You searched for the word(s): userid:666208

More Search Options

RSS Available

• Re: using membership but keep connection strings out of web.config ?

  Any ideas as to why I cant seem to get access to the property ? MembershipProvider memprov = Membership.Provider; PropertyInfo info = memprov.GetType().GetProperty( "_sqlConnection" ,BindingFlags.NonPublic | BindingFlags.Static | BindingFlags.Public);

  Posted to Security (Forum) by Lamentations on 7/25/2006

• Re: using membership but keep connection strings out of web.config ?

  THANK YOU! I hadnt even considered reflection. This sounds like a workable solution, ill give it a try.

  Posted to Security (Forum) by Lamentations on 7/24/2006

• error pages & google web bot

  Lets say you have a set or error pages and you wont want the various search engines crawling over them, which would cause code to get executed and emails get sent, how do you handle this ? Some solutions Ive thought of are: - move the error pages into a specific directory and use a robots.txt file - look at the request header to block anyting without a user agent and anything in a list of browsers you dont support. ideas ?

  Posted to Getting Started (Forum) by Lamentations on 7/24/2006

• Re: membership provider, requiresQuestionAndAnswer - password recovery fails

  I bypassed the recovery control, and used Membership.GetusernamebyEmail to get the username, then Memberhsip.getuser to return the MembershipUser object. If I have requiresQuestionAndAnswer="true" set in my web.config, can I not call MembershipUser.GetPassword on my member object , or do I have to use the version that takes an answer string ? What if some of the users that are registered, did so when we had questions & answers turned off ?

  Posted to Security (Forum) by Lamentations on 7/21/2006

• GetUserNameByEmail returns null, when there is a valid match

  Im calling Membership. GetUserNameByEmail and Im sure Im using the correct email address, becaus eI can see it right there in the table, yet this method returns null. What else should I check ?

  Posted to Security (Forum) by Lamentations on 7/21/2006

• membership provider, requiresQuestionAndAnswer - password recovery fails

  Using the passwordrecovery control and the default membership provider with sql server, lets say I initially set it up so that the security question is not required. Then a few weeks later, I change it to make it required. Why does the passwordrecovery fail for users that dont have a security question/answer ?

  Posted to Security (Forum) by Lamentations on 7/21/2006

• Re: If I write my own membership provider, is the connectionstring still required to be in web config ?

  Ok, it does seem that I need to write my own membership prvider if I want to load the connectionstring from somewhere other than the config file...am i wrong ?

  Posted to Security (Forum) by Lamentations on 7/21/2006

• ASP.net 2.0 and connectionstrings

  Ive been reading the Wrox press book on ASP.net 2.0 security and membership. I came across an area that mentioned that the <connectionStrings /> configuration section of your web.config file is the "intended" place to store connection strings. Ive also come to the conclusion that to use a membership provider, at least the default provider, you MUST have a connectionstring defined in either your web config or machine.config. This doesnt seem very flexible. Why not allow using a connection string

  Posted to Data Access and ObjectDataSource Control (Forum) by Lamentations on 7/21/2006

• If I write my own membership provider, is the connectionstring still required to be in web config ?

  After reading through most of this article http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnaspp/html/ASPNETProvMod_Intro.asp It seems that a <connectionstring> element is required. It also seems that the default SqlMembershipProvider will throw an exception if a connectionStringName attribute isnt defined or points to a nonexistent connection string. So how then would it be possible to store a connection string in a custom class, but feed this information to your provider

  Posted to Security (Forum) by Lamentations on 7/21/2006

• Re: using membership but keep connection strings out of web.config ?

  I also managed to aquire a copy of Shackow's excellent Wrox press book on membership mentioned here http://weblogs.asp.net/scottgu/archive/2006/06/19/ASP.NET-2.0-Security_2C00_-Membership-and-Roles-Tutorials.aspx Ive been going through it the last few days. Its going to be invaluable when I want to write my own provider to wrap a custom user store. For the time being however, I need to find a way to define and modify providers at runtime, to include changing their connection properties at runtime

  Posted to Security (Forum) by Lamentations on 7/21/2006