C# - Secure Login From ASP.NET 3.5/4.0 Page To SQL Database?
Nov 3, 2011What is the most secure way to create an ASP.NET 3.5/4.0 login page connection to an SQL database.
View 2 RepliesWhat is the most secure way to create an ASP.NET 3.5/4.0 login page connection to an SQL database.
View 2 RepliesI would like to create a secure login page for a pre-defined set of users (so no creating username/passwords by the users themselves). I've looked up a few sites and they all seem to suggest using Microsoft's Membership or something. I am not very sure as to why that's used, but all you need to know is that I will be creating the login details. I just need to make the login secure, ie, no duplicate logins, no logins from different browsers and cookies and sessions and encryption and all that. Any one have the code/links to where I can get all this?
View 1 RepliesI'd like to be able to to login to a secure website directly from within my VB.Net 2005 app.
I can use the following to open the page in the user's default web browser
System.Diagnostics.Process.Start("http://www.xxx.com/login") When you visit this webpage you're prompted for a username and password (using the .htaccess/.htpasswd method).
I'd like to be able to bypass the login popup and go straight to the logged in form (I have username and password stored in my.settings
I had a problem with WebBrowser component. Basically, it works improperly when try to log in on one web-site (Forex Trading Social Network | Online Forex Trading Forum and Social Networking Site). I am working with Visual Studio 2010 Professional. I created a simple WebBrowser trying to access the indicated web-site. The problem begins. Well, the website loads, but when you go to the login page (Forex Trading Social Network | Online Forex Trading Forum and Social Networking Site) and try to log in, it doesn't work. I mean, when I enter the login details the login page just refreshes itself and the login wasn't proceed. The same login page appear with every login attempt. The is the current problem!I check with Google, it works. But, it doesn't work with Forex Trading Social Network | Online Forex Trading Forum and Social Networking Site! Why?
View 14 Repliesi am tried to develpod login page for System staff Library.I want to modified my login page which only allow user which has register in the system able to access.If the user want to login but dont have any username and password yet user will got message error. All the username and password are store in table staff .For your info i am creating using Visual studio 2005 using application forms and all the data was save in sql 2005.My server name is Danawa, i created my database name Login and table name Staff.In inside table staff 1 created 7 column such staffid, Name, telno, department, username, password, address. Here i my example code for login page and database preview code which i want to modified and also i attached picture of table staff.
[Code]...
I have one Database : ManageSell.mdb (Microsoft Access) with password is:P@ssW0rd..In database, i have table User with two column : Username and password. I create value: admin + admin..Then , i create form Login in vb.net 2005 with code below.[code]If user type three password trust , it will successfull, else note error
View 1 RepliesWhen i try to log in i keep getting this error and what it means the code i used is below along with the error message:
code - Dim dr As OleDbDataReader = cmd.ExecuteReader
error - Syntax error in FROM clause
I have login form, and it works. but only if passwords are not MD5. I would like to ask how to improve my code, so my application can use MD5 instead of normal text password stored in my MYSQL database.
This is the code I;m using now.
Dim mMySQLConnectionString As String = E3MCEncrypter.Decrypt(My.Settings.MySetting)
Dim MyADOConnection As New MySqlConnection
MyADOConnection.ConnectionString = mMySQLConnectionString
[Code]...
I have making login system using with php. Now I want to hide the link by using strongest MD5 hash, but the one I have got is uncrackable. I want to decrypt them in the runtime, but I couldn't
Public Class Form1
Function MD5Hash(ByVal strToHash As String) As String
Dim md5Obj As New Security.Cryptography.MD5CryptoServiceProvider
[code].....
I have from login in VB.net 2005. I want to type username + password in order that login From_Menu
Imports System.data.OleDb
Imports System.Data.OleDb.OleDbConnection
Public Class frm_Login
Private Sub Button1_Click(sender As System.Object, e As System.EventArgs) Handles Button1.Click
[Code] .....
