Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Urgent Please What's the best way to... 2
- Thread starter TonyU
- Start date
-
1
- #2
hi
you can store all the user name and password in a database and then compare it with the database or..you can create a string in the asp file name username and password and check if it matches...but best way is to make it in a database. But the easiest way is to make it in a asp file.
thanks,
hui
you can store all the user name and password in a database and then compare it with the database or..you can create a string in the asp file name username and password and check if it matches...but best way is to make it in a database. But the easiest way is to make it in a asp file.
thanks,
hui
-
1
- #3
Karl Blessing
Programmer
you are going to have to give us alot more information than that, if you want us to help you.
because there are so many different ways to handle users, logins, etc.
depending on how YOU have it written determines if the "Correct" user is logged in. Karl Blessing aka kb244{fastHACK}
because there are so many different ways to handle users, logins, etc.
depending on how YOU have it written determines if the "Correct" user is logged in. Karl Blessing aka kb244{fastHACK}
well Sirs, I have very little knowledge in asp but here's my code. I've heard I need to put my login name in a session but I'm not sure.
<%
reqlogin2 = request("login"
Dim RSLogin2
Set RSLogin2 = Server.CreateObject("ADODB.Recordset"
SQL1 = "Select * from db1 where login = '" & reqlogin2 & "'"
RSLogin2.open SQL2, "DSN=mydata"
RSLogin2.MoveFirst
session("login" = RSLogin2("login"
session("name" = RSLogin2("name"
%>
does this make sense, I'm trying to understand it myself.
QUOTE OF THE DAY
Not to know if bad; not to wish to know is worse.
<%
Jr Clown
%>
<%
reqlogin2 = request("login"
Dim RSLogin2
Set RSLogin2 = Server.CreateObject("ADODB.Recordset"
SQL1 = "Select * from db1 where login = '" & reqlogin2 & "'"
RSLogin2.open SQL2, "DSN=mydata"
RSLogin2.MoveFirst
session("login"
= RSLogin2("login"session("name"
= RSLogin2("name"%>
does this make sense, I'm trying to understand it myself.
QUOTE OF THE DAY
Not to know if bad; not to wish to know is worse.
<%
Jr Clown
%>
- Thread starter
- #6
Karl Blessing
Programmer
if you do not code at all, why post here, assuming you are a developer.
Please clarify your post. Karl Blessing aka kb244{fastHACK}
Please clarify your post. Karl Blessing aka kb244{fastHACK}
- Thread starter
- #8
Karl Blessing
Programmer
I'd be glad to help, as far as the "rookie" forum goes, thats kind of hard, since this is the only forum for ASP (rookie or otherwise) , but perhaps you might be interested in links on learning ASP in general to help get a foothold to what you want to do.
first off need to make sure you at least have what is required.
A Webserver capable of executing ASP
(IIS = Internet Information Server)
-NT 4 with service pack4 running IIS 4
-Windows 2000 running IIS 5
-Apache Webserver with the Chili(cant spell) patch for running ASP (free but not fully supported)
-Win9x with PWS (Personal Web Server) (also free download, but very limited on security and support)
A IDE (an Interface)
- Visual Interdev (my personal choice for writing ASP)
- Borland UltraDev
- Microsoft FrontPage(does not support ASP, but at the same time, doesnt prevent you from typing in ASP without the extra help)
and of course, a webbrowser to check your result.
there is a site, where you can get some webspace, on a webserver that supports, ASP and no need for an IDE (tho IDE is very helpful if you need the syntax reference) , the only problem is, that you have to edit, and work on your pages, on the site, you cant upload via FTP, only through it's web interface.
the site is ...
they do have tutorials, and online references to the language, might be a good place to start, though it is a bit annoying for a common developer like myself, I own , which is provided by hostway.com , it's an NT Account, so I have ASP Support on it.
Let me know if you need any help (also on rare occasions, I do often share my webspace with friends and such, only problem is , I never could find a way to setup multi user capability, so certain friends can update a sub dir themselves, rather than send me update packets.) Karl Blessing aka kb244{fastHACK}
first off need to make sure you at least have what is required.
