.NETGURU
  Search:  
NamespacesDiscussions.NET v1.1Dot Net Guru's BlogIT Certification
Forms Authentication and non .net pages
Messages   Related Types
This message was discovered on ASPFriends.com 'aspngsec' list.


Julian Voelcker
We have an old ASP site that is made up of .asp pages and .pdf, .ppt
and .zip files for download.

We now want to add to it and are planning on using .Net.

Currently each ASP page checks for a session variable to ensure the
user is logged in and each file has an asp extension to ensure this
works even though there isn't any other scripting in the pages.

If we re-wrote the login page and moved over to Forms Authentication
would all the files be covered?

It would certainly be easier than having to setup every static page as
an ASP page.

Cheers,

Julian Voelcker
The Virtual World (UK) Limited
Cirencester, United Kingdom
Reply to this message...
 
    
Hines, Mark
Julian,

You'll need to add the file types (.pdf, .ppt, and .zip) to be handled by
the .Net isapi filter and then they'll be protected by your forms security.

You add the types by going through IIS then:
Select the application root.
Right-click go to Properties.
On the Home Directory or Virtual Directory tab select Configuration.
Add the file extensions and map them to the .Net dll with GET and HEAD
verbs.

That should be it to cover your bases.

HTH,

Mark

-----Original Message-----
From: Julian Voelcker [mailto:Click here to reveal e-mail address]
Sent: Monday, May 27, 2002 5:26 AM
To: aspngsec
Subject: [aspngsec] Forms Authentication and non .net pages

We have an old ASP site that is made up of .asp pages and .pdf, .ppt
and .zip files for download.

We now want to add to it and are planning on using .Net.

Currently each ASP page checks for a session variable to ensure the
user is logged in and each file has an asp extension to ensure this
works even though there isn't any other scripting in the pages.

If we re-wrote the login page and moved over to Forms Authentication
would all the files be covered?

It would certainly be easier than having to setup every static page as
an ASP page.

Cheers,

Julian Voelcker
The Virtual World (UK) Limited
Cirencester, United Kingdom

| [aspngsec] member Click here to reveal e-mail address = YOUR ID
| http://www.asplists.com/asplists/aspngsec.asp = JOIN/QUIT
| http://www.asplists.com/search = SEARCH Archives
Reply to this message...
 
 




ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification
Ad


Need Dot Net Interview Questions?
Ask ExamGuru, Inc. for advice and help on Passing .Net Interviews
.Net Projects
Best-of-breed application framework for .NET projects, developed by ExamGuru, Inc. and ExamGuru IT
Free .net Help
Commission ExamGuru, Inc. and his team for your next bespoke software project
FogBUGZ
The only bug tracking system carefully crafted with one goal in mind: helping teams create great software.
Awesome Tools
If you don't know about these, you're missing out... IT Certification Questions
IT Interview Questions
Free Oracle 10g Training
MCSE Boortcamp
Cisco Study Guides
Cheap Study Guides
Exact Questions
Dot Net Interview Questions
Oracle OCP
Cheap Travel
Designer Perfumes - Wholesale Prices
Free Programming Tutorials
 
ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification
 Copyright © ExamGuru, Inc. 2001-2006
Contact Us - Terms of Use - Privacy Policy - www.dot-net-guru.com - www.examguru.net - www.oraclesource.net - www.itinterviews.net - www.examguru.net/ITCertification