c# - Block access to folder with custom login using asp.net webforms -


i have used asp.net membership time, time due requirement cant use asp.net membership. have implement simple login system have validate uses , give them access website section , on other side block access folder logged in users can access contents of these folders.

block access following folders

/english/

/french/

/images/

user should able access contents of these folders if logged in. setting simple session variable when user logs in successfully. let session["userloggedin"] = true.

with asp.net membership can block access folders web.config. not sure how can custom loggin.

any pointer in regarding full.

i'm not sure if work you, have done similar in past (see user isaac's answer bit of guidance): securing web folder out membership roles defined

basically, upon login event assign session variable of "english" or "french" (note i'm not in vs right code might you're looking for):

void protected onlogin() {     if(userisauthenticated)     {         session["english"] = true;     } }

and in global.asax file should able reference variable if user authenticated:

void application_beginrequest(object sender, eventargs e) {     if(request.physicalpath.contains("english")     {          if(!((bool)session["english"]))              //not "english" user - redirect login or unauthorized page     } }

again, code taken link gave you, if doesn't work can fish around of projects see i've done in past.

additionally use visual studio 2012 , use asp.net web configuration tool , try work user database working it, i've seen people - bit complicated because have code bit in web.config file, more secure guessing. msdn article might well: http://www.asp.net/web-api/overview/security/external-authentication-services.


Comments

Post a Comment

Popular posts from this blog

javascript - jQuery: Add class depending on URL in the best way -

i have html progress meter: <div class="col-md-3" style="margin-left: -20px;"> <div class="progress-pos active" id="progess-1"> <div class="progress-pos-inner"> login </div> </div> </div> <div class="col-md-3 progress-pos-container"> <div class="progress-pos" id="progess-2"> <div class="progress-pos-inner"> scan items </div> </div> </div> <div class="col-md-3 progress-pos-container"> <div class="progress-pos" id="progess-3"> <div class="progress-pos-inner"> confirm address </div> </div> </div> <div class="col-md-3 progress-pos-container"> <div class="progress-pos" id="progess-4"> <div class="progress-pos-in
Read more

caching - How to check if a url path exists in the service worker cache -

i need check if particular url path exists in service worker cache. example, suppose url is: /myserviceworker/service?a=110&b=70 this url exists in cache, there many of them different values of , b. now, suppose want refresh of these urls, how can that? i want know how access key values service worker cache. if know key, plan follows: var url = new url(key); if(url.pathname === "\/myserviceworker/service") refetch key but not sure how cache key , in format is. mean, string or url? cache api has match() method returns promise resolving in response object if match or undefined if no match exists. second parameter object can specify ignoresearch not take account url parameters. the ignoresearch option supported firefox ( chrome status here ). in other hand, retrieve cache entries, can use keys() method.
Read more

Redirect to a HTTPS version using .htaccess -

i need modify .htaccess file redirect urls https version without "www". http://example.com --> https://example.com http://www.example.com --> https://example.com https://www.example.com --> https://example.com this how .htaccess file looks like: rewriteengine on rewritecond %{request_filename} !-d rewritecond %{request_filename} !-f rewriterule ^(.*)$ redirect.php?id=$1&page=$2 [qsa,l] what modifications need make .htaccess in order forward https without "www"? it depends on doing current code. looks file called redirect trying display php page seo friendly url. think might confusing people. anyway, need , force https without www, need 1 more rule above. also second rule needs two capture groups in rewriterule test string because wanting 2 different values using $1 , $2 references. rewriteengine on #rediect www non www and/or http https --- combinations. rewritecond %{http_host} !^example\.com [nc,or] rewritecond %{https} !^
Read more