I wonder if anybody know a web site that has a good tutorial on this
subject.
What I want to do, is make a log in Page, and make sure that all my
pages is validating that the user is loged in until he or she logs out.
May be someone would like to give an example in this news group too?
Thank you for any help!
BTW, I am using Access 2000 and classic ASP.
Regards
Jan
11  3317 
"Jan T." <My************ ********@hotmai l.comwrote in message
news:OK******** ******@TK2MSFTN GP02.phx.gbl...
>I wonder if anybody know a web site that has a good tutorial on this
subject.
What I want to do, is make a log in Page, and make sure that all my
pages is validating that the user is loged in until he or she logs out.
May be someone would like to give an example in this news group too?
Thank you for any help!
BTW, I am using Access 2000 and classic ASP.
You should be able to find enough help here: http://msconline.maconstate.edu/tuto...SP/default.htm
Look specifically at the Database Access section (use the OleDb Provider)
and the Using Session Variables chapter.
--
Mike Brind
MVP - ASP/ASP.NET
Thank you very much. I have been reading most of it by now, but are still
wondering
if the system is safe enough? What I mean is, will it be enough to just
check the session
variable to verify that it is a valid user?
I am a newbie with asp, so in such times as now, I am interested to know
what the
chances are for unauthorized to get in where it should only be for loged in
persons.
And the best way to stop unauthorized to get in.
Thank you for any help or suggestions.
Regards
Jan
"Mike Brind [MVP]" <pa*******@hotm ail.comskrev i melding
news:e3******** ******@TK2MSFTN GP02.phx.gbl...
>
"Jan T." <My************ ********@hotmai l.comwrote in message
news:OK******** ******@TK2MSFTN GP02.phx.gbl...
>>I wonder if anybody know a web site that has a good tutorial on this
subject.
What I want to do, is make a log in Page, and make sure that all my
pages is validating that the user is loged in until he or she logs out.
May be someone would like to give an example in this news group too?
Thank you for any help!
BTW, I am using Access 2000 and classic ASP.
You should be able to find enough help here:
http://msconline.maconstate.edu/tuto...SP/default.htm
Look specifically at the Database Access section (use the OleDb Provider)
and the Using Session Variables chapter.
--
Mike Brind
MVP - ASP/ASP.NET
Yes - checking the session variable is enough. That is the defacto method
for authentication.
On a bit of a side note, you mention that you are new to ASP. I have no
idea what the circumstances are that led you to beginning with ASP, but if
you have a choice in the technology you can learn, you might want to
consider ASP.NET (which is Microsoft's replacement for "classic ASP"). More
can be found at www.asp.net/learn
--
Mike Brind
MVP - ASP/ASP.NET
"Jan T." <My************ ********@hotmai l.comwrote in message
news:u6******** ******@TK2MSFTN GP03.phx.gbl...
Thank you very much. I have been reading most of it by now, but are still
wondering
if the system is safe enough? What I mean is, will it be enough to just
check the session
variable to verify that it is a valid user?
I am a newbie with asp, so in such times as now, I am interested to know
what the
chances are for unauthorized to get in where it should only be for loged
in persons.
And the best way to stop unauthorized to get in.
Thank you for any help or suggestions.
Regards
Jan
"Mike Brind [MVP]" <pa*******@hotm ail.comskrev i melding
news:e3******** ******@TK2MSFTN GP02.phx.gbl...
>>
"Jan T." <My************ ********@hotmai l.comwrote in message
news:OK******* *******@TK2MSFT NGP02.phx.gbl.. .
>>>I wonder if anybody know a web site that has a good tutorial on this
subject.
What I want to do, is make a log in Page, and make sure that all my
pages is validating that the user is loged in until he or she logs out.
May be someone would like to give an example in this news group too?
Thank you for any help!
BTW, I am using Access 2000 and classic ASP.
You should be able to find enough help here:
http://msconline.maconstate.edu/tuto...SP/default.htm
Look specifically at the Database Access section (use the OleDb Provider)
and the Using Session Variables chapter.
--
Mike Brind
MVP - ASP/ASP.NET
Well, I know vbscript and have tried to make a few sample asp applications,
like
a telephone cataloge an so on. I know a little Java but are unfamiliar to
C#.
In am experienced in vba, so I figured that classic asp was the easiest way?
However, after having watch the first video, I am exited and I might just
watch some
more before desiding. I really liked what I saw. So thank you for a good
tip!!
Regards
Jan
"Mike Brind [MVP]" <pa*******@hotm ail.comskrev i melding
news:OX******** ******@TK2MSFTN GP02.phx.gbl...