I'm having a problem submitting:
<input type="submit" value="Secure Login">
How can I submit by value"secure login". Is it possible?
I have tried something like this:
WebBrowser1.Document.Forms.GetElementsByName("input").Item("Secure Login").InvokeMember("click")
And all the variations with it and no luck.
I am trying to create a script that can login to a secure (HTTPS) website using credentials I supply then use MS' bitsadmin tool to download a report from the website. Once I automate this, I can then automate some processes of handling that report. So I am taking this step by step and trying to focus on getting the autologin portion to work before taking any other steps. The website I am logging into is not your typical site, it requires 3 fields 1) Organization 2) User Name 3) Password. See attached image as a reference. Also I have attached a text file with the source code of the relevant portion of the website login page.
So I hunted around and built a script off of a couple others I found and I am very close. See below for my script. The main problem I think I am running into is the stupid security alert popup I get from IE. I have no idea how to use the "sendkey" function on this popup to send "y". If I did, I think the script would work. When I run the script IE opens up and the security alert popup appears. I can wait as long as I want, but the popup doesn't go anywhere and IE just seems to sit there. [Code]
Im using VB 2008 express but dw any code i get ill just use the tool 2008 has to put the code in 2008.Anyways what im trying to do is make a chat program for about 100-200.How can i get a server on my comp so i can update the list of usernames of passwords without updating the program? How can i get the program on there PC to check my server on my comp if there input is validate? How can i get several users into the chat?How can i get it to display there names when they join the chat and get it to disappear when they leave?
View 14 RepliesI have making login system using with php. Now I want to hide the link by using strongest MD5 hash, but the one I have got is uncrackable. I want to decrypt them in the runtime, but I couldn't.
Here's the
Public Class Form1
Function MD5Hash(ByVal strToHash As String) As String
Dim md5Obj As New Security.Cryptography.MD5CryptoServiceProvider
Dim bytes() As Byte = System.Text.Encoding.ASCII.GetBytes(strToHash)
bytes = md5Obj.ComputeHash(bytes)
[Code] .....
The GetMD5Hash's method is using for to decrypt the MD5 hash to turns into the actual strings and MD5Hash's method is using for encrypt the strings into md5... However, the connection strings can be sniff the packets sent out. How to decrypt the MD5 hash and how to blocked the connection strings in the packets sent out??
I am trying to create a secure login form which can avoid double users log in with same user id from different locations. how can I create a secure login form. I have create a basic login form as below.
Dim conn As SqlConnection
conn = New SqlConnection(Source)
Try
[Code]....
I think it should be something related with "Local Security Policy".
View 1 RepliesDim wc As New System.Net.WebClientGamerTag.Replace(" ", "+")wc.Credentials = New System.Net.NetworkCredential(Email, Password, "http://live.xbox.com/en-US/profile/profile.aspx?GamerTag=" & GamerTag)Dim fx As New System.IO.StreamReader(wc.OpenRead("http://live.xbox.com/en-US/profile/profile.aspx?GamerTag=Dark Slipstream" & GamerTag))Dim str As String = fx.ReadToEndfx.Close()
The above code will open a webclient, set the credentials (possible error?), create a stream of the entire page, and then load it into a string (str).I then scan through and look for what is needed (Gamerscore, Motto, Bio, etc)-in this case.This doesn't work however, it doesn't sign in.
I have multiple aspx pages in my web site but i want to secure only one page.I used the asp.net membership and role manager but it require user name and password for all pages but i want to secure only a single page.please any one can help me how can i do this in vb.net with asp.net .I have used the following code in web.config but it applies on all pages which i dnt want
[code]...