A Webserver capable of executing ASP
(IIS = Internet Information Server)
-NT 4 with service pack4 running IIS 4
-Windows 2000 running IIS 5
-Apache Webserver with the Chili(cant spell) patch for running ASP (free but not fully supported)
-Win9x with PWS (Personal Web Server) (also free download, but very limited on security and support)
A IDE (an Interface)
- Visual Interdev (my personal choice for writing ASP)
- Borland UltraDev
- Microsoft FrontPage(does not support ASP, but at the same time, doesnt prevent you from typing in ASP without the extra help)
and of course, a webbrowser to check your result.
there is a site, where you can get some webspace, on a webserver that supports, ASP and no need for an IDE (tho IDE is very helpful if you need the syntax reference) , the only problem is, that you have to edit, and work on your pages, on the site, you cant upload via FTP, only through it's web interface.
the site is ...
they do have tutorials, and online references to the language, might be a good place to start, though it is a bit annoying for a common developer like myself, I own , which is provided by hostway.com , it's an NT Account, so I have ASP Support on it.
Let me know if you need any help (also on rare occasions, I do often share my webspace with friends and such, only problem is , I never could find a way to setup multi user capability, so certain friends can update a sub dir themselves, rather than send me update packets.) Karl Blessing aka kb244{fastHACK}
- Thread starter
- #10
Thanks for your response.
Here's what I got
PWS
FrontPage 2000
IE5.5
Access 2000
Let's say we're both in my db, and when you log in I want YOU to be sent to then when I log in I should be sent to Tony
Here's what I got
PWS
FrontPage 2000
IE5.5
Access 2000
Let's say we're both in my db, and when you log in I want YOU to be sent to then when I log in I should be sent to Tony
Karl Blessing
Programmer
ok, looking at it from a database perspective I See.
Lets say for example, we want to reference to the database each time.
lets assume, there is a table in the DB , called Logins
and the fields are something like
UID | Username | Password | DefaultSite
on our login page, lets say we want to have a login , so to say we have a user and a password box.
(going to try a two page method, since single page might boggle you)
login.htm can be a plain htm, just for the purpose of login, we might have something like this
...
<Form action="verify.asp" method="post">
<input type=text name="userid">
<input type=password name="pwd"> (a password type same as text, only it masks the typed letters with *** )
<input type=submit value="login">
</form>
....
when you click the login button, it'll call verify.asp
at the top I would throw in a Response.buffer = true, so that no data is sent to the client, so that we can redirect to the default site, or if we need to show an error instead.
in verify we might have something like this
(assuming your database has a DSN[data source name] such as mylogins)
Set Conn = Server.CreateObject("ADODB.Connection"
Conn.Open "DSN=mylogins", "yourusername", "yourpassword"
on an access database, without permision set, your username/password can typically be blank for the connection.
Set RS = Server.CreateObject("ADODB.Recordset"
RS.Open "select * from Logins"
if not RS is nothing then
RS.movefirst()
exitcondition = false
while not RS.eof and not exitcondition
if RS("UserName" = Request.Form("userid" then
if RS("Password" = Request.Form("pwd" then
defaultsite = RS("DefaultSite"
Session("userid" = RS("userid" <!-- kept for record -->
exitcondition = true
end if
end if
wend
end if
if Session("userid" <> "" and not IsEmpty(Session("userid") then
Response.redirect defaultsite
else
Response.write "<b><font color=""red"">Inccorect Login or Login not found</font></b>"
Response.flush
Response.end
end if
This is a very rough, and skimmed way of explaining it, using the userid sessioned off, to keep track of the user until the session times out, usally works best, if you are having the user move around within your site.
I could explain it in more detail later tonight. Karl Blessing aka kb244{fastHACK}
Lets say for example, we want to reference to the database each time.
lets assume, there is a table in the DB , called Logins
and the fields are something like
UID | Username | Password | DefaultSite
on our login page, lets say we want to have a login , so to say we have a user and a password box.