Yes - checking the session variable is enough. That is the defacto method
for authentication.
On a bit of a side note, you mention that you are new to ASP. I have no
idea what the circumstances are that led you to beginning with ASP, but if
you have a choice in the technology you can learn, you might want to
consider ASP.NET (which is Microsoft's replacement for "classic ASP").
More can be found at www.asp.net/learn
--
Mike Brind
MVP - ASP/ASP.NET
"Jan T." <My************ ********@hotmai l.comwrote in message
news:u6******** ******@TK2MSFTN GP03.phx.gbl...
>Thank you very much. I have been reading most of it by now, but are still
wondering
if the system is safe enough? What I mean is, will it be enough to just
check the session
variable to verify that it is a valid user?
I am a newbie with asp, so in such times as now, I am interested to know
what the
chances are for unauthorized to get in where it should only be for loged
in persons.
And the best way to stop unauthorized to get in.
Thank you for any help or suggestions.
Regards
Jan
"Mike Brind [MVP]" <pa*******@hotm ail.comskrev i melding
news:e3******* *******@TK2MSFT NGP02.phx.gbl.. .
>>>
"Jan T." <My************ ********@hotmai l.comwrote in message
news:OK****** ********@TK2MSF TNGP02.phx.gbl. ..
I wonder if anybody know a web site that has a good tutorial on this
subject.
What I want to do, is make a log in Page, and make sure that all my
pages is validating that the user is loged in until he or she logs out.
May be someone would like to give an example in this news group too?
Thank you for any help!
BTW, I am using Access 2000 and classic ASP.
You should be able to find enough help here:
http://msconline.maconstate.edu/tuto...SP/default.htm
Look specifically at the Database Access section (use the OleDb
Provider) and the Using Session Variables chapter.
--
Mike Brind
MVP - ASP/ASP.NET
"Mike Brind [MVP]" <pa*******@hotm ail.comwrote in message
news:OX******** ******@TK2MSFTN GP02.phx.gbl...
Yes - checking the session variable is enough. That is the defacto method
for authentication.
On a bit of a side note, you mention that you are new to ASP. I have no
idea what the circumstances are that led you to beginning with ASP, but if
you have a choice in the technology you can learn, you might want to
consider ASP.NET (which is Microsoft's replacement for "classic ASP").
More can be found at www.asp.net/learn
Hi, Mike
(As a little "testimonia l" if you will) Not being a real developer I am sort
of in a constant state of being "new" to ASP, most of my ASP stuff at work
is just sort of side-projects and not part of my real job,...but there is no
one else around here to do those, so there I am. I chose ASP Classic
originally because ASP.Net had not come out yet,..but I have stayed with
Classic because you don't have to buy anything,...you can just use Notepad
to write it if you want to,...I couldn't afford the .Net Suite. I've been
told you can do ASP.Net with Notepad,..but if it is as hard as it is with
the Suite, it can't be "easier" with Notepad. Since then I have the Suite
via an MSDN Subscritpion when I was an MVP, but that is getting about 2
years old now (not an MVP now). I worked a little with ASP.Net but found it
a whole lot harder to deal with and even the simplest things seem overly
complex. Then the database access in the Suite is so heavily geared towards
the SQL Express that is packaged with it that it became a complete mess to
try to do anything with Access MDB files that I always use. SQL Express (or
Full) just is not an option in most of my situations.
So I will probably use ASP Classic for as long as IIS supports it,..and when
it no longer supports it I will probably not do anything at all any longer.
Then I'll just tell people,.."Don't look at me,...I'm not a developer". :-)
I do get tempted to "piddle" with the Suite from time to time (both VB.Net
and ASP.net) but I don't see it ever becomming more than than. I don't
currently have the Suite loaded on anything, but if I do it will probably be
in a an XP virtual machine (Virtual PC) because the suite is so huge and
intrusive that I don't want it on my machine I use all the time.
Anyway, that is my little story. I don't post much in this group since my
ASP skills aren't that high, but I like reading the answers people get and
try to learn from them. My main area is the Networking Groups with a
particular forcus on MS ISA Server (former ISA MVP).
--
Phillip Windell www.wandtv.com
The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
"Phillip Windell" <ph*********@ho tmail.comwrote in message
news:el******** ******@TK2MSFTN GP02.phx.gbl...
"Mike Brind [MVP]" <pa*******@hotm ail.comwrote in message
news:OX******** ******@TK2MSFTN GP02.phx.gbl...
>Yes - checking the session variable is enough. That is the defacto
method for authentication.
