Re: Encrypt web.config file - ASP.NET Discussion Boards

Jeneesh K. Velayudhan6-Jan-10 1:08

6-Jan-10 1:08

Hi Mugdha_Aditya,

DataRow[] dtRow = dsHoliday.Tables[0].Select("Holiday Date = '"
+ Convert.ToDateTime(Al[CountHoliday]).ToShortDateString()
+ "'");

Thanks & Regards,
Jeneesh k. v.

Getting the URL from redirect variable

meeram3954-Jan-10 20:48

meeram395

4-Jan-10 20:48

In my webapplication, there is an email functionality which send email to users. The email contains a link, on clicking the link it will redirect to the application.

Since the user needs to login before redirecting the required page, first the login page displays. My requirement is, if the login is sucessful, then the user should be redirected to the specified page.

For eg: If the email link has the url, "http://test1.abc.com/DocumentAnalysis.aspx?Id=17BB87F6-F746-41C4-BE10-3CF0B050970F", while clicking on this link, the url appears as follows in the browser:

"http://test1.abc.com/login.aspx?redirect=%2fDocumentAnalysis.aspx%3fId%3d17BB87F6-F746-41C4-BE10-3CF0B050970F".

Now,if the login successful, I need to redirect the user to DocumentAnalaysis.aspx page. I may get the url through the Request.Url.AbsoluteUri path. But is there any other best way to achieve this?

Please help. Sorry for long post.

Thanks,
meeram395.

Success is the good fortune that comes from aspiration, desperation, perspiration and inspiration.

Re: Getting the URL from redirect variable

Abhishek Sur4-Jan-10 21:05

Abhishek Sur

4-Jan-10 21:05

I think this is fine. I have used this technique to keep the redirect url in the querystring and it worked perfectly.

Why are you looking for any other solution?
Confused | :confused:

Abhishek Sur
Don't forget to click "Good Answer" if you like this Solution.
My Latest Articles-->
Windows7 API Code Pack

Simplify Code Using NDepend
Basics of Bing Search API using .NET

Re: Getting the URL from redirect variable

meeram3954-Jan-10 22:18

meeram395

4-Jan-10 22:18

Thanks Abhishek. I was just checking out whether there are any other options through which to achieve the same.

Success is the good fortune that comes from aspiration, desperation, perspiration and inspiration.

Re: Getting the URL from redirect variable

sashidhar5-Jan-10 0:14

sashidhar

5-Jan-10 0:14

I think You are using for User Approval..!If thts the case Use the below..!
If You are using Forms Authentication..!
You can use of Guid Key..!

Guid UserID = new Guid(Membership.GetUser(User.Identity.Name)).ProviderUserKey.ToString());

Guid key = new Guid(Request.QueryString["id"].ToString());
                MembershipUser user = Membership.GetUser(key);
                user.IsApproved = true;
                Membership.UpdateUser(user);

That is one Way..!

LatestArticle :Log4Net
Why Do Some People Forget To Mark as Answer .If It Helps.

Re: Getting the URL from redirect variable

meeram3955-Jan-10 0:48

meeram395

5-Jan-10 0:48

Thanks. I am not using User Approval. However, it is good information. I can use it for next time.

Success is the good fortune that comes from aspiration, desperation, perspiration and inspiration.

Encrypt web.config file

Rock Star.4-Jan-10 20:45

Rock Star.

4-Jan-10 20:45

Hi
I am not able encypt web.confige file. I am able to Create a custom RSA key container by running command

C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe -pc “MyKeys” -exp

after Specify a protected data provider in web.config file

and running on following command to encypt the web.config file it gives the list of all command related to ASP .NET registration options and my web.config file is not encrypted

C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe -pef "SensitiveAccountInfo" "path" -prov “MyProvider”

Please Help me in it.

Thanking You!.

Rock Star

Re: Encrypt web.config file

Abhishek Sur4-Jan-10 21:12

Abhishek Sur

4-Jan-10 21:12

Did you read this tutorial ?
http://msdn.microsoft.com/en-us/library/ms998283.aspx[^]

Smile | :)

Abhishek Sur
Don't forget to click "Good Answer" if you like this Solution.
My Latest Articles-->
Windows7 API Code Pack

Simplify Code Using NDepend
Basics of Bing Search API using .NET

Re: Encrypt web.config file

Rock Star.4-Jan-10 21:20

Rock Star.

