473,657 Members | 2,294 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Have not all the pages protected by the login page

My web.config looks like this concerning login :

<authenticati on mode="Forms">

<forms loginUrl="frmLo gin.aspx" timeout="20" />

</authentication>

<authorizatio n>

<deny users="?" /> <!-- Allow all users -->

</authorization>
And cookieless is set to True

I would like to know if it is possible to not have all my pages protected by
the login page. My login page performs some checks in its page_load (read
registry entries etc..) and if an error happens (missing registry keys for
example) I would like it to redirect to an Error page of my own. But if I
include this error page in my project as an aspx page (or even html fails
because it is not treated as aspx and will not load because of cookiless,
session ID appears in the URL and seems to cause problems) it will become
protected by the login page so I won't see it anyways...

Someone can help ?
--
Philippe Meunier
Programmer
CHCA Computer Systems Inc.
Nov 17 '05 #1
1 1545
Hi Philippe,

The following article looks like it's exactly what you want.
316871 HOW TO: Control Authorization Permissions in an ASP.NET Application
http://kb/article.asp?id=Q316871

Thank you, Mike
Microsoft, ASP.NET Support Professional

Microsoft highly recommends to all of our customers that they visit the
http://www.microsoft.com/protect site and perform the three straightforward
steps listed to improve your computer’s security.

This posting is provided "AS IS", with no warranties, and confers no rights.
--------------------
From: "Philippe Meunier" <pm******@chca. ca>
Subject: Have not all the pages protected by the login page
Date: Fri, 24 Oct 2003 10:41:24 -0400
Lines: 35
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Message-ID: <ec************ **@TK2MSFTNGP11 .phx.gbl>
Newsgroups: microsoft.publi c.dotnet.framew ork.aspnet
NNTP-Posting-Host: 206.47.191.74
Path: cpmsftngxa06.ph x.gbl!TK2MSFTNG P08.phx.gbl!TK2 MSFTNGP11.phx.g bl
Xref: cpmsftngxa06.ph x.gbl microsoft.publi c.dotnet.framew ork.aspnet:1863 33
X-Tomcat-NG: microsoft.publi c.dotnet.framew ork.aspnet

My web.config looks like this concerning login :

<authenticati on mode="Forms">

<forms loginUrl="frmLo gin.aspx" timeout="20" />

</authentication>

<authorizatio n>

<deny users="?" /> <!-- Allow all users -->

</authorization>
And cookieless is set to True

I would like to know if it is possible to not have all my pages protected by the login page. My login page performs some checks in its page_load (read
registry entries etc..) and if an error happens (missing registry keys for
example) I would like it to redirect to an Error page of my own. But if I
include this error page in my project as an aspx page (or even html fails
because it is not treated as aspx and will not load because of cookiless,
session ID appears in the URL and seems to cause problems) it will become
protected by the login page so I won't see it anyways...

Someone can help ?
--
Philippe Meunier
Programmer
CHCA Computer Systems Inc.


Nov 17 '05 #2

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

2
3092
by: Alex Rybalov | last post by:
Hi, Using IIS 5.0 and sometime some asp pages (absolutely randomly) showing as blank white pages. So far only one way of fixing it - restart whole server. Restarting IIS, or specific web server not helping, only whole server. I enable server side and client side debugging, but no errors showing up...
8
1654
by: joe | last post by:
Some time ago I set up an ASP application that used a login page which checked a username and password against a database to determine a users authorization to access certain pages on the site. This was done by setting a session variable within the application if the user was authorized and using code one each page for which protection was required to check for the status of the session variable. Now I am aware of the various techniques...
5
8720
by: Columbia Pike | last post by:
Hi, I'm trying to have a login page; after logging in the user has to see the list of SQL Server Databases available to him/her. I'm always getting the error 'ASP.login_aspx' does not contain a definition for 'btnSignIn_Click' I have the btnSignIn_Click function defined in a codebehind .cs file - The file name is Connect.aspx.cs. I made a DLL and have that DLL in the Bin subfolder (Bin\Connect.dll). Here's the command I used for...
2
2559
by: Shawn Berg | last post by:
Some of my pages in the app I am developing inherit from a BasePage class I have created. I have done plenty of these in the past and they work fine. Now, however, I have an additional requirement. In my BasePage class I need to check the user's browser for a particular cookie, and if certain conditions aren't met, redirect the user to another page. You can see the code for my BasePage class below. The problem lies in the LoggedIn...
4
1773
by: Greg Scharlemann | last post by:
I thought I had a workable approach to specifing which pages required a redirect in a config file, but it appears the way I'm attempting to do it is not going to work. The idea is that I can specify in the config file all of the pages that require a user to login otherwise the page will redirect if the user is not logged in. config.php looks like this: ----------------------
1
1674
by: =?Utf-8?B?U2VtU2Vt?= | last post by:
Helloz iam working in a web application for univesity. ihave diffrent kind of roles like: 1-Studetn Affairs 2-Staff imake three sperate master pages for them.: example:
1
919
by: miladhatam | last post by:
what is the best security way to access a private page i use session for example if (Session.Contents.ToString() != "admin") { Response.Redirect("default.aspx"); } but i know it is not safe can you help me ?
4
2755
by: RMA | last post by:
Hello All, Is it possible to add an rss feed (e.g. an .aspx page that writes xml content to the response stream) to a forms authenticated web site? Anonymous users shouldn't be able to read the contents of the page. Ideally the rss reader would display the user for (forms authentication) credentials. Is this possible? If yes, how? TIA!
1
1562
by: chowdary | last post by:
hi, when the user clicks the logout.php the session variables are destroying. my doubt is when the user clicking back, again they are entering into the pages. how to check whether session variables exist or not. if the sessions variables are not exist i use header to go login.html page. if yes the user can enter the pages.......in every page i want to check whether session variables exist or not......
1
8512
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
8612
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
7347
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
0
5638
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
4171
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
0
4329
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
2739
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
2
1969
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.
2
1732
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.