On a bit of a side note, you mention that you are new to ASP. I have no
idea what the circumstances are that led you to beginning with ASP, but
if you have a choice in the technology you can learn, you might want to
consider ASP.NET (which is Microsoft's replacement for "classic ASP").
More can be found at www.asp.net/learn
Hi, Mike
(As a little "testimonia l" if you will) Not being a real developer I am
sort of in a constant state of being "new" to ASP, most of my ASP stuff at
work is just sort of side-projects and not part of my real job,...but
there is no one else around here to do those, so there I am. I chose ASP
Classic originally because ASP.Net had not come out yet,..but I have
stayed with Classic because you don't have to buy anything,...you can just
use Notepad to write it if you want to,...I couldn't afford the .Net
Suite. I've been told you can do ASP.Net with Notepad,..but if it is as
hard as it is with the Suite, it can't be "easier" with Notepad. Since
then I have the Suite via an MSDN Subscritpion when I was an MVP, but that
is getting about 2 years old now (not an MVP now). I worked a little with
ASP.Net but found it a whole lot harder to deal with and even the simplest
things seem overly complex. Then the database access in the Suite is so
heavily geared towards the SQL Express that is packaged with it that it
became a complete mess to try to do anything with Access MDB files that I
always use. SQL Express (or Full) just is not an option in most of my
situations.
So I will probably use ASP Classic for as long as IIS supports it,..and
when it no longer supports it I will probably not do anything at all any
longer. Then I'll just tell people,.."Don't look at me,...I'm not a
developer". :-)
I do get tempted to "piddle" with the Suite from time to time (both VB.Net
and ASP.net) but I don't see it ever becomming more than than. I don't
currently have the Suite loaded on anything, but if I do it will probably
be in a an XP virtual machine (Virtual PC) because the suite is so huge
and intrusive that I don't want it on my machine I use all the time.
Anyway, that is my little story. I don't post much in this group since my
ASP skills aren't that high, but I like reading the answers people get and
try to learn from them. My main area is the Networking Groups with a
particular forcus on MS ISA Server (former ISA MVP).
Circumstances drove me to learn classic ASP, although ASP.NET was in v1.0 at
the time. I looked at 1.1 and even bought VS2003, but just couldn't get on
with it. When v2.0 came out, I downloaded the free Visual Web Developer,
and had another look at ASP.NET, and got hooked. The (then) new Access- and
SqlDataSource controls made things dead simple (although I use the
ObjectDataSourc e now). I'm totally self-taught. Well, that's not strictly
true - I got loads of free lessons from people like Bob Barrows, Aaron
Bertrand, Anthony Jones, Dave Anderson and other regular contributors here.
But the point is, if I can do it, then anyone with the will can do it.
Microsoft (understandably ) would prefer people to use SQL Server (Express),
so they don't offer anything really in terms of help with using Access.
I've tried to address that on my little site, and posted some items on the
most common problems that people using Access with ASP.NET experience,
although I haven't used Access myself for a couple of years in anger.
Visual Web Developer is completely free, and its footprint is about a third
that of Team Suite (from memory). Might be worth a look...
--
Mike Brind
MVP - ASP/ASP.NET
"Mike Brind [MVP]" <pa*******@hotm ail.comwrote in message
news:ek******** ******@TK2MSFTN GP05.phx.gbl...
>
Circumstances drove me to learn classic ASP, although ASP.NET was in v1.0
at the time. I looked at 1.1 and even bought VS2003, but just couldn't
get on with it. When v2.0 came out, I downloaded the free Visual Web
Developer, and had another look at ASP.NET, and got hooked. The (then)
new Access- and SqlDataSource controls made things dead simple (although I
use the ObjectDataSourc e now). I'm totally self-taught. Well, that's not
strictly true - I got loads of free lessons from people like Bob Barrows,
Aaron Bertrand, Anthony Jones, Dave Anderson and other regular
contributors here.
Yep familar names :-) Although I haven't seen Aarons Bertand's name around
much anymore. I had breakfast with Bob Barrows one morning at one of the
previous MVP Summits, but I don't know if he remembers me. Curt Christianson
may have been at the table too, but its all getting a little fuzzy now. I
have not been in the MVP program for about a year and a half now.
Visual Web Developer is completely free, and its footprint is about a
third that of Team Suite (from memory). Might be worth a look...
Yea, I may have to check that out. Especially if they have improved things
with more/better data access controls.
--
Phillip Windell www.wandtv.com
The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Phillip Windell wrote:
"Mike Brind [MVP]" <pa*******@hotm ail.comwrote in message
news:ek******** ******@TK2MSFTN GP05.phx.gbl...