4-Jan-10 21:20

Thanx
I got the solution I juast forgot to set the read permission on provider

Rock Star

Re: Encrypt web.config file

carlecomm6-Jan-10 19:05

carlecomm

6-Jan-10 19:05

hi,

you can follow the steps as below:

step1: Make sure These are not encrypted,such as

<processmodel>
　　<runtime>
　　<mscorlib>
　　<startup>
　　<system.runtime.remoting>
　　<configprotecteddata>
　　<satelliteassemblies>
　　<cryptographysettings>
　　<cryptonamemapping>
　　<cryptoclasses>

Step 2, Create a RSA key container,

you can use the command :aspnet_regiis -pc "ABeenKeys"–exp

Step 3, Modify web.config to identify the key container

Step 4 , Encrypt the <connectionstrings> section of your web.config file

> aspnet_regiis -pe "connectionStrings" -app "/connectionTest"

modified 27-May-14 5:05am.

session

baselanfouqa4-Jan-10 19:53

baselanfouqa

4-Jan-10 19:53

hi all,

in my web application i made a session (Session["UserName"] = tbUserName.text) so it saves value in it if username is correct and redirect the user to mainpage.aspx.
the problem is:-

in login page if i copy the link of main page and paste it in address bar
at the login page it redirects it without even entering any data at Username and password.

i tried to check the session in main.aspx and see if empty redirect user to login which works the first time but as soon as i enter valid username and password in login the problem appear again even when i put the following at logout linkbutton (session["UserName"] = null)

can anyone help!!!!
thx in advance

Re: session

rakeshs3124-Jan-10 19:59

rakeshs312

4-Jan-10 19:59

loading from cache,clear the cache

add this on page load of all pages

Response.AddHeader("Cache-control", "no-store, must-revalidate, private,no-cache");
Response.AddHeader("Pragma", "no-cache");
Response.AddHeader("Expires", "0");

Re: session

baselanfouqa4-Jan-10 20:02

baselanfouqa

4-Jan-10 20:02

???!!!! what, how??

Re: session

nagendrathecoder4-Jan-10 20:03

nagendrathecoder

4-Jan-10 20:03

Ideally, you should destroy Session by calling Session.Abandon() method on logout.

Re: session

baselanfouqa4-Jan-10 20:04

baselanfouqa

4-Jan-10 20:04

tried but still the samething.....

Re: session

Abhijit Jana4-Jan-10 20:10

Abhijit Jana

4-Jan-10 20:10

Check Session Value on Page_Load. Check my Answer Smile | :)

Abhijit Jana | Codeproject MVP
Web Site : abhijitjana.net
Don't forget to click "Good Answer" on the post(s) that helped you.

Re: session

nagendrathecoder4-Jan-10 20:11

nagendrathecoder

4-Jan-10 20:11

Then the problem could be with Cache. Did you tried the above solution?

Re: session

Abhijit Jana4-Jan-10 20:09

Abhijit Jana

4-Jan-10 20:09

During Logoff you should use Session.Abandon() to set all session variable to null
and In Page_Load you should check like this

if(Session["UserName"] ==null )<br />
   Response.Redirect("Login.aspx");

If you need to learn more about session, please read this article
Exploring Session in ASP.Net[^]

Let me know if you need more help Smile | :)

Abhijit Jana | Codeproject MVP
Web Site : abhijitjana.net
Don't forget to click "Good Answer" on the post(s) that helped you.

Re: session

baselanfouqa4-Jan-10 20:15

baselanfouqa

4-Jan-10 20:15

dear Abhijit Jana,

i did what u wrote in fact my code is exactly the same..... but no use.

Re: session

nagendrathecoder4-Jan-10 20:18

nagendrathecoder

4-Jan-10 20:18

That means Session value is not null.
See what is the value of Session.

Re: session

Dinesh Mani4-Jan-10 20:09

Dinesh Mani

4-Jan-10 20:09

Let me first understand the problem here -

First, you had not validated the session on the main page hence when you entered the URL the main page was displayed.
So, you validated the session variable and redirected the user to Login page.
Now on the login page only after you sign-in you are able to go to the main page.
Now you wish to log-out the user for which you use session["UserName"] = null; but the main page still goes thro'.

Am I correct?

The problem here is that you should not use session["UserName"] = null; to remove the session variable. You should use Session.Remove("UserName");

HTH!

Re: session

baselanfouqa4-Jan-10 20:19

baselanfouqa

4-Jan-10 20:19

ok...
tried but wont work..

Re: session

Dinesh Mani4-Jan-10 20:23

Dinesh Mani

4-Jan-10 20:23

1. How do you check the Session variable on the main page? If possible post the code here.
2. Does the user actually click the Logout button/link?

Re: session

baselanfouqa4-Jan-10 20:32

baselanfouqa

4-Jan-10 20:32

1.) if (Session["UserName"] == null)
{
Response.Redirect("Login.aspx");
}

this in main.aspx page_load

2.)sure and the code to logout is :-

//Session["UserName"] = null;
//Session.Abandon();
Session.Remove("UserName");
Response.Redirect("Login.aspx");

Re: session

Dinesh Mani4-Jan-10 20:42

Dinesh Mani

4-Jan-10 20:42

Did you step thro' and check what happens in the Page_Load on the main page. Check if Session["UserName"] evaluates to null or if it returns any other value.

Are you checking this with-in a IsPostBack check? Can you post the entire Page_Load code?

Can you re-phrase what is happening against what is expected?

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.