{"id":174,"date":"2008-11-06T17:09:00","date_gmt":"2008-11-06T16:09:00","guid":{"rendered":"http:\/\/unckel.com\/blog\/?p=174"},"modified":"2019-12-07T22:29:51","modified_gmt":"2019-12-07T21:29:51","slug":"verzeichnisschutz-mit-asp-net-formsauthentication","status":"publish","type":"post","link":"https:\/\/unckel.de\/blog\/verzeichnisschutz-mit-asp-net-formsauthentication\/","title":{"rendered":"Verzeichnisschutz mit ASP.NET FormsAuthentication"},"content":{"rendered":"

Hier mal eine Copy’n’Paste-Vorlage: Auf alle Inhalte eines Verzeichnisses „CMS“ kann nur bei erfolgreicher Anmeldung zugegriffen werden. Benutzername und MD5-kodiertes Passwort werden in der web.config hinterlegt.<\/p>\n

root\/web.config<\/strong><\/p>\n

<?xml version=\"1.0\" encoding=\"utf-8\"?>\n<configuration>\n  <appSettings>\n    <add key=\"username\" value=\"admin\" \/>\n    <add key=\"password\" value=\"A13EE062EFF9D72...\" \/>\n  <\/appSettings>\n  <connectionStrings \/>\n  <system.web>\n    <compilation debug=\"true\" \/>\n    <authentication mode=\"Forms\">\n      <forms cookieless=\"UseUri\" defaultUrl=\"~\/CMS\/Default.aspx\"\n        loginUrl=\"~\/Login.aspx\">\n      <\/forms>\n    <\/authentication>\n  <\/system.web>\n  <location path=\"CMS\">\n    <system.web>\n      <authorization>\n        <deny users=\"?\" \/>\n      <\/authorization>\n    <\/system.web>\n  <\/location>\n<\/configuration><\/pre>\n
root\/Login.aspx<\/strong><\/p>\n
<%@ Page Language=\"C#\" AutoEventWireup=\"true\" \n  CodeFile=\"Login.aspx.cs\" Inherits=\"Login\" %>\n\n<!DOCTYPE html PUBLIC \"-\/\/W3C\/\/DTD XHTML 1.0 Transitional\/\/EN\" \n  \"http:\/\/www.w3.org\/TR\/xhtml1\/DTD\/xhtml1-transitional.dtd\">\n\n<html xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\">\n<head runat=\"server\">\n  <title>Login<\/title>\n<\/head>\n<body>\n  <form id=\"form1\" runat=\"server\">\n    Username:\n      <asp:Textbox id=\"TextboxUsername\" runat=\"server\" \/><br \/>\n    Password: \n      <asp:Textbox id=\"TextboxPassword\" runat=\"server\" \n      TextMode=\"Password\" \/><br \/>\n    <asp:Button id=\"ButtonLogin\" Text=\"Login\" \n      OnClick=\"ButtonLogin_OnClick\" runat=\"server\" \/><br \/>\n    <asp:Label id=\"LabelInfo\"  ForeColor=\"red\" runat=\"server\" \/>\n  <\/form>\n<\/body>\n<\/html><\/pre>\n
root\/Login.aspx.cs<\/strong><\/p>\n
using System;\nusing System.Configuration;\nusing System.Web.Security;\nusing System.Text;\nusing System.Security.Cryptography;\n\npublic partial class Login : System.Web.UI.Page\n{ \n  protected void Page_Load(object sender, EventArgs e) { } \n  \n  \/\/ Login \n  protected void ButtonLogin_OnClick(object sender, EventArgs e)\n  {\n    \/\/ Username und Passwort von der web.config holen\n    string username = ConfigurationManager.AppSettings[\"username\"];\n    string password = ConfigurationManager.AppSettings[\"password\"];\n\n    \/\/ Logincheck\n    if ((TextboxUsername.Text.Trim() == username) &&\n        (GetMd5Hash(TextboxPassword.Text.Trim()) == password))\n    {\n      FormsAuthentication.RedirectFromLoginPage(TextboxUsername.Text.Trim(), false); \n    }\n    else\n    {\n      LabelInfo.Text = \"Ung\u00fcltige Anmeldung.\";\n    }\n  }\n\n  \/\/ MD5-Hash erzeugen zum Vergleich mit dem codierten Passwort\n  private static string GetMd5Hash(string input)\n  {\n    MD5 md5Hasher = MD5.Create();\n    byte[] data = md5Hasher.ComputeHash(Encoding.Default.GetBytes(input));\n    StringBuilder sBuilder = new StringBuilder();\n    for (int i = 0; i < data.Length; i++)\n      sBuilder.Append(data[i].ToString(\"x2\"));\n\n    return sBuilder.ToString().ToUpper();\n  }\n}<\/pre>\n
