Admin & user Sections .. how authentication then ????!!!!



I have a website that curently have an admin section with which a
user can manage site . I use the cookie name set in web.config file
for authenticating the admin user of the site. Now I am gonna add
normal user membership other that admin to my site. I have a problem
regarding "authentication cookie name" for normal users as I have
already used that for admin users. As you now I am not allowed to
define another authentication cookie name at folder level.(But
application level). So what is your recommendation to this problem ??
Should I use a normal cookie other that the one defined in web.cofig
file to authenticate users . I need this . I will appreciate your
help . Thanks in advance.

.



Relevant Pages

  • PHP-Nuke v5.6 - Users can compromise admin accts.
    ... Allows any user to get admin access to a PHP-Nuke site. ... into base64 and puts it into a cookie. ... Since PHP Nuke encrypts passes in md5 and then matches the encrypted pass ... Open the message and a cookie will now be set on yer box, ...
    (Bugtraq)
  • [UNIX] PHPNuke Private Messaging Module Allows Compromising of Administrator Accounts
    ... attackers to steal the hashed cookie (containing the password of the ... In newer versions of PHPNuke (version ... /* this is so the admin does not get scared. ... Wait until the administrator checks the message then check cookie.txt ...
    (Securiteam)
  • Re: DESPERATE: FormsAuthentication Problem
    ... I have verified that both machines are running the same version of the ... >> them in the forms authentication cookie. ... >> ' assigned a semicolon delimited string of role names. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: DESPERATE: FormsAuthentication Problem
    ... > them in the forms authentication cookie. ... > ' Get ";" delimited string of the user's roles from the database ... > Dim authTicket As FormsAuthenticationTicket = New ...
    (microsoft.public.dotnet.framework.aspnet)
  • DESPERATE: FormsAuthentication Problem
    ... them in the forms authentication cookie. ... from the forms authentication cookie, create a new FormsIdentity object, ... ' Get ";" delimited string of the user's roles from the database ... Dim authTicket As FormsAuthenticationTicket = New ...
    (microsoft.public.dotnet.framework.aspnet)