authenticating folders

[mrp9090]

I have some code of my own where I am checking a username/password against a database for login, I am not using any of the login controls etc. What I want to do next is to create a folder for my admin pages and make it only available to administrators. At login I set an int which if an admin logs in is set to 2, otherwise it is set to 1 or 3. So what I want to be able to do is check if this int is 2, and if so set a global value which means that the admin pages can be viewed, if a non-administrator tries to access the pages they get redirected. How do I do this?

 

[ca8msm]

Set a session variable when the user logs in, check it's value on the relevant admin page(s) and if it's correct show the page else redirect the user.


____________________________________________________________

Need help finding an answer?

Try the Search Facility or read FAQ222-2244 on how to get better results.

 

[mrp9090]

Can I not set a role for the user on login and then in web.config configure it so that only people in certain roles can view any of the pages in the admin folder?

 

[ca8msm]

Yes you can but your question asked how to do it with an integer value which is why I said to use session variables.


____________________________________________________________

Need help finding an answer?

Try the Search Facility or read FAQ222-2244 on how to get better results.

 

[mrp9090]

How do I do this?

 

[ca8msm]

You'll have to use Forms Authentication. There are lots of examples on MSDN and google that should come in handy. Some of the basics are covered here:

http://www.15seconds.com/issue/020220.htm

____________________________________________________________

Need help finding an answer?

Try the Search Facility or read FAQ222-2244 on how to get better results.