I am using Forms Based Authentication I have extended the Forms Authentication Tables creating a custom table called Profile_Contact that holds the user's GUID, username, email address, and other information. I have another table called Profile_Account which holds company account information such as Company Name, address info, phone numbers etc. This table has a Key Field called IDProfileAccount.
[Code]...
The Intranet was done with forms authentication and stored in a SQL database. how I go about (if possible) authenticating a login in a vb.net project that queries the user settings from the ASP.Net database that was created on the SQL server for the forms Authentication.
View 5 RepliesI'm writing an internal web application right now (with ASP.Net Web Forms), and it presents an odd problem. I have to be able to impersonate the currently logged in windows user, and execute a command based on their Windows Authentication to log in.. AND ... if they don't have Windows Authentication set up in the application I have to use to log them in, I have to be able to accept a user name and password. I also have to write the application in .Net 4.0, and secure it as much as possible. I got this to work by NOT utilizing Windows Authentication or Forms Authentication in the web.config, and instead setting session variables to guard against user accessing pages in the web app other that the log in. I did this by creating an oddly name session variable with a value based on their user name (windows auth or not), and then a secret session variable. The secret variable is in the web.config as a 256bit encrypted string, in which I decrypt, and set as the session secret. In order for the page to load, the first session variable can't be blank, and the second variable has to equal the decrypted key value... if the variables don't pass inspection, it redirects them to the login page. I set this up on every page, generic handler, and webservice method in the web app. I make the session timeout after a few minutes of no activity, and on log out, I set all session variables to nothing, and expire all cookies. (I also disable all cache).
My question is... Does this offer comparable security to that of Forms authentication? I have always used Forms authentication, but can't use it here. If I did, the users would have to reconfigure settings in IIS and in he web.config to toggle login procedures (From my knowledge, you can't use both Forms authentication, and windows authentication to manage the security of your pages and other web resources). With the method described above, I can accomplish the best of both worlds, but am curious about the security of my methods. Is there anything else I can implement here to assure the utmost security other that using forms authentication? Is it possible to accomplish the same level of security of Forms authentication without using it?
If I wanted to make sure that AUTHENTICATED users were denied access to Enroll.aspx and UNAUTHENTICATED users had access how should my "allow/deny users" tags be set in the web.config?[code]......
View 2 RepliesI have an issue with my .NET application and it can only be reproduced sometimes and only on client's location, which makes it extremely difficult to resolve. In the application the forms authentication is used. There is a login page to which every anonymous user is redirected. After user enters username and password, it redirects to DefaultURL or some predefined page. The problem is that sometimes when user enters correct username and password, it doesn't login, instead it just refreshes the login page without any error messages. After several tries of inputing username and password, user is able to login to the system.
See my login page Submit_Click code below:
Dim userName As String = tbUsername.Text
Dim password As String = tbPassword.Text
Dim returnUrl As String = Request("returnUrl")
[code]....
We have an application in Access for UI and MS Sql server as Database server. We now decided to build a new application in web application for UI. This web application is only used by the employees who work for the company. But later we decided to host this web application on outside server. So the user (from this company only.) can able to login anywhere in the world. First I thought creating the web application using 'windows' authentication thinking we may be using it as an intranet web application. But now my manager asked me to use both 'Forms' and as well as 'Windows' for using this application and this web application will be hosted on outside server. I really don't catch his point of using both types of authentication.
View 1 RepliesI am reading the article at: [URL].. Forms Authentication in ASP.NET 2.0". I am using VS 2008 and .Net Framework 3.5. I don't know if this makes a difference, so please let me know.
A user logs on to our system in the morning Based on their Windows Authentication, they can access several intranet applications. For a particular application, the user has to select their Organization or Position or Location.
Based on the user's Windows Authentication, once the user selects one of the three above and clicks a "Submit" button, a second page is launched that shows certain information about the selection based on the User's authentication.
For example, if User selects Organization, the following information will be returned based on the Organization THEY are a member of. They can not access information from OTHER organizations, ONLY their own based on their login credentials. This information returned as a result of the dropdownlist selected value includes: street address, city, state, zipcode, Bus. Unit #, etc. appears in labels on the second page.
The labels can be dynamically created at runtime. (I dont know if a User control can be created to do this, since the "Position" and "Location" will contain the same address information, and it doesn't matter at the moment). I just want to populate the labels on the second page (or on Postback) based on the User's log in credentials after they click the "Submit" button. Or, if they don't have to click a button, just have the information complete based on the selected value of the dropdownlist control.
[Code] When I run this on my visual studio 2008 dev server it runs fine and works well. When I publish to IIS I always get Http 403 Forbidden Errors when trying to access any page on the site. There is 1 folder within my site that should be login protected called 'administration'.
View 2 Repliesas topic, i need to send an e-mail without outgoing authentication becouse server hasn't outgoing authentication.. how i can do this??
View 1 RepliesMy organisation has re-created some SQL test databases, and only enabled Windows Authentication -no problemThey have then created a local accounts on the server, and given them read or write rights to the database.How can i connect to the database in visual basic. I can't use SQL authentication as there is no account,and i can't use windows authentication as only one account has read rights ont the databse. I have tried an sql connection string
myConnection = New SqlConnection("Server=<servername>;Database=<databasename>;UID=<servername><serveraccount>;PWD=<password>"
and it doesn't work. I'm starting to thing our entire SQL authentication model is wrong!
