Re: Use cookies as authenticate under wince
- From: Jooo <Jooo@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Sun, 20 May 2007 22:49:00 -0700
OK, thx for the information!
"Paul G. Tobey [eMVP]" wrote:
I'm thinking that you're probably asking in the wrong place. This doesn't.
really have anything to do with the .NET Compact Framework, so, unless you
happen to find an expert on the CE Web server who also hangs out here...
If it were me, I'd post to microsoft.public.windowsce.platbuilder. You
should also mention some crucial information in your post like: what version
of Windows CE, what device is it running on (it's a Windows Mobile device or
one that you built, etc.)?
Paul T.
"Jooo" <Jooo@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:52E8D3E7-8C08-4EA7-AD9D-39921E608352@xxxxxxxxxxxxxxxx
Hello!
I'am working on A Web-based interface that is runing at the HTTPD Server
that Windows ce is providing. The system for which the project is build
for
is an headless device. I developped a authentication system that will
check
the password on a sqlce database, and then redirect the User on different
websites in dependence of the user access rights.
It works well, but I have a major security problem!
When the login data are checked, I create a cookie that is send to the
page
to which the user is redirected by response.redirect("xxx.asp").In fact
I'm
using asp with vbscripts. I want to make at the top of the target site a
check of this cookie, to ensure that the user not simply came there by
typing
the right url. The only problem is that I can't make this cookie_check
because the webserver returns me this error:
The HTTP headers are already written to the client. HTTP
header
modifications must be made before writing page content
ASP scripting compilation error: '80020009'
Description:
In file: /Storage Card/ad_bnz_page.asp
On line: 2
Here is the corresponding script:
<%
response.Buffer=true
if request.cookies("rights")<>"2" or request.cookies("st")<>"admin" then
response.redirect("login.asp?mess=6")
end if
%>
If I remove line 2, the same error will occure at line 3 =>
response.redirect("....asp")
How can I make this check work if the respnse.buffer=true method doen't
work?
Thx for your help!
p.s: The server method I'm using is POST
- References:
- Re: Use cookies as authenticate under wince
- From: Paul G. Tobey [eMVP]
- Re: Use cookies as authenticate under wince
- Prev by Date: File Date and Time stamp after FileStream.Write(), C#
- Next by Date: Connecting to a webservice through grps
- Previous by thread: Re: Use cookies as authenticate under wince
- Next by thread: I think this is going to be a tough one! Is there a way to keep a device from turning on the backlight and keys light when it's bluetooth services are discovered?
- Index(es):
Relevant Pages
|