Wednesday, December 23, 2009

How to log users securely insto a websie without making him go through the login screen?

I need to code in asp.net to allow new users directly inside the website without going through the login screen once they agree and a sign an agreement in a secure way. What is the way to do it in asp.net?How to log users securely insto a websie without making him go through the login screen?
One way would be to use the Request.Item and give your user a variable to add to the URL





For example. suppose the URL of your site is www.MySite.com


Give your users a secret password...'Bubbles'





So your registered users now type this in the address bar:





www.MySite.com?password=Bubbles





Then in your Page load you put





If Request.Item(password) = ';Bubbles'; then


Let them in


Else


Make them go to registration page


End if





hope that helpsHow to log users securely insto a websie without making him go through the login screen?
If convenience is the only concern, you could store a cookie on their machine after the first successful logon to bypass future prompts. See http://msdn2.microsoft.com/en-us/library/ms178193.aspx for details on using cookies.





If security is a concern, you could use client-side certificates to authenticate the users. See http://support.microsoft.com/kb/315588 for details.

No comments:

Post a Comment