security issue in ASP.NET

Control Panel Forum Hosting Help ASP.NET 4 & SQL 2008 R2 Hosting Resources Notice

Total members: 210364
Average new registrations per day (in last 7 days): 16

New Registration: Open

Register Now

Home » Questions & Answers » security issue

security issue

2/23/2010

Author: said sn
university of wolverhampton

hi i have created a website,,thing is for a user to use the system they must login,,the problem am having is if i type a URL of a non default page it works.

For example when I type in aspspider.info/said193/student.aspx it displays that page. I want it only to display when the user has logged on

Answers .............

Author: Ahmed Talu

Posted Date: 2/25/2010

*************************************************

said sn

ASP.NET lets you block the general public from accessing selected folders in your website. Use web.config file to specify who will be denied and who is granted access to one or more folders. Details like password of those allowed to enter is typically stored in a SQL database. It may take some time to figure out how to make the code for login.

I suggest you read this related post: http://www.aspspider.com/qa/Question4624.aspx

*************************************************

Posts by susanna l that may be of interest:
http://www.aspspider.com/qa/Question4209.aspx
http://www.aspspider.com/qa/Question4208.aspx
When reading her code beware that User Instance of SQL Server is not allowed at ASPSPIDER. I have not tested her code. By the way, someone has commented on her post (made last year) this week.

I've posted some comments about databases in this thread:
http://www.aspspider.com/qa/Question4220.aspx

*************************************************

You must login to post answer for this question.