Yep familar names :-) Although I haven't seen Aarons Bertand's name
around much anymore. I had breakfast with Bob Barrows one morning at
one of the previous MVP Summits, but I don't know if he remembers me.
Curt Christianson may have been at the table too, but its all getting
a little fuzzy now. I have not been in the MVP program for about a
year and a half now.
Your memory is fine, i would say :-)
--
Microsoft MVP - ASP/ASP.NET
Please reply to the newsgroup. This email account is my spam trap so I
don't check it very often. If you must reply off-line, then remove the
"NO SPAM"
"Mike Brind [MVP]" wrote:
Visual Web Developer is completely free, and its footprint is about
a third that of Team Suite (from memory). Might be worth a look...
Unless things have changed from the last time I used it, Visual Web
Developer 2008 has dropped support (Intellisense, code formatting, etc.) for
classic ASP. This is a real shame, because VWB 2005 was a great IDE for
classic ASP work. The full Visual Studio 2008 seems to have no such
problems.
--
Dave Anderson
Unsolicited commercial email will be read at a cost of $500 per message. Use
of this email address implies consent to these terms. This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics | |
by: tstephan |
last post by:
In the past we have used the classic nTier design with COM+, SQL Server
and MFC. We are currently working on a new project with an opportunity
to use .NET, ADO.NET, etc. One of the areas where I don't find a clear
migration path is with security. In the classic method, the server
side tiers were installed under COM+ and run as a known user....
|
by: frank |
last post by:
I am in the process of writing a fairly large ASP.NET web application and I
am about to implement log-ons, permissions etc. I have never used any
security with ASP.NET before; only classic ASP.
I would like to base my user's logon information and permissions on their
domain account. What is the best way to do this? Can web-based forms...
|
by: J |
last post by:
Hi all, is there a recommended approach to integrate ASP.NET security features in a classic ASP app? My general idea is to create a front end sign in process to authenticate the user and issue an authentication ticket that the ASP pages could somehow use to identify the user. Has someone already solved this?
Thanks
|
by: razvan |
last post by:
I need advice about adding security to a web service without using WSE, as
the clients will run Win98.
|
by: nugget |
last post by:
Role-based security for an ASP/ASP.NET mixed environment
Hello:
My co-worker and I have been charged with designing role-based security
for our intranet. The technologies we have to work with are ASP and
ASP.NET. This security design must support *both* technologies.
Currently, we have a successful collection of both ASP and ASP.NET...
| | |
by: hames.bond |
last post by:
G'day,
I have 2 Win2K servers, 1 is my database server, 1 runs IIS
On the IIS machine I have an ASP.NET 2 application that makes a call to
a proprietry 3rd party COM Object/DLL that makes a call to a database
on server number 2.
When the DLL call is run, I get
"Security.Permissions.SecurityPermission" error and thats all it says.
|
by: mwhite |
last post by:
Hi, I am adding a security layer to a company intranet, which is
written in classic ASP. The company have said they do not want to pay
for re-writing the site, and I have managed to get Forms authentication
working by changing the .htm pages to a .aspx extension. However, the
site includes a sitemap, admin section and quiz that are created...
|
by: Atlbike |
last post by:
I would like to know if anyone has ever heard of a security solution
for preventing cross-site scripting attacks in classic asp. ASP.NET
1.1 provided a built in validateRequest feature that throws a security
exception whenever there is a < and character combination in the
request/forms collection. Does anyone know of a server solution that...
|
by: TimVtoo |
last post by:
Hi, and thanks for your time.
Using vb.net
I'm new to .net, recently moved from classic asp!
I'm creating an intranet web application that needs to keep a log of user activity.
What I would have done in classic ASP is to store the user ID from my user table in any new records. Then I could drill down from that as needed. But now with .net...
|
by: marktang |
last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main...
|
by: Oralloy |
last post by:
Hello folks,
I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>".
The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed.
This is as boiled down as I can make it. ...
| | |
by: Hystou |
last post by:
Overview:
Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For...
|
by: tracyyun |
last post by:
Dear forum friends,
With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the...
|
by: conductexam |
last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one.
At the time of converting from word file to html my equations which are in the word document file was convert...
|
by: TSSRALBI |
last post by:
Hello
I'm a network technician in training and I need your help.
I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs.
The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols.
I succeeded, with both firewalls in...
|
by: adsilva |
last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
|
by: 6302768590 |
last post by:
Hai team
i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
| | |
by: bsmnconsultancy |
last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating...
| |