(going to try a two page method, since single page might boggle you)
login.htm can be a plain htm, just for the purpose of login, we might have something like this
...
<Form action="verify.asp" method="post">
<input type=text name="userid">
<input type=password name="pwd"> (a password type same as text, only it masks the typed letters with *** )
<input type=submit value="login">
</form>
....
when you click the login button, it'll call verify.asp
at the top I would throw in a Response.buffer = true, so that no data is sent to the client, so that we can redirect to the default site, or if we need to show an error instead.
in verify we might have something like this
(assuming your database has a DSN[data source name] such as mylogins)
Set Conn = Server.CreateObject("ADODB.Connection"
Conn.Open "DSN=mylogins", "yourusername", "yourpassword"
on an access database, without permision set, your username/password can typically be blank for the connection.
Set RS = Server.CreateObject("ADODB.Recordset"
RS.Open "select * from Logins"
if not RS is nothing then
RS.movefirst()
exitcondition = false
while not RS.eof and not exitcondition
if RS("UserName"
= Request.Form("userid" thenif RS("Password"
= Request.Form("pwd" thendefaultsite = RS("DefaultSite"
Session("userid"
= RS("userid" <!-- kept for record -->exitcondition = true
end if
end if
wend
end if
if Session("userid"
<> "" and not IsEmpty(Session("userid") thenResponse.redirect defaultsite
else
Response.write "<b><font color=""red"">Inccorect Login or Login not found</font></b>"
Response.flush
Response.end
end if
This is a very rough, and skimmed way of explaining it, using the userid sessioned off, to keep track of the user until the session times out, usally works best, if you are having the user move around within your site.
I could explain it in more detail later tonight. Karl Blessing aka kb244{fastHACK}
- Thread starter
- #12
I'm confused!!!!!
(-:
X-)
s-)
Here's what I have and help maybe you guys can help me fix it.
***** PAGE1 *****(LOGIN.ASP)
<%
Dim RSlogin
set RSlogin=server.createobject("adodb.recordset"
RSlogin.open "login", "dsn=mydb"
%>
.
.
.
.
.
.
.
Down to the middle of the screen I have this, that selects names from my names DB to populate the drop-down box. I'm sorry, forgot to mention that I don't have a password field I'm simple having them pick their name to carry it over the next 2 pages. (That's the best way I know how)
<Select Name="login" Size="1">
<option selected value="Click to log in">Click to log in</option>
<%
Do while NOT RSlogin.eof
Response.write "<Option value='" & RSlogin("name" & "'>"
Response.write RSlogin("name"
Response.write "</Option>"
RSlogin.Movenext
loop
RSlogin.Close
Set RSlogin=nothing
%>
</select></td>
***** END OF PAGE1 *****(LOGIN.ASP)
***** PAGE2 *****(LOGIN.ASP)
<%
Dim RSlogin2
set RSlogin2=server.createobject("adodb.recordset"
RSlogin2.open "login", "dsn=mydb"
.
.I don't know what would go here to check names on db and
.send them where they belong.
.
%>
***** END OF PAGE2 *****(LOGIN.ASP)
I hope this helps you help me...
Tony
(-:
X-)
s-)
Here's what I have and help maybe you guys can help me fix it.
***** PAGE1 *****(LOGIN.ASP)
<%
Dim RSlogin
set RSlogin=server.createobject("adodb.recordset"
RSlogin.open "login", "dsn=mydb"
%>
.
.
.
.
.
.
.
Down to the middle of the screen I have this, that selects names from my names DB to populate the drop-down box. I'm sorry, forgot to mention that I don't have a password field I'm simple having them pick their name to carry it over the next 2 pages. (That's the best way I know how)
<Select Name="login" Size="1">
<option selected value="Click to log in">Click to log in</option>
<%
Do while NOT RSlogin.eof
Response.write "<Option value='" & RSlogin("name"
& "'>"Response.write RSlogin("name"
Response.write "</Option>"
RSlogin.Movenext
loop
RSlogin.Close
Set RSlogin=nothing
%>
</select></td>
***** END OF PAGE1 *****(LOGIN.ASP)
***** PAGE2 *****(LOGIN.ASP)
<%
Dim RSlogin2
set RSlogin2=server.createobject("adodb.recordset"
RSlogin2.open "login", "dsn=mydb"
.
