Usage of Forms Authentication.

Andrew

Hi, friends,

When we set authentication in web.config file like the follows:

<authenticati on mode="Forms">
<forms loginUrl="login .aspx" name="myAppCook ie" />
</authentication>

we really force a user to access login.aspx first, right?

However, in many cases, we really want to show default.aspx and some other
..aspx to visitors who are not our customers yet. We want them to look at our
web pages before they decide to create an account with us. (With above
setting, a user will have to create a new account before he/she can view any
other pages).

How can I implement this business requirment in asp.net app? Any reference
paper, sample source code?

Thanks a lot for your help.

Nov 19 '05 #1

Subscribe Reply

924

brians[MCSD]

Hello Andrew -

There's probably a couple of different ways to do accomplish your goal but
the <location> and <authorizatio n> elements in web.config are your friends.
One way would be to put a link on your login.aspx page to a mydemo directory.
That way when anyone connects to your website, they will be presented with
the login page but anyone could link to the demo directory. In the web.config
you would need to use the <location> element and allow everyone access:

<location path="mydemo">
<system.web>
<authorizatio n>
<allow users="*" />
</authorization>
</system.web>
</location>

Or you can use use the <location> element and to allow access to individual
pages in the default directory:

<configuratio n>
<location path="anyone.as px">
<system.web>
<authorizatio n>
<allow users="*"/>
</authorization>
</system.web>
</location>
</configuration>

As you can imagine, there's plenty of variations. Check out the following
article for a pretty good overview on form authorization:

http://www.theserverside.net/article...Authentication

--
brians
http://www.limbertech.com
"Andrew" wrote:

Hi, friends,

When we set authentication in web.config file like the follows:

<authenticati on mode="Forms">
<forms loginUrl="login .aspx" name="myAppCook ie" />
</authentication>

we really force a user to access login.aspx first, right?

However, in many cases, we really want to show default.aspx and some other
.aspx to visitors who are not our customers yet. We want them to look at our
web pages before they decide to create an account with us. (With above
setting, a user will have to create a new account before he/she can view any
other pages).

How can I implement this business requirment in asp.net app? Any reference
paper, sample source code?

Thanks a lot for your help.

Nov 19 '05 #2

Similar topics

4845

Secure and Unsecure Web Directories using Forms Authentication

by: Billy Jacobs | last post by:

I have a website which has both secure and non-secure pages. I want to uses forms authentication. How do I accomplish this? Originally I had my web.config file in the root with Forms Authentication set up and it worked just fine. Then I realized that I needed to have some pages unsecure. I then created 2 directories. One named Secure and the other named Public. I placed my web.config file in my

.NET Framework

4874

Forms authentication in a subfolder problem, please help

by: Kris van der Mast | last post by:

Hi, I've created a little site for my sports club. In the root folder there are pages that are viewable by every anonymous user but at a certain subfolder my administration pages should be protected by forms authentication. When I create forms authentication at root level it works but when I move my code up to the subfolder I get this error: Server Error in '/TestProjects/FormsAuthenticationTestingArea' Application.

ASP.NET

3200

Usage of "Request.UrlReferrer"

by: | last post by:

I've got \\root\folder\Page2.aspx that I want to controll access to, by establishing a rule that says "previous URL must be '\\root\folder\Page1.aspx' (which did password validation). The code snippet below does 1) allow valid Page_Load if referring URL was 'Page1', and 2) disallows Page_Load if the *initial* access attempt was PRIOR to any valid load of 'Page2'... <code> // In Page_Load... // check the prior URL and make sure our...

ASP.NET

2519

Forms Authentication question: How to have some pages open and some requiring forms authentication

by: Eric | last post by:

I am trying to build an app where the stuff in the root directory is open to all, but anything under the Restricted directory requires you to login and I want to use Forms to do it. I'm having trouble getting the web.config to work properly. First I tried to have a second web.config in the sub directory with authentication and authorization set to forms, but it blew up. Next, I tried to modify the root web.config in the following manner...

ASP.NET

4253

ASP.NET Forms Authentication Best Practices

by: Anonieko Ramos | last post by:

ASP.NET Forms Authentication Best Practices Dr. Dobb's Journal February 2004 Protecting user information is critical By Douglas Reilly Douglas is the author of Designing Microsoft ASP.NET Applications and owner of Access Microsystems. Doug can be reached at doug@accessmicrosystems.com. --------------------------------------------------------------------------------

ASP.NET

2049

Trouble with forms authentication

by: Justin | last post by:

I am trying to password protect a subdirectory using forms authentication. I am using the "Location" tag to specify the directory to be protected. The login.aspx page is in the root directory of the app. Here is the web.config: <location path="Admin"> <system.web> <authentication mode="Forms"> <forms name="authAdmin" loginUrl="Login.aspx" protection="All" timeout="30"> <credentials passwordFormat="Clear"> <user name="Admin"...

ASP.NET

1672

Forms Auth. Question

by: V. Jenks | last post by:

Using forms authentication, can I control which pages and/or directories a user would have access to or is that only available with Windows authentication? Thanks!

ASP.NET

424

Forms Authentication

by: =?Utf-8?B?R3V1czEyMw==?= | last post by:

Hi, I created a web site on a remote server. To logon the user must enter a user id and password. The site is uses Forms Authentication. The web config file looks as follows: <configuration> <system.web> <customErrors mode="Off"/>

ASP.NET

3576

Forms Authentication vs MembershipProvider

by: Rory Becker | last post by:

Having now created a Custom MembershipProvider that seems to work correctly with my Logon and ChangePassword controls, I am, as they say, a happy bunny. The next stange is to move on to the creation of content which adjusts based on the user. I have several pages which require a user to be logged on and several which do not. Prior to this point in time I have used 2 different master pages. one with a control which checks a session...

ASP.NET

9596

Changing the language in Windows 10

by: Hystou | last post by:

Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...

Windows Server

10607

Problem With Comparison Operator <=> in G++

by: Oralloy | last post by:

Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...

C / C++

10359

Maximizing Business Potential: The Nexus of Website Design and Digital Marketing

by: jinu1996 | last post by:

In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...

Online Marketing

10104

Discussion: How does Zigbee compare with other wireless protocols in smart home applications?

by: tracyyun | last post by:

Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...

General

9182

AI Job Threat for Devs

by: agi2029 | last post by:

Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...

Career Advice

6875

Couldn’t get equations in html when convert word .docx file to html file in C#.

by: conductexam | last post by:

I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...

C# / C Sharp

5541

Trying to create a lan-to-lan vpn between two differents networks

by: TSSRALBI | last post by:

Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...

Networking - Hardware / Configuration

5677

Windows Forms - .Net 8.0

by: adsilva | last post by:

A Windows Forms form does not have the event Unload, like VB6. What one acts like?

Visual Basic .NET

3007

Comprehensive Guide to Website Development in Toronto: Expert Insights from BSMN Consultancy

by: bsmnconsultancy | last post by:

In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

General