Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / ASP.NET / General / June 2008

Tip: Looking for answers? Try searching our database.

How authenticate user manually?

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Cirene - 30 Jun 2008 15:43 GMT
I have a subdir called "customer" that only allows authenticated users
(using web.config.)

In my login.aspx I allow them to pass username/password in query string.
Then I go to a default page.

Am I doing this right?  It doesn't seem to authenticate in IE6, only IE7 and
Firefox.

   If Membership.ValidateUser(request.querystring("User"),
request.querystring("Pwd")) Then
       FormsAuthentication.SetAuthCookie(request.querystring("User"), True)
       Response.Redirect("customer/MySecuredPage.aspx")
   End If

If I run the same code in IE6, passing it a valid username & password, I get
auto redirected back to the login page, as if it's not authenticated.  Any
idea what's wrong????
Mark Rae [MVP] - 30 Jun 2008 15:58 GMT
> In my login.aspx I allow them to pass username/password in query string.

Firstly, please say you don't actually pass the username AND password in a
query string...

Signature

Mark Rae
ASP.NET MVP
http://www.markrae.net

Cirene - 30 Jun 2008 16:06 GMT
This is a company "internal" webapplication that is tied into a phone
answering system.  The phone answering system auto logs in the operator.
It's NEVER seen to the users.  It's necessary for this application.

>> In my login.aspx I allow them to pass username/password in query string.
>
> Firstly, please say you don't actually pass the username AND password in a
> query string...
Mark Rae [MVP] - 30 Jun 2008 16:25 GMT
>>> In my login.aspx I allow them to pass username/password in query string.
>>
[quoted text clipped - 4 lines]
> answering system.  The phone answering system auto logs in the operator.
> It's NEVER seen to the users.  It's necessary for this application.

Hmm - OK...

Could it be a cookie issue...? Could it be that IE6 has been configured not
to accept cookies, even Session cookies...?

Signature

Mark Rae
ASP.NET MVP
http://www.markrae.net

Cirene - 30 Jun 2008 16:43 GMT
Thanks.  I believe this fixed the issue...

I added forms timeout to web.config section...

<authentication mode="Forms">

<forms timeout="180"/>

</authentication>

Does this make sense as to why this would work?

>>>> In my login.aspx I allow them to pass username/password in query
>>>> string.
[quoted text clipped - 10 lines]
> Could it be a cookie issue...? Could it be that IE6 has been configured
> not to accept cookies, even Session cookies...?
Mark Rae [MVP] - 30 Jun 2008 16:49 GMT
>>>>> In my login.aspx I allow them to pass username/password in query
>>>>> string.
[quoted text clipped - 22 lines]
>
> Does this make sense as to why this would work?

Yes, but not why it wouldn't work with certain browsers - curious...

Signature

Mark Rae
ASP.NET MVP
http://www.markrae.net

Cirene - 30 Jun 2008 16:52 GMT
Hmmmm Oh well - thanks for your proactive and informative responses, as
usual!

>>>>>> In my login.aspx I allow them to pass username/password in query
>>>>>> string.
[quoted text clipped - 25 lines]
>
> Yes, but not why it wouldn't work with certain browsers - curious...

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.