Authentication with ASP.NET and more than one type of user

Question

4.00/5 (1 vote)

See more:

hi i m developing a website which have two kind of user login categories first called publisher and second called advertiser.publisher user login via <authentication> section.
<authentication> section does not allow 2 users authentication but i used request.querystring for advertiser user but now the problem is that i can't use user.identity.name
i have many pages links<a href="#"> in my website homepage.for going to other pages needs user ID along with href tag

plase tell me Is this way right or wrong
and what is the best solution

regard's

Posted 29-Dec-09 2:37am

creative77

Updated 3-Jan-10 9:32am

Christian Graus

v2

Add a Solution

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Unforgiv3n · Answer 1 · 2010-01-12T20:09:00

well the best solution according to my knowledge would be a database with a table for your users or 2 tables called publishers and advertisers

then uses a sql query to get a record from the database if the user logged in using the correct name and password

and if the password or user name is incorrect display a message.

then create a session variable for your user name and password and check it on every page. this eliminates the parameters in the URL using your links

example of the query

 Dim username 
 Dim password
 Dim nConn

 Password = Request.Form("txtNPassword")
 username = Request.Form("txtUsername")

 UserQuery = "Select * from table where columnname = '"+ username + "' and passwordcolumn = '"+ password + "'"

Set lRS = CreateObject("ADODB.RECORDSET")
 lRS.Open UserQuery, lConn

the last 2 lines creates the record set you can use for checking if there is a record selected
you just need to create a connection to the database first
if you checked that there is variables then you can create session variables using this

session("SUsername") = Request.Form("txtUsername")
session("SPassword") = Request.Form("txtPassword")