Ask a Question related to ASP.NET Security, Design and Development.
-
PL #1
Forms login and expired accounts !
If I have a forms login with persistant cookies how can I verify the
account is not expired ?
I want to run a piece of code everytime they come in no matter if they
pass through the login or have a persistant login cookie.
Is this possible ?
Thank
PL.
PL Guest
-
Strange problem with Forms authentication: After successfull login, login page is still displayed
Hi there I have a quite strange problem with my ASP.NET-Application. The application has being deployed one year ago and worked fine till last... -
Login without Forms authentication
Hi! If I enable Forms authentication for a subdirectory in the web.config file, several types can't be loaded anymore (because the subdirectory... -
Forms authentication - login fails
Hi, I have an ASP application using Forms authentication. On my development web server everything works and login is successful, but when I move... -
Login Forms
want to add a "login" area to my site and was wondering if this can be done in Pub 2003. If so, can someone direct me to some instructions on how to... -
Mixing Forms Authentication with User Accounts in ASP.NET
Put simply, I want to use a custom form where a user can enter their Windows Domain Account and password, and have that validated. i.e. I do not... -
Chris Rolon #2
Re: Forms login and expired accounts !
The Application_AuthenticateRequest method is called with every request.
Check the account status there.
--
Chris Rolon
"PL" <pblse2@yahoo.se> wrote in message
news:uxcW3gdEFHA.624@TK2MSFTNGP15.phx.gbl...>
> If I have a forms login with persistant cookies how can I verify the
> account is not expired ?
>
> I want to run a piece of code everytime they come in no matter if they
> pass through the login or have a persistant login cookie.
>
> Is this possible ?
>
> Thank
> PL.
>
>
Chris Rolon Guest
-
PL #3
Re: Forms login and expired accounts !
Thanks, I found that out shortly after making the post.
PL.
"Chris Rolon" <chris.rolon@removethis.neudesic.com> skrev i meddelandet news:%23cD6HcgEFHA.1188@tk2msftngp13.phx.gbl...> The Application_AuthenticateRequest method is called with every request.
> Check the account status there.
>
>
> --
>
> Chris Rolon
>
PL Guest
-
PL #4
Re: Forms login and expired accounts !
Another issue I have is how to invalidate all persistant logins for
the member if the password is updated.
Obviously there is no problem on the computer/browser he is using when
changing the password, I just call FormsAuthentication.SignOut() however if
he also logged in on another computer he will still get in without entering the
new password.
The obvious solution would be to save the date and time the password was changed
and compare it with when the ticket was created however I can't seem to find a
way to get the time of creation ?
PL.
PL Guest



Reply With Quote

