Help - Authentication with ASP
From: Lorenzo (NO_SPAMmargola_at_it2b.it.)
Date: 05/05/04
- Next message: Ray at <%=sLocation%> [MVP]: "Re: how do I reference to an acces dtabase out side my WWW folder?"
- Previous message: shank: "Re: creating a spreadsheet"
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 5 May 2004 15:57:26 +0200
I had to transfer an ASP Web Application (developed by another person) to a
different web server. It seems to work but not completely.
I have some problems with authentication: it is based on a username and a
password stored in a SQL Server's table. These data are requested via basic
authentication (not a IIS level but I think it is used to create the
authentication window in which put username and password). The problem is
that it doesn't accept username and password and, after three times, it
redirect me to a page telling "You don't have rights to see this page". What
could I do?
Thanks a lot
Lorenzo
Here's the code:
<%
Dim attivo
attivo = 0
SET UUEncode = Server.CreateObject( "Scripting.Dictionary" )
FOR i=0 TO 63
SELECT CASE i
CASE 0 offset = 65
CASE 26 offset = 71
CASE 52 offset = -4
END SELECT
UUEncode( CHR( i + offset) ) = i
NEXT
Function Decode ( TheString )
For byteGroup = 1 To Len( theString ) Step 4
numBytes = 3
groupBytes = 0
For CharCounter = 0 to 3
thisChar = Mid( theString, byteGroup + CharCounter, 1)
If thisChar = "=" Then
numBytes = numBytes - 1
thisByte = 0
Else
thisByte = UUEncode( thisChar )
End If
groupBytes = 64 * groupBytes + thisByte
Next
For k = 1 To numBytes
Select Case k
CASE 1: thisChar = groupBytes \ 65536
CASE 2: thisChar = (groupBytes And 65535) \ 256
CASE 3: thisChar = (groupBytes And 255)
End Select
Decode = Decode & Chr( thisChar )
Next
Next
End Function
auth = TRIM(Request.ServerVariables("HTTP_AUTHORIZATION"))
IF auth = "" THEN
Response.Status = "401 Not Authorized"
Response.AddHeader "WWW-Authenticate", "Basic realm=""localhost"""
Response.End
END IF
auth = TRIM( MID( auth, 6) )
auth = Decode( auth )
authSplit = SPLIT( auth, ":" )
username = authSplit( 0 )
password = authSplit( 1 )
Set objConn=Server.CreateObject("ADODB.Connection")
objConn.ConnectionString=CONNECTION
objConn.Open
sqlString = "SELECT username, password, codice_utente FROM " & user
&"a_dati_utente WHERE username ='" & username & "' AND password='" &
password & "'"
Set RS = Server.CreateObject("ADODB.Recordset")
RS.Open sqlString, objConn
IF RS.EOF THEN
Response.Status = "401 Not Authorized"
Response.AddHeader "WWW-Authenticate", "Basic realm=""localhost"""
RS.Close
Set RS = Nothing
objConn.Close
Set objConn = Nothing
Response.End
END IF
dim id_utente, id_periodico, id_numero, scaricato, codice_utente,
checkLogin, us, pwd
checkLogin = False
us = TRIM(RS("username"))
psw = TRIM(RS("password"))
if (username=us And password=psw) then
checkLogin = True
End If
If (checkLogin = False) Then
Response.Status = "401 Not Authorized" 'nessun record trovato
Response.AddHeader "WWW-Authenticate", "Basic realm=""localhost"""
RS.Close
Set RS = Nothing
objConn.Close
Set objConn = Nothing
Response.End
End If
codice_utente = rs("codice_utente")
RS.Close
Set RS = Nothing
objConn.Close
Set objConn = Nothing
%>
- Next message: Ray at <%=sLocation%> [MVP]: "Re: how do I reference to an acces dtabase out side my WWW folder?"
- Previous message: shank: "Re: creating a spreadsheet"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