root\/CMS\/Default.aspx<\/strong><\/p>\n
<%@ Page Language=\"C#\" AutoEventWireup=\"true\" \n  CodeFile=\"Default.aspx.cs\" Inherits=\"CMS_Default\" %>\n\n<!DOCTYPE html PUBLIC \"-\/\/W3C\/\/DTD XHTML 1.0 Transitional\/\/EN\" \n  \"http:\/\/www.w3.org\/TR\/xhtml1\/DTD\/xhtml1-transitional.dtd\">\n\n<html xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\">\n<head runat=\"server\">\n  <title>Gesch\u00fctzte Seite<\/title>\n<\/head>\n<body>\n  <form id=\"form1\" runat=\"server\">\n  <asp:LoginName ID=\"LoginName1\" runat=\"server\" FormatString =\"Hallo {0}\" \/>\n  <asp:Button ID=\"Button1\" runat=\"server\" \n    Text=\"Logout\" OnClick=\"Button1_Click\" \/>\n  <\/form>\n<\/body>\n<\/html><\/pre>\n
root\/CMS\/Default.aspx.cs<\/strong><\/p>\n
using System;\nusing System.Web.Security;\n\npublic partial class CMS_Default : System.Web.UI.Page\n{ \n  protected void Page_Load(object sender, EventArgs e) { }\n\n  \/\/ Logout protected void Button1_Click(object sender, EventArgs e)\n  {\n    FormsAuthentication.SignOut();\n    Response.Redirect(\"~\/Login.aspx\");\n  }\n}<\/pre>\n
Quellen:
\n.Net-Snippets.de: Erstellt einen md5-Hash aus einem string<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
Hier mal eine Copy’n’Paste-Vorlage: Auf alle Inhalte eines Verzeichnisses „CMS“ kann nur bei erfolgreicher Anmeldung zugegriffen werden. Benutzername und MD5-kodiertes Passwort werden in der web.config hinterlegt. root\/web.config <?xml version=“1.0″ encoding=“utf-8″?> <configuration> <appSettings> <add key=“username“ value=“admin“ \/> <add key=“password“ value=“A13EE062EFF9D72…“ \/> <\/appSettings> <connectionStrings \/> <system.web> <compilation debug=“true“ \/> <authentication mode=“Forms“> <forms cookieless=“UseUri“ defaultUrl=“~\/CMS\/Default.aspx“ loginUrl=“~\/Login.aspx“> <\/forms> <\/authentication> […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[71],"tags":[],"class_list":["post-174","post","type-post","status-publish","format-standard","hentry","category-webdesign"],"_links":{"self":[{"href":"https:\/\/unckel.de\/blog\/wp-json\/wp\/v2\/posts\/174","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/unckel.de\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/unckel.de\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/unckel.de\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/unckel.de\/blog\/wp-json\/wp\/v2\/comments?post=174"}],"version-history":[{"count":1,"href":"https:\/\/unckel.de\/blog\/wp-json\/wp\/v2\/posts\/174\/revisions"}],"predecessor-version":[{"id":839,"href":"https:\/\/unckel.de\/blog\/wp-json\/wp\/v2\/posts\/174\/revisions\/839"}],"wp:attachment":[{"href":"https:\/\/unckel.de\/blog\/wp-json\/wp\/v2\/media?parent=174"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/unckel.de\/blog\/wp-json\/wp\/v2\/categories?post=174"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/unckel.de\/blog\/wp-json\/wp\/v2\/tags?post=174"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}