DaniWeb Forum Index > Web Development > ASP

Sessions/securing web site pages with a Login

Please support our ASP advertiser: PostgreSQL or MySQL? Compare and contrast the two most popular open source databases

•

Join Date: Oct 2005

Posts: 17

Reputation: JC_2000 is an unknown quantity at this point

Solved Threads: 0

JC_2000

Offline

Newbie Poster

Sessions/securing web site pages with a Login

Apr 22nd, 2006

Hi everyone,

Can anyone tell me how you can stop users from URL Hacking your website with ASP (sessions)?
So for example if you have a password and username form on the front of your website and only want authorised members to gain access to your web site.

So for example just say you had a page e.g: somepage.htm and a user who was not logged in types www.somesite.com/somepage.htm. How can you stop them from getting access to the that page if they are not logged in?

P.S: Do you have any sample code?

Please help,

Jay.

•

Join Date: Sep 2004

Posts: 89

Reputation: msaqib is an unknown quantity at this point

Solved Threads: 1

msaqib

Offline

Junior Poster in Training

Re: Sessions/securing web site pages with a Login

May 6th, 2006

 Help with Code Tags 
 ASP Syntax (Toggle Plain Text) 
<%
Dim lgn,pas ' Login name & Pasword
lgn=cstr(Request("login"))
pas=cstr(REquest("pass"))
if ((lgn="login") AND (pas="123")) then 
  session("admin") = True
  response.Redirect("somepage.asp")
end if
 
'now if the user have not logged in then 
if NOT(session("admin")) then Response.Redirect("NoAccess.asp")
%>
<%
Dim lgn,pas ' Login name & Pasword
lgn=cstr(Request("login"))
pas=cstr(REquest("pass"))
if ((lgn="login") AND (pas="123")) then 
  session("admin") = True
  response.Redirect("somepage.asp")
end if
 
'now if the user have not logged in then 
if NOT(session("admin")) then Response.Redirect("NoAccess.asp")
%>

The simplest code will look like this.

C and C++ Programming Resources and Source Code

Muhammad Saqib

•

Join Date: May 2008

Posts: 1

Reputation: tparke is an unknown quantity at this point

Solved Threads: 0

tparke

Offline

Newbie Poster

Re: Sessions/securing web site pages with a Login

May 9th, 2008

Hi Jay,

Did you manage to solve the URL hacking problem? I have the same situation and would really appreciate it if you could let me know how you got around it.

Thanks,
Tony