.aspx" timeout="240" slidingexpiration="true" /> </authentication> <authorization> <deny users="?"/> </authorization> <membership defaultprovider="provider"> <providers> <clear /> <add name="provider" type="system.web.security.sqlmembershipprovider" connectionstringname="platform" enablepasswordreset="true" requiresquestionandanswer="false" requiresuniqueemail="false" passwordformat="hashed" minrequiredpasswordlength="7" minrequirednonalphanumericcharacters="0" enablepasswordretrieval="false" applicationname="/" /> </providers> </membership>
Comments
Post a Comment