User Login. How to manage

[Greg Cyrus]

Hi,
i want to create a web-application and want to use a login for users.
this login shall be controlled by a database.
how can i assure that only logged in user can access-pages?

I guess that every form has to call a function fnUserLoggedIn() in its
Load-Event!?

How can i handle to logged-on-procedure by a database?

 

[Scott Allen]

Hi Greg:

The good news is that ASP.NET has an infrastructure to support forms
based authentication, which means you don't have to write a lot of
code.

This following article has a good description - including how to check
against the database:
http://www.4guysfromrolla.com/webtech/110701-1.shtml

 

[Greg Cyrus]

ok.. tnx . this article with its formauthentication really did help me
alot..
but now . I wonder how I can create a sub-dir with an own web.config -file.
I created a new subdir in the project.. but how cam I deternime another
web.config.-file for that subdir.
I want to create n subdir to manage public and peronal web-areas..

 

[Scott Allen]

You can drop a web.config file into each subfolder that contains just
an <authorization> section to allow / deny different roles. Is that
what you are asking?

 

[Greg Cyrus]

i have put anoter web.config-file into a subdir - but authorization in
subdirs doesn't seem to work. I also tried to use the <location path =
"<subdir>">-tag in web.config-file of the root-dir - but IIS always stops
with Configuration Error:
"It is an error to use a section registered as
allowDefinition='MachineToApplication' beyond application level. This error
can be caused by a virtual directory not being configured as an application
in IIS."

 

[Scott Allen]

Can you post the web.config settings you put in the subdir? If you are
getting the MachinetoApplication error then there is a setting in the
config that you can't use in a subfolder, but <authorization> itself
will work there...