Best "login" method?

[Svein Erik Storkaas]

I am about to add security to a web project for the first time, and i'm
wondering what the easiest, yet a good way to do this?
The page is just for personal use, so it does not need to be "ultra" secure.

Is it ok just to store 'usrName' and 'psWrd' in an Access db, and manage it
from there? If so, how do i control if the user really IS authorized on all
the 'protected' pages?

Thanks!

[srini]

Hi
Using forms authentication is perhaps best suited for a project like yours. Refer this link http://www.15seconds.com/issue/020220.htm for more details on how to implement forms authentication
The Bes
Srini

[Scott Mitchell [MVP]]

Svein Erik Storkaas wrote:

I am about to add security to a web project for the first time, and i'm
wondering what the easiest, yet a good way to do this?
The page is just for personal use, so it does not need to be "ultra" secure.
Look at forms authentication -
http://www.4guysfromrolla.com/webtech/110701-1.shtml
Is it ok just to store 'usrName' and 'psWrd' in an Access db, and manage it
from there? If so, how do i control if the user really IS authorized on all
the 'protected' pages?

For a more secure environment you might want to consider hashing the
passwords. See: http://aspnet.4guysfromrolla.com/articles/103002-1.aspx

Happy Programming!

--

Scott Mitchell
mi******@4guysfromrolla.com
http://www.4GuysFromRolla.com
http://www.ASPFAQs.com
http://www.ASPMessageboard.com

* When you think ASP, think 4GuysFromRolla.com!