Have Geek Brain

How to protect an ASP Classic page?

How to secure an ASP Classic page with HTTP AUTH (you must provide a username and password for the service) or a randomly generated access key to be included as one of the HTTP POST parameters using the access_key variable name.

Can anyone provide some classic asp code in this regard?

Quick help would be appreciated ...

PS: OrderGroove is a third party service ... neglect it.

+2


a source to share


2 answers


HTTP Basic Authentication is something you can enable by configuring your web server (probably IIS). As far as I know, there is no classic ASP code that can do this.

Another option is to store the login information in a session variable (ie session ("LoggedInUser")). On each page, just check if this variable is set and if not, redirect them to the login page.

Note that both of these methods will send the username / password unencrypted, so you probably want to get an SSL certificate for security reasons.



See also:

HTTP Authentication (Basic or Digest) in ASP Classic via IIS http://www.4guysfromrolla.com/webtech/020201-1.shtml

+3


a source


You can manipulate IIS metadata using the IIS: // protocol schema with GetObject. Check your adsutil.vbs file, usually at C: \ Inetpub \ AdminScripts



Alternatively, you can implement Basic Auth using plain / text by getting / configuring HTTP headers along with Base64 encoder / decoder. Although this is extremely insecure.

+3


a source






More articles:


All Articles