Authenticate against a SQL 2005 Database in VB.NET

[apedosmil8]

Hello.

I have 2 parts to my site, Admin side and the Users/Customers side.

The home page is accessible to everyone and doesn't need authentication.

What needs authentication is when a User/Customer wants to access their information. Same with Admin.

So there is a CustomerLogin.aspx and a AdminLogin.aspx

When a Customer logins, they can see their information which will be on CustomersHome.aspx, the Admin will have a AdminHome.aspx where there will be other pages as well that will need to be authenticated for him to do admin stuff.

Any suggesions on how to do this in VB.NET? I've been looking for guides but everything is outdated and doesn't seem to work.

Thanks.

[Shashi Sadasivan]

Hello.

I have 2 parts to my site, Admin side and the Users/Customers side.

The home page is accessible to everyone and doesn't need authentication.

What needs authentication is when a User/Customer wants to access their information. Same with Admin.

So there is a CustomerLogin.aspx and a AdminLogin.aspx

When a Customer logins, they can see their information which will be on CustomersHome.aspx, the Admin will have a AdminHome.aspx where there will be other pages as well that will need to be authenticated for him to do admin stuff.

Any suggesions on how to do this in VB.NET? I've been looking for guides but everything is outdated and doesn't seem to work.

Thanks.

Are you looking on how to connect to the database and retrive values, or are you looking on how to start the project of yours?
Do you have a database with login details which will distinguish between an admin and a normal user?

[apedosmil8]

Yes, the Database has a table called Users.


under a Usertype there is Cust or Admin to distinguish.

I think I have a grasped on connecting and authenticating, but I don't know how to distinguish the difference and how to block Customers from entering the Admin page.

Thanks.

[Shashi Sadasivan]

Yes, the Database has a table called Users.


under a Usertype there is Cust or Admin to distinguish.

I think I have a grasped on connecting and authenticating, but I don't know how to distinguish the difference and how to block Customers from entering the Admin page.

Thanks.

If the usertype is present in the database, then you should be able to do that.
If you are authenticatin an admin then check the credentials of those users whose user types is Admin, and vice versa

[Hayden]

Yeah, if you have a users table, all you need is a 'IsAdmin' bit column or something. True for Admin; False for Reg. User. You'd want to make sure and check the logged-in user's 'admin status' every time they view certain pages only designed for one or the other (user or admin). *shrugs* I think that's how you'd do it.