CodeVerge.Net Beta


   Explore    Item Entry   Register  Login  
Microsoft News
Asp.Net Forums
IBM Software
Borland Forums
Adobe Forums
Novell Forums

MS SQL 2008 on ASP.NET Hosting
Zone: > NEWSGROUP > Asp.Net Forum > starter_kits_and_source_projects.gotcommunitynet Tags:
Item Type: NewsGroup Date Entered: 12/12/2003 9:37:39 PM Date Modified: Subscribers: 0 Subscribe Alert
Rate It:
(NR, 0)
XPoints: N/A Replies: 7 Views: 15 Favorited: 0 Favorite
Can Reply:  No Members Can Edit: No Online: Yes
8 Items, 1 Pages 1 |< << Go >> >|
Jeff Giesbrecht
Asp.Net User
Remember me function bug12/12/2003 9:37:39 PM

0/0

I have a couple of communities that I log into with the same username which is creating a problem for me if I have checked the remember me box. Seems there is no distinction between the community where the login is to be remembered.

I found the location in the login.cs form that deals with setting the cookie, what I can't find is where the authentication is performed when a user accesses a community page again.

My plan in fixing this bug is to add the communityID to the username. Anyone see any problems with this approach??

Thanks for the help.
para7
Asp.Net User
Re: Remember me function bug12/13/2003 12:06:27 PM

0/0

The GCN my opinion still have serious bugs. For me the login problem still is a minor problem, because I believe it only to be a problem for me as the hosting admin.
E.g. when I log in to my 7d.dk and withour logging out, I enter a 7d.dk sub domain, I am also logged in to that sub domain. I can live with that. But it's a bug. And if I host someone someday, who want subdomains also, it's a problem.
Jørgen A.J.
Jeff Giesbrecht
Asp.Net User
Re: Remember me function bug12/13/2003 4:40:01 PM

0/0

Right and I'm at the point where I'm hosting other sites. The problem wouldn't be so bad if the authentication actually worked; however, because the passwords are different it fails and then the admin section is unreachable. Also clicking the logout button doesn't correct the problem.
para7
Asp.Net User
Re: Remember me function bug12/13/2003 5:58:36 PM

0/0

I always seem to be able after some tricking, to see the Admin section again. But I empty my cache a lot.
Jørgen A.J.
redd
Asp.Net User
Re: Remember me function bug12/13/2003 6:56:00 PM

0/0

The problem isn't entirely a bug in the CSK/GCN. The problem comes from the fact that the forms authentication system in ASP.NET is a site level feature, and all communities in a GCN or CSK application are sharing the same site (application domain). It doesn't matter if persistant login is used or not though, that has nothing to do with the problem, it just makes it more visible. If a user logs into one community as user "jack" (even without a persistant login option checked) then visits another community on the same site that also has a user named "jack", the Frums authentication system says that the user is already logged in as "jack". The forums authentication system itself has no understanding of the GCN/CSK internal partitioning and will not know that the login is not valid for this request.

Quite honestly, the best solution is to mandate unique usernames across all communities. You can do a poor man's version with a simple unique constraint on the username column, or you can enhance the user checking functionality in the stored proc that creates the user. You can mess with the forms authentication cookie and add data to identify the community the ticket is valid for, but this is more complex and sloppy. You would have to deal with force logging out the user when a conflict occured... which itself isn't a problem except that it would cause the user to have to re-login again when they visited the other community again (and undermines the functionality of persistant login if it was in use).
Stephen M. Redd
http://www.reddnet.net
Jeff Giesbrecht
Asp.Net User
Re: Remember me function bug12/13/2003 7:45:58 PM

0/0

Why would adding the communityID to the cookie be a sloppy and complex way to go?
redd
Asp.Net User
Re: Remember me function bug12/13/2003 9:08:10 PM

0/0

My next statement was qualifying that remark:

"You would have to deal with force logging out the user when a conflict occured... which itself isn't a problem except that it would cause the user to have to re-login again when they visited the other community again (and undermines the functionality of persistant login if it was in use)."

Thus, it is probably not the cleanest implementation.
Stephen M. Redd
http://www.reddnet.net
kfarmer
Asp.Net User
Re: Remember me function bug1/21/2004 1:44:12 AM

0/0

Why not cookie siteID-specific login variables?

eg:

community #1: encrypted(userId1, pass1)
community #2: encrypted(userId2, pass2)
etc

Then when the module receives the cookie, it picks out the correct encrypted information, and uses that for authentication. Sure, it's not as simple, but it avoids having to force a logout.
Keith J. Farmer

http://www.thuban.org

[email protected]
8 Items, 1 Pages 1 |< << Go >> >|


Free Download:

