Expertrating - ASP.Net Tutorial, Begining Web Forms

Home > Courses, Tutorials & eBooks > ASP.NET Tutorial > Forms-Based Authentication

ASP.NET Tutorial - Forms-Based Authentication

Page 2 of 3

The Web.Config file in the above example denies access to the ASP.NET pages contained in the directory to anonymous users. The ? symbol represents all anonymous users.

After the tile Web. Config file is added in Example 62to a directory, anonymous users are denied access to ASP.NET pages in that directory and all subdirectories. If you want to enable users to access tiles in a particular subdirectory, you can add the Web.Confiig file contained in Example 63.

Example 63 SimpleForns\Anon\Web.Config

< configuration >

< system.web >

< authorization >

< allow users ="?" />

</ authorization >

</ system.web >

</ configuration >

The Web. Confiig file in Example 63allows all anonymous users to access any page contained in a directory and all the subdirectories of that directory.

The final step required for enabling Forms authentication is to create the Login. aspx page. If you attempt to access an ASP.NET page in a password-protected directory and you do not have the proper Authentication Ticket cookie, you are automatically redirected to this page.

The simple Login. aspx page contained in Example 64 displays a form with a field for a username and password (as shown below). The page requires you to enter the username Sam and password Secret. (The form is case-sensitive.)

Example 64 SimpleForm\login.aspx

Sub Button_Click( s As Object, e As EventArgs )

If IsValid Then

If txtUsername.Text = "expert" And txtPassword.Text = "Secret" Then

FormsAuthentication.RedirectFromLoginPage(txtUsername.Text, chkRemember.Checked )

Else

lblMessage.Text = "Wrong username/password!"

End If

End Sub

</Script>

<html>

<head><title>LoginPage</title></head>

<body>

<h2>Please Enter Your Login:</h2>

<asp:Label

ID="lblMessage"

ForeColor="Red"

Font-Bold="True"

Runat="Server" />

<p>

<b>Username:</b>

<br>

<asp:TextBox

ID="txtUsername"

Runat="Server" />

<asp:RequiredFieldValidator

ControlToValidate="txtUsername"

Text="Required!"

Runat="Server" />

<p>

<b>Password:</b>

<br>

<asp:TextBox

ID="txtPassword"

TextMode="password" Runat="Server" />

<asp:RequiredFieldValidator

ControlToValidate="txtPassword"

Text="Required!"

Runat="Server" />

<p>

<asp:CheckBox

ID="chkRemember"

Runat="Server"/>

Remember me with a cookie?

<p>

<asp:Button

Text="Login!"

OnClick="Button_Click"

Runat="Server" />

</form>

</body>

</html>

ExpertRating ASP.NET Certification - Get Certified Now!!