Re: What is the best way to login my website from another website?

AFAIK ASP.NET checks posted data to make sure that they are coming from a
page that was served by the same server.

I would just post to the same page and would transmit data behind the scene
using a web service...



"rockdale" <rockdale.green@xxxxxxxxx> a écrit dans le message de news:
1183650687.509733.262840@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi, all:

I have a website with its own login page. Now one of my clients want
their employees log into my website from their website. They want to
have their login page (look and feel are different and hosted on
another web server) and then send the user id and pwd to my login
page. What is the best to do this?

Pass the user id and pwd on the url is not a solution since everybody
will see the user's credential.

We are trying to build their login page like following:

<form action="https://mywebsite/Login.aspx"; id="form1" name="form1"
method="post" action="" style="padding:0; margin:0;">
<input type="hidden" name="__EVENTTARGET" id="__EVENTTARGET"
value="" />
<input type="hidden" name="__EVENTARGUMENT" id="__EVENTARGUMENT"
value="" />
<input name="txtUserID" type="text" size="18" />
<input name="txtPWD" type="password" size="18" />
<input name="Submit" type="submit" style="font-size: 10px;"
value="Login" />
</form>

But we got the error
Invalid postback or callback argument. Event validation is enabled
using <pages enableEventValidation="true"/> in configuration or <%@
Page EnableEventValidation="true" %> in a page.

I do not think Disable Event validation is a good idea.

Is there any other better approach?

Thanks a lot.



.

Relevant Pages

  • FPSE 2003: Site Admin Login Refused
    ... In this example I am extending server extensions to the example domain: ... install extensions on. ... It appears that I am successfully installing FPSE on the website as I am ... I get a normal login prompt. ...
    (microsoft.public.frontpage.extensions.windowsnt)
  • Frontpage and W 2003 S
    ... I have been trying to create a website on one of the company's servers ... which is running Windows 2003 Server. ... tried to submit his login details the dreaded dialogue box appeared ...
    (microsoft.public.windows.server.general)
  • set up account/group with limited access
    ... i want to setup a group/user to have limited access to a box. ... anything other than login to the system. ... to access a website on a server, but i want to restrict access to users via ...
    (RedHat)
  • Re: Problems with IIS 5 default domain
    ... Is Windows integrated authentication also enabled? ... When a user attempts to login the login is rejected ... authenticate the user against the local server instead of the domain. ... Manager both at the server and at the website level with no change. ...
    (microsoft.public.inetserver.iis.security)
  • gdm hangs
    ... gdm will hang 9 of 10 times when logging out. ... with or without the client having been connected to the Server. ... # Timed login, useful for kiosks. ... Must output the chosen host on stdout, ...
    (Debian-User)