Books:
Calculus the Easy Way Authors: Douglas Downing, Pages: 404, Published: 2006
What Every Engineer Should Know about Artificial Intelligence Authors: William A. Taylor, Pages: 331, Published: 1988
The Banquet Bug Authors: Geling Yan, Pages: 288, Published: 2007
Story Proof: The Science Behind the Startling Power of Story Authors: Kendall Haven, Pages: 152, Published: 2007
Bootstrapping: Douglas Engelbart, Coevolution, and the Origins of Personal Computing Authors: Thierry Bardini, Pages: 284, Published: 2000
Paradigms of Artificial Intelligence Programming: Case Studies in Common Lisp Authors: Peter Norvig, Pages: 946, Published: 1992
The Complete Idiot's Guide to Algebra: Cig Authors: W. Michael Kelley, Mike Kelley, Pages: 311, Published: 2004
Engineer's Complete Guide to PC-Based Workstations: 80386/80486 Authors: Gary A. Shade, Pages: 286, Published: 1992
JavaScript Bible Authors: Danny Goodman, Michael Morrison, Brendan Eich, Pages: 1173, Published: 2007

Web:
Remember me function bug - ASP.NET Forums Re: Remember me function bug. 12-13-2003, 7:06 AM. Contact ... Jørgen A.J.. Re: Remember me function bug. 12-13-2003, 11:40 AM. Contact ...
Re: remember me function (& singleton): msg#00016 Hi again, > just pass in an empty array. please also file a bug request for a ... Next by Thread: Re: Re: remember me function (& singleton), Lukas Smith ...
[RESOLVED] Quote from post function bug - Forum Hosting Forum Hosting > IPB Support > IPB Bug Reports · Reload this Page [RESOLVED] Quote from post function bug. User Name, Remember Me? Password ...
Need help on a program (function bug) - C Need help on a program (function bug) - C Community and Forum - Our C forum is the place for Q&A-style ... User Name, Password, Remember Me? ...
exec function bug? - Epic Games Forums exec function bug? Programming & UnrealScript. ... Remember Me? Password ... When I have a 'exec function' with a float-type argument, all arguments after ...
ZBrushCentral - bug report: bug in 'fix seam' function still ... The 'fix seam' function bug from zbrush2 is still present in zbrush3. ... Could someone from pixologic please tell me if this bug is going ...
XcopyFile function bug - Page 2 - Acresso Community XcopyFile function bug InstallShield Express - General. ... Remember Me? Password ... way to go but where does this function belong. ...
dev.tw.o : Tikiwiki Development : Login Bug Unless Remember Me Box ... Summary, Login Bug Unless Remember Me Box Clicked - Now problems with use of ... Since then I have found that any function that uses the 'Click here to ...
Bug in Non Empty Function Bug in Non Empty Function data.oledb.olap. ... This is a discussion on Bug in Non Empty Function within the ... Remember Me? Password ...
[Bug] Error on email address checking function - osCommerce and ... [Bug] Error on email address checking function. User Name, Remember Me? Password ... Default [Bug] Error on email address checking function ...

Videos:
Naughty By Nature feat. Queen Latifah - Wickedest Man Alive Naughty By Nature feat. Queen Latifah - Wickedest Man Alive from Naughtys Nicest/Greatist Hits Mercifully mercifully mercifully massacre ...
MTGO III from Penny Arcade Expo(PAX) Magic the Gathering ... Andy of cardbot interviews Justin Ziran.
Debugging Backwards in Time Google TechTalks January 11, 2006 Bil Lewis Bil Lewis is a computer scientist who has worked on natural language understanding, expert ...
MTGO III from Penny Arcade Expo(PAX) Magic the Gathering ... Andy of cardbot interviews Justin Ziran of WOTC.
Lec 34 | MIT 7.014 Introductory Biology, Spring 2005 Communities II (Prof. Penny Chisholm) View the complete course: http://ocw.mit.edu/7-014S05 License: Creative Commons BY-NC-SA More information ...
Full Focus: Oscar Preview; La Jolla Eruv Debate 3-1-06 If you consider yourself a 'movie buff' you probably know the Academy Awards are right around the corner. On Wednesday, two local film critics ...
Exploratory Testing Google Tech Talks March 16, 2006 Jon Bach
Turkish Star Wars (1982) (eng. subtitles) Turkish-made film commonly known as Turkish Star Wars because of its notorious bootlegging of Star Wars film clips worked into the film. Released ...
UWTV CSE 142 - Computer Programming I, Lecture 3 In this series of lectures, Martin Dickey, from the University of Washington teaches Computer Programming using the C Language. *Important note ...
BeGeistert 014 Interview of yellowTAB During BeGeistert 014 (April 2-3, 2005) Daniel "daat" Teixeira from IsComputerOn and Chris Simmons from Haiku News spent 40 minutes interviewing ...




Search This Site:









  Privacy | Contact Us
All Times Are GMT