membership

what is the best way to make some pages in asp.net require login?

Hi, I am working with asp.net website project that some of pages need authentication. I am using asp.net membership. I read some answers. e.g. make all of those pages in folder and create inner web.config that describe the privilege. This is one way solve the problem but I need way that is more fixable and effective. ...

ASP Membership cannot handle encrypted connection strings in web.config

We were experiencing errors with one of our web methods on a test web server we have. The main error was: "Access to the path 'E:\websites\Discovery\ProfileService\App_Data' is denied" Looking further down the stack trace gives a little more info: "at System.Web.DataAccess.SqlConnectionHelper.CreateMdfFile..." "at System.Web.DataAcce...

customize asp.net membership by changing "userid" type to integer

in asp.net membership is it possible to change the "userid" type from "uniqueidentifier" to "integer"? and how to do it? ...

Converting Single DB ASP.NET Site into MultiTenant - Membership and Roles Dilema

I'm in the process up changing a single SQL DB website (ASP.NET/VB.NET) into a multitenant app, where each client has their own database. In the old site, all the ASP roles, logins and providers pointed to the single database. Now we have multiple databases, I'm wondering what would the best architecture/techniques to use. There is one...

Store user id in Principal or Identity? ASP.Net/OpenID.

I have an ASP.Net MVC web application using forms authentication. I am using OpenID for authentication. At the moment the moment I'm storing the openID url inside the Name of the standard GenericIdentity. I would also like to have easy access to the database id for the user. I can make a custom provider or identity by overriding the Ap...

Which CMS to choose?

Hi! I'm making a requirement analysis for a customer who is about to change CMS system. Today they have a tailor-made system, and they now want to pick a standard tool instead. The customer is a medium-size, non-profit organisation. They want a licence free, open source alternative. The organisation consists of one central HQ and about ...

Extend LDAP Membership to append a prefix/sufix to the username

Our web applications are using LDAP Membership Provider to authenticate and register users in Active Directory. In order to allow users to provide usernames that exist in other applications, we need to add a prefix in its username and it should be as transparent and painless as possible. What I need is a way to extend the LDAP Membershi...

Hide authorized menu item in asp.net web.sitemap

I have a web.sitemap with security trimming enabled, however I need to hide a menu item based on a role to a page that has no access rules in the web.config. i.e I have a Campaign page that is used to view existing campaigns as well as to add new campaigns, but I want the "New Campaigns" menu item to be hidden for anonymous users. I tri...

Looking for a .NET library to do authentication that support multiple sources.

I'm looking for a suggestion for a .NET library which can allow me to use in an ASP.NET application so that I have one profile for each user, but can associate authentication from multiple sources including: ASP.NET Forms based, windows live id, google, facebook, openid, etc... I want people to come to my website and be able to associate...

using asp.net membership provider how to check if the user is registered or not?

using asp.net and c# membership provider how to check if the user is registered or not? I want to handle this in code not by using "login status"? ...

How to implement a "who's online" feature in PHP?

How would one go about implementing a "who's online" feature using PHP? Of course, it would involve using timestamps, and, after looking at phpBB's session table, might involve storing latest visits in a database. Is this an efficient method, or are there better ways of implementing this idea? Edit: I made this community wiki accidenta...

Easiest way to implement this dynamic login scheme for asp.net

I currently have a site where different users can login, and depending on their sub domain, are presented with different data from different databases. I am overriding the SqlMembershipProvider to use a "temp" connection string, that I dynamically set during the Initialize Method, per this post's instructions: http://forums.asp.net/p/9...

How should I implement user membership in my ASP.NET MVC site?

I'm creating an ASP.NET MVC site and I need to implement login and membership functionality. Is this something where I roll my own? I already have a members table in my database, should I create a username and password hash field and just check against it? What about keeping the user logged in with a cookie that expires? Is this a...

"Remember me" with ASP.NET MVC Authentication is not working

I have a standard ASP.NET MVC (RC Refresh) web project, with the standard ASP.NET Membership provider and the Account controller that is included in the project template. When I check "Remember me" in my Login form, I am still not being remembered by the site. (Firefox remembers my username and password, but what I expected to happen wa...

Are the Asp.net MVC default login classes sufficient?

Are they sufficient in terms of security for use in a public site? OR so I need to make modifications? ...

Custom asp.net membership provider

Hello, I am implementing a custom membership provider by inheriting from MembershipProvider. I have my own database schema that is different from the aspnet membership schema. I do not have any use of the password field and I was wondering how can I override the builtin CreateUserWizard control? I was unable to find any examples on h...

Extend Membership API, MembershipUser

I created my own database schema to store user information. CREATE TABLE [dbo].[MyCustomMembership_Users]( [UserId] [uniqueidentifier] NOT NULL, [UserName] [nvarchar](256) NOT NULL, [LoweredUserName] [nvarchar](256) NOT NULL, [MobileAlias] [nvarchar](16) NULL, [IsAnonymous] [bit] NOT NULL, [LastActivityDate] [datetime] NOT NULL, [FirstN...

Why doesn't ValidateUser return more?

I'm using the standard .NET membership provider, and thought I'd see if someone could shine a light on it. Calling ValidateUser return either true or false. Now since the method accepts a username and password, one would reason that the return result would reflect an invalid username or password. Yet if we delve into it further, we find...

Custom Membership Provider, implementing developer security

I created a custom Membership provider (Membership ToolKit) and added methods like: public MembershipUserCollection GetAllUsers(string applicationName, int pageIndex, int pageSize, out int totalRecords) { // Returns MembershipUserCollection } Methods like these help in managing the entire Membership data storage for all applicati...

ASP.NET 2.0 Membership: ValidateUser not locking out the user?

Hi I am using the default SQLMembershipProvider in my ASP.NET 2.0 website, and expect the Membership.ValidateUser to lock-out the user after entering a number of wrong passwords (5, in my case) but ValidateUser doesn't seem to be caring about keeping count of bad password attempts and locking out the user. What's wrong? The Membership...