asp.net "Remember Me" cookie -

-

I have applied while I remember using this option in my asp.net webform, 

  protected void LBtnSubmit_Click (object sender, EventArgs e) {if (this.ChkRememberme = null & amp ;! & amp; this.ChkRememberme.Checked == true) {HttpCookie cookie = new HttpCookie (TxtUserName.Text, TxtPassword .Text); Cookie.Expires.AddYears (1); Response.Cookies.Add (cookie); }}

Am I doing this correctly? Any suggestions .. I am using windows authentication and i asp.net not using subscription I ..

but directly, username and storing passwords cookie hash of the username and password and cookie from a salt store, then when you authenticate cookies, the user name, Make a hash with password retrieved password and same salt for re Compare all of them.

Creating a hash is simple as computing, converting passwords and salt values ​​together into one string, converting a byte array string. When using byte array of hash (MD5 or whatever you prefer) and convert the hash result of a string (probably base through 64 encoding)

Here is some example code: 

  // Create a hash of given passwords and salt. Get a byte array with public string CreateHash (string password, string salt) {// Combined password + salt string authDetails = password + salt; Byte [] authBytes = System.Text.Encoding.ASCII.GetBytes (authDetails); Use the MD5 to calculate the hash of the // byte array, and return the hash as a // base 64-encoded string. Var md5 = new system Security. Cryptography MD5 Crypto Service Provider (); Byte [] hashedBytes = md5.ComputeHash (authBytes); String hash = convert.ToBase64String (hashedBytes); Return hash; } // Check to see if the given password and salt hash are for the same value / as the given hash is public bool isMatchingHash (string password, string salt, string hash) {// given Repeat the hash from the athlete details and compare it with the hash provided by the cook. Create Return (Password, Salt) == Hash; } // Create an authentication cookie that stores a hash / / and salt of usernames and passwords. Set on a hash of public HttpCookie CreateAuthCookie (string username, string password, create a string salt) {// cookie and its value username and // password and salt. Use a pipe character as a delimiter so that we can separate these two elements later. HTTP cookie cookie = new HTTPQQ ("YourSiteCookieNameHere"); Cookie.value = Username + "|" + Happiness (password, salt); Return Cookie; } // Determine whether the given authentication cookie // should remove usernames, retrieve saved passwords, re-combine its hash, and compare the hash to see if they match. If they match, then this authentication cookie is valid. Public Bowl IsValidAuthCookie (Http Cookie Cookie, String Salt) {// Split Cookie Price by Pipe Limiter String [] Price = Cookie. Value Split ('|'); If (values.Length! = 2) false return; // Recover usernames and hash from split values String user name = value [0]; String hash = value [1]; // You must provide your GetPasswordForUser function String Password = GetPasswordForUser (username); // Check the password and salt against the hash. Returns Ischeckinghash (password, salt, hash); }

Comments

Post a Comment

Popular posts from this blog

c# - sqlDecimal to decimal clr stored procedure Unable to cast object of type 'System.Data.SqlTypes.SqlDecimal' to type 'System.IConvertible' -

-
I'm new to this I'm writing a clr. stored procedure that can be used to get values ​​used in a calculation Call for another stored procedure for Gives an archived methodology int (I think SqlInt32? Value of the table's value is int) which is then necessary to convert to decimal. Here I have the code: Public static integral mood (SQL MDMMYLUE, escalistering AMY type, out of SQLDCM Result) {aResult = 0; Try {SqlConnection conn = New SqlConnection ("Reference Connection = True"); SqlCommand cmd = New SqlCommand ("sp_GetType", conn); Cmd.Parameters.AddWithValue ("@ myValueType", aMyValueType); Cmd.CommandType = CommandType.StoredProcedure; Conn.Open (); Object type = CMD. Exclamation Asser (); Conn.Close (); Decimal type FORCalculation = Convert. ToDecimal (type); Decimal value = convert toDecimal (aMyValue); // ** calculation calc = new calculation (); Decimal result = calorie.docalulation (typefarculation, value); I get an exception...
Read more

Calling GetGUIThreadInfo from Outlook VBA -

-
I need to find the active window'm writing a VBA macro in MS Outlook, which is a specific process. The goal of this is to get the active window / document name even if its original application has more than one document interface. User processor with GetCurrentThreadId is active, I am using GetGUIThreadInfo to get .dll. Here is the correct code: private type RECT as as Left LongPtr top LongPtr right LongPtr down LongPtr termination of private type GUITHREADINFO cbSize as LongPtr flags LongPtr hwndActive LongPtr hwndFocus LongPtr hwndCapture LongPtr as as as as as reset as LongPtr rcCaret as LongPtr hwndCreate as LongPtr hwndMoveSize as HwndMenuOwner end of Private Equity PtrSafe function GetWindowThreadProcessId Lib "user32" (_BVV hnw LongPtr as LongPtr Nig Mr. announced as PtrSafe function GetGUIThreadInfo Lib "user32" _ (ByVal dwthreadid as LongPtr, _ lpguithreadinfo as GUITHREADINFO) LongPtr Sub MyFunction () as dim strWindowTitle string = space as s...
Read more

Obfuscating Python code? -

-
I'm looking for a way to hide my Python source code. print "Hello World!" How can I encode this example so that it is not human-readable? I have been asked to use Base 64 but I'm not sure how. itemprop = "text"> It is limited only, first level ambiguous resolution, but has built-in: byte-code in Python Is a compiler for: dragon-o-m py_compile & lt; Your program.py & gt; creates a .pyo file with a byte-code, and where the docstrings are removed, etc. You can rename .pyo with the .py extension, and python & lt; Your program.py & gt; runs as your program, but it does not have your source code. PS : If your program blur modules like this, you need to rename them with the .pyc suffix (I Not sure it will not break a day), or you can work with .pyo and run them with python -o ... .pyo ( Import should work). This will allow dragon to search your modules (otherwise, Python looks for the .py module).
Read more