It is simply a "Y" in the road. If they are Company A, then I want to send the username and password over to that website and log them in as if they typed it in there. If they are Company B, then the same thing but with a different website. I do not know the term for this, so the google results are not very pretty.I can not do this with a query string (not that I'd want to anyway) as I do not want the username/pw to be visible.Here is the other weird thing. This can be done via a simple HTML <FORM> and Submit button as I have tested it. But I want to do it all in VB.NET code. How is it that it is possible with some simple HTML but not possible in VB.NET? I guess it could be a security thing, right? What do the good guys like us do when we legitimately just want our employees to go to one login page, enter their username/pw, and then (based on their username) send them to either pageA.aspx or PageB.aspx which receives their username/pw that they only entered once before on the first page?
View 1 RepliesI got the above error when i deploy my web application into windows server 2003. How do i resolve it? [code]
View 3 RepliesSo i've been working on a page for a project where the person logs into a login page and then can see a list from the database of employees. everything is working except for one problem. If someone puts in a username and password, username= a and password=b, for example it still allows that individual to view the next page and doesn't throw the error that i have enbedded on the login page to say sorry you have the incorrect password/username. The working code that i have so far is below:
[Code]...
I recently made a small app for a friend and then made it a public app, in doing so I forgot that it connects to my MS SQL DB and checks for values. Someone used Red Gate .Net Reflector to get my password and destroy it all. I've contacted their ISP and they are looking into it, apparently this person has a static ip with them.So this is a lesson learned at a heavy price for me. How can I prevent this from happening again? How can I get away from the unsafe connection string they were able to use?
View 5 RepliesI am currently working with VB.net 2005. I am trying to create a login form and use a text file as a database to login. The part login form is fine but i can't connected to the text file. When i use my coding with a database such as access or mysql is work fine.
[Code]...
How do I create a Login Verification routine (Login Form) in vb.net . i have an windows application with login form contain user name , password , ok button and cancel button .
as this one:
Imports System.Data.OleDb
Public Class LoginForm1
' OK button
[Code].....
but i want to run my application from desktop and will get confirmation if the user name and password correct by checking them in MS Access Database in the server.
so the the application in the desktop and the tabel of user name and password in the server.
I m working on a project using vs2008+vb+sqlserver 2008. How can i secure my database, so that user can't see the structure of my database. I mean she shld not able to see tables and fields of my database. Is it possible in sqlserver2008?
View 9 RepliesBusy to connect a secure access 2003 database (with a mdw file) to a datagridview but we don't know where we have to place the mdw file in the (advanced) properties
View 3 Repliesi have a program that connects to mysql database to check username/password.I have a line like this in the project:
conn = New MySqlConnection("server=myserver.info;Port=3306; user id=dbusername; password=dbpassword; database=dbname")Anyways, a user managed to get this info from the program
How can i make it so they can NOT grab this info from the program ?
WinFormsApp Login passes information to .php (server based) Login (provided credentials are correct) to DB to retrieve Decryption Key. WinFormsApp then uses Decryption key on Hardcoded encrypted connection string and renders application usable.This would then eliminate the necessity to encrypt/decrypt a connection string at runtime, virtually rendering any unauthorized person with a useless software.
View 1 RepliesI created a SQL DB named MainDB.mdf and a small VB 2010 application with some forms and datasets.Everything was working OK until i got a new computer and re-installed Visual Studio 2010 and SQL server 2010 on it. I copied my DB from the old to the new computer and also copied by VB 2010 project to it. I used Windows Authentication to connect to the DB in the old computer and also in the new one, i am using different Windows user account names though.
I was able to connect to the DB in the new computer in the Server Explorer section, i created a new connection string to the DB and i can seed there is data in the tables. When i run my VB 2010 application created in the old computer get error:
"Cannot open database "MainDB" requested by the login. The login failed. Login failed for user 'D630Admin'."
I need to get rid of that error and be able to add/mod/del data from my DB using my VB application as i used to.
I was wondering if it would be possible for me to add a login page to a program that I have made that connects to an online database that my website has (mysql) that stores user names and passwords for the members of my website, so that members of my site could login with their username and passwords to my program, if so, how would I go about doing this?
View 1 Replies