.I don't know what would go here to check names on db and
.send them where they belong.
.
%>
***** END OF PAGE2 *****(LOGIN.ASP)
I hope this helps you help me...
Tony
Karl Blessing
Programmer
I created an example at
I'll get the code to you in a moment
(two logins are kb244/mypass and youman/manpass) Karl Blessing aka kb244{fastHACK}
I'll get the code to you in a moment
(two logins are kb244/mypass and youman/manpass) Karl Blessing aka kb244{fastHACK}
- Thread starter
- #14
Karl Blessing
Programmer
login.htm
---------------------------------------------
verify.asp
---------------------------------------------------
The Database (logins.mdb)
--------------------------------------------------------
in Access create a table called Logins
the four fields to create are
ID
UserName
PassWord
Defaultsite
Karl Blessing aka kb244{fastHACK}
---------------------------------------------
Code:
<HTML>
<HEAD>
<META NAME="GENERATOR" Content="Microsoft Visual Studio 6.0">
</HEAD>
<BODY>
<Table border=1 align="center">
<Form action="verify.asp" method="post">
<TR>
<Td><input type="text" name="username"></td>
<td><input type="password" name="password"></td>
<td><input type="submit" value="Login"></td>
</TR>
</form>
</Table>
</BODY>
</HTML>verify.asp
---------------------------------------------------
Code:
<%@ Language=VBScript %>
<% Response.Buffer = true %>
<HTML>
<HEAD>
</HEAD>
<BODY>
<%
Set Conn = Server.CreateObject("ADODB.Connection")
Set RS = Server.CreateObject("ADODB.Recordset")
' this step we want to get the physical path so we can open the database directly
Path_Translated = Request.ServerVariables("PATH_TRANSLATED")
Path_Striped = Left(Path_Translated,InstrRev(Path_Translated, "\"))'strips the asp name off the path
Conn.Open "DRIVER={Microsoft Access Driver (*.mdb)}; DBQ=" & Path_Striped & "logins.mdb;", "", ""
RS.Open "select * from Logins", Conn
if not RS is nothing then
RS.movefirst()
exitcondition = false
while not RS.eof and not exitcondition
if RS("UserName") = Request.Form("username") then
if RS("PassWord") = Request.Form("password") then
defaultsite = RS("DefaultSite")
Session("userid") = RS("ID")
exitcondition = true
end if
end if
RS.MoveNext
wend
end if
if Session("userid") <> "" and not IsEmpty(Session("userid")) then
Response.redirect defaultsite
else
Response.write "<b><font color=""red"">Inccorect Login or Login not found</font></b>"
Response.flush
end if
%>
</BODY>
</HTML>
<% Response.End %>The Database (logins.mdb)
--------------------------------------------------------
in Access create a table called Logins
the four fields to create are
ID
UserName
PassWord
Defaultsite
Karl Blessing aka kb244{fastHACK}
Karl Blessing
Programmer
keep in mind, even though I have it pointed to the database in the same folder as the ASP, this does not prevent a user from typing in say.
and downloading the access database.
which is why I originally (changed it to current method to make it simpler for you) had the database under my _private folder, which is accesible only to my serverside script, and not to the public. Karl Blessing aka kb244{fastHACK}
and downloading the access database.
which is why I originally (changed it to current method to make it simpler for you) had the database under my _private folder, which is accesible only to my serverside script, and not to the public. Karl Blessing aka kb244{fastHACK}
- Thread starter
- #17
- Status
Similar threads
- Locked
- Question
- Locked
- Question
- Locked
- Question
- Locked
- Question