I am trying to create a login authentication using the values from SQL database but when i try to login i get the follwing message."value cannot be null. Parameter name: dataset". [code]
View 2 RepliesI want to use windows authentication in my vb.net application rather than validating against Database. Is there any possiblitiies or APIs that allows me to use Windows authentication? I have user id and passoword text boxes. Once user entered the userid and password, it should validate again Windows authentication.
View 1 RepliesI have a database (using Microsoft SQL Server Management Studio Express) that is currently being used quite heavily in a functioning application. I am porting this application over to Windows Authentication rather than the current basic authentication system (or lack thereof) that exists.The easiest way that I know to set this up involves using the aspnet_reegsql.exe file to set up some tables for me. This obviously creates its basic tables, such as dbo.aspnet_Roles, dbo.aspnet_Users and dbo.aspnet_UsersInRoles.In the current database, there exist tables named dbo.Users, dbo.UserRole, and dbo.UserRoleMapping. Many of the stored procedures that are written currently for this database rely on these tables.
View 1 RepliesWhere is a good VB.NET tutorial where I can have a username box and a password box and it checks in the database if it's there and if it is then another form will show?
View 2 RepliesI have an application, I want to connect my database in SOL Server Authentication mode(mixed mode), Hence When I connecting my database through connection string. then what parameter to be passed or what to be checked.
View 1 RepliesUsing Visual Basic 2008 Express. I need to pass a variable to another form. Or else make the variable visible to both forms.
View 4 RepliesI am trying to follow an example in the VB 2010 book and the author has set up the local server using a named instance of SQLEXPRESS and uses mixed mode authentication with a sa login and wrox as the password the code is then
[code]...
I am using the Express server initially set up for windows authentication (pubs is one of 6 databases on it) but no matter what I seem to try I can not connect
[code]...
I have a VBA form in Microstation I am using to try and help automate a task. The only problem I am having is I am reading a textbox (Filebox.Text) and setting it as the variable (FN). It works, because I used Msg.Box (FN) to test it. However, in two of the lines of code, I am trying to use (FN) to pass the typed in filename to the command to run in Microstation. Unfortunently, it gets passed on as (FN).dgn instead of the actual filenale typed into the textbox. Is there a way I can make the variable actually seen as a variable? Code on Pastebin: url....Also, not sure if this is the right section, 100% new to VBA, coming from a world Bashed together.
View 3 RepliesThis is my first Windows app to create since VB6. I've been in the world of ASP and ASP.NET for many years. However, now I have been asked to create a simple app that needs to be windows based.
[Code]...
I have two windows forms in my application, and I want to have variables that work between them. How would I do this?
View 2 RepliesI want to calculate the score on one form and display the score on another form
View 7 Repliesi have a dialogbox (dialog1) i will assign the input from textbox a variable to the from1 but i cant do that.the variable in form1 is Dim get_from_dbox As Long i try to assign to it from dialog1 like below it fails form1.get_from_dbox = Textbox1.Text but i can assign to textbox??like that which works well
form1.RichTextBox1.Text=Textbox1.Text I am new programing i know i am wrong .don't know where?
I am struggling to find out how to use a msg box to display the value of a variable.
I've tried a number of permutations, and searched for hours to find a tip.
My code is currently:
Private Sub btnShowTotalCost_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles btnShowTotalCost.Click
If (radCorpTravel.Checked) Then
[Code].....
i have 2 forms -> form 1 and form 2
in form 1 -> 1 button
in form 2 -> 1 textbox and 1 button
when I click button in form 1, it will show the form 2..how can i pass the variable (data from textbox in form 2) into a variable in form 1 after clicking the button in form 2 ?
When I declare a variable as public, shouldn't it be available in another form? I am trying to write a windows mobile prg with 12 static mileage points, form1 has the 12 buttons for start point, but when I call form2 with the destination points, my start variable value is not carried over. I intend to then assign a mileage based on the two points and write to file on mobile device. We support 12 schools, and I want my employees to track mileage easily.
Public Class main
Public start As String = "start"
Public dest As String = "dest"
Public miles As Decimal = 0
[Code] .....
I want to create a variable to be used by multiple forms, so I created a module that looks like this:[code]I expected the title of that specific form to be "(Name)'s Settings"But instead, it just says "'s Settings," as if the variable had never been assigned a value.
View 4 RepliesVariable readable from all forms?
View 14 RepliesIn my previous knowledge of programming, i used to use global.variable = true how could i achieve this so the variable could be used across all forms?
View 1 RepliesI have one form, which the user enters upto 5 websites then clicks go - I have on the second form, the one with the webbrowser. A timer which checks if the web browser is busy then either a green light or black image will be shown along side the assocaited input box on the first form.I am finding it impossible to feed variables into the clock through ByVal, like I would a subroutine or function.
Private Sub ActiveMe_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles ActiveMe.Tick
If ((WebBrowser1.IsBusy)) Then
Hey.BackColor = Color.Black[code]....
'Error message says Hey is not declared, as i can't pass it through to timer
The variable Hey is determined by the first form - Which picturebox.I have an if statement which simply says if inputbox one has url enter then Hey = Picturebox1, If input box2 has url entered then Hey= Picturebox2 etc.What I want is the timer to check the page has completed loading or is still loading or refresing and the appropriate green or black to be shown aside url input box on first form.I considered using a sub or procedure to act as a clock (a large for loop with another for loop within it, acting as a delay). But found this slowed down theapp to the point of crashing it.
I have the following form: Imports System.Data.SqlClient Public Class Form1 Dim ReturnValue As Object = Nothing
[Code]...