asp.net - custom authentication to form authentication -

-

Currently, my site contains a table in that database that contains the username and password. There are 2 text boxes and login buttons in front end. Once the user fills that two fields and clicks on the login, it checks that the username and password will match in the database, if so, then they should be included in the interactive site Set in the session variable to check through medium. is it safe? How do I change it to create authentication? I do not want to exclude my login table. Can I still use it if I want to change it to certification? Can someone talk to me or show me how this can be done? Thanks

The standard login using this is:

index.html : 

  & lt; Form action = "login.php" method = "post" & gt; & Lt; Width of table = "100%" range = "0" style = "border-top: 2px solid # ccc; padding-top: 15px;" & Gt; & Lt; TR & gt; & Lt; Td> & Lt; input type = "text" class = "text_box" placeholder = "user" name = "user" id = "user" & gt; & Lt; / Td> & Lt; / TR & gt; & Lt; TR & gt; & Lt; Td> & Lt; Input type = "password" class = "text_box" placeholder = "contracease ± A" name = "pass" id = "pass" & gt; & Lt; / Td> & Lt; / TR & gt; & Lt; TR & gt; & Lt; TD & gt; & Lt ;? Php show_message (); ? & Gt; & Lt; Input type = "submit" value = "indicer" class = "button_submit" & gt; & Lt; / TD & gt; & Lt; / TR & gt; & Lt; / Table & gt; & Lt; / Form & gt;   
 and php ...  
  & lt ;? Php if (isset ($ _ POST ["user"]) & amp; amp;; isset ($ _POST ["pass"])) {Include ('conect_to_database.php'); $ User = $ _POST ["user"]; $ Pass = $ _POST ["pass"]; If (! Filter_var ($ _ POST ["user"], FILTER_VALIDATE_EMAIL)) {// is not a valid email ... back to the form header ('location: index.php'); Go out(); } $ Query = "User SELECT id where user =? And pass =? LIMIT 1"; $ Stmt = $ mysqli- & gt; Ready ($ query); $ Stmt-> Tie-up ("ss", $ user, $ pass); $ Stmt- & gt; Executed (); $ Stmt- & gt; Bind_result ($ id); While ($ stmt-> fetch ()) // Set your session variable header ('location: ../../control_panel.php'); Go out(); } // Invalid user echo ... sends back the form header ('location: index.php'); }? & Gt;   
 I also recommend checking the special characters in both the user and password.  
 In addition, you should never store a password in your database. You must store a hash of the real password using special algorithms.

Comments

Post a Comment

Popular posts from this blog

php - PDO bindParam() fatal error -

-
I am trying to learn PDO, now I have written this small code, but it gives me a serious error: < P> Fatal error: Call a member function at a non-object dot () ... $ con = new mysqli ("127.0.0.1", "root", "", "csvdangercheck"); $ Query = $ con- & gt; ("Id,` var1`, `var2`) values ​​(" id,: var1,: var2) ";); $ query- & gt; bypass pattern (': id', $ id); $ query- & gt; BindParam (': var1', $ VAL1); $ Query- & gt; bindParam (': var2', $ val2); $ Query-> Executed (); I Trying to use print_r ($ con-> errorInfo ()) but Fatal error: Undefined method mysqli :: errorInfo ( ) ... can someone tell me what am I missing? Flaffeh said, you have PDO Missing Mysqy, try it: $ con = new PDO ('mysql: host = 127.0.0.1; dbname = csvdangercheck', 'root', '');
Read more

logging - How can I log both the Request.InputStream and Response.OutputStream traffic in my ASP.NET MVC3 Application for specific Actions? -

-
For a specific set of tasks, I need to log in to the incoming request inputstream as well as outgoing response. is. I am using an ActionFilterAttribute for this and overriding the OnActionExecuted and OnResultExecuted methods. So I'm starting with this idea ... Public category ActionLoggerAttribute: ActionFilterArrbit {Public Override Zero On-Offed Execution (ActionActioned Contact Filter Filter) {base.OnActionAxecuted (FilterContext); HttpRequestBase request = filterContext.HttpContext.Request; // TODO: Log the request. InputStream} Public Override Zero OnResultExecuted (ResultExecutedContext FilterContext) {base.OnResultExecuted (filterContext); HTTPRPSPointBase Response = FilterContacts Hpptex response; // TODO: Log on Response.OutputStream}} Ideally I'll hook it up with enterprise library logging because I'm already using it for error logging. Am I reaching the input and output stream at the right time? Can I easily use the Enterprise Library to log i
Read more

java - Why my included JSP file won't get processed correctly? -

-
I am trying to create Java web framework (and learning), and on the basis of 'Code Generator In the process of making the material view of the database in the process of development, I stumbled into a difficulty, which I do not know how to solve it. First of all, I want the following index.jsp : & lt; Body & gt; Use all pages to be created. & Lt;% @ include file = "header.jsp"% & gt; & Lt; Hours / & gt; & Lt;% @ included file = "body.jsp"%> & Lt; Hours / & gt; & Lt;% @ include file = "footer.jsp"% & gt; & Lt; / Body & gt; And, in body.jsp , I should have it like this: & lt; Jsp: include page = "$ {Application_modul}"%> Where application_modul is an attribute defined in its controller: request.setAttribute ("application_modul", "USER_ACCOUNT \\ ' View_user_account.jsp "); This file can be found properly, but the processed JSP does
Read more