Tela de login não barra usuarios não autenticados.
João Teixeira
Respostas
João Teixeira
06/10/2009
<add name="nomeConnectionString" connectionString="Server=endereco.com.br;User id=useradmin;Password=123456;Persist Security Info=True;Database=dbteste;Allow User Variables=True"
providerName="MySql.Data.MySqlClient" />
</connectionStrings>
<location path="logo.gif">
<appSettings/>
<system.web>
<authentication mode="Forms">
<forms name=".SecureWeb" loginUrl="login.aspx"/>
</authentication>
<authorization>
<deny users="?"/>
</authorization>
Fabio Mans
06/10/2009
<system.web>
<authorization>
<allow users="*" />
</authorization>
</system.web>
</location> E o que você fez está correto. <authorization>
<deny users="?"/>
</authorization> Negando acesso para todos que não estão logado. Posta o seu Web.Config completo. Fabio
João Teixeira
06/10/2009
<!--
Note: As an alternative to hand editing this file you can use the
web admin tool to configure settings for your application. Use
the Website->Asp.Net Configuration option in Visual Studio.
A full list of settings and comments can be found in
machine.config.comments usually located in
\Windows\Microsoft.Net\Framework\v2.x\Config
-->
<configuration>
<configSections>
<sectionGroup name="system.web.extensions" type="System.Web.Configuration.SystemWebExtensionsSectionGroup, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35">
<sectionGroup name="scripting" type="System.Web.Configuration.ScriptingSectionGroup, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35">
<section name="scriptResourceHandler" type="System.Web.Configuration.ScriptingScriptResourceHandlerSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="MachineToApplication"/>
<sectionGroup name="webServices" type="System.Web.Configuration.ScriptingWebServicesSectionGroup, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35">
<section name="jsonSerialization" type="System.Web.Configuration.ScriptingJsonSerializationSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="Everywhere"/>
<section name="profileService" type="System.Web.Configuration.ScriptingProfileServiceSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="MachineToApplication"/>
<section name="authenticationService" type="System.Web.Configuration.ScriptingAuthenticationServiceSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="MachineToApplication"/>
<section name="roleService" type="System.Web.Configuration.ScriptingRoleServiceSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="MachineToApplication"/>
</sectionGroup>
</sectionGroup>
</sectionGroup>
</configSections>
<appSettings/>
<connectionStrings>
<add name="antectreinamentoConnectionString" connectionString="server=127.0.0.1;user id=root;database=antectreinamento;Allow User Variables=True" providerName="MySql.Data.MySqlClient"/>
<add name="antectreinamentoConnectionString2" connectionString="server=127.0.0.1;user id=root;database=antectreinamento" providerName="MySql.Data.MySqlClient"/>
</connectionStrings>
<location path="logo.gif">
<system.web>
<!--
Set compilation debug="true" to insert debugging
symbols into the compiled page. Because this
affects performance, set this value to true only
during development.
-->
<compilation debug="false">
<assemblies>
<add assembly="System.Core, Version=3.5.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089"/>
<add assembly="System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"/>
<add assembly="System.Data.DataSetExtensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089"/>
<add assembly="System.Xml.Linq, Version=3.5.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089"/>
<add assembly="MySql.Data, Version=6.1.2.0, Culture=neutral, PublicKeyToken=C5687FC88969C44D"/>
</assemblies>
</compilation>
<!--
The <authentication> section enables configuration
of the security authentication mode used by
ASP.NET to identify an incoming user.
-->
<customErrors mode="Off"/>
<authentication mode="Forms">
<forms name="SecureWeb" loginUrl="login.aspx"/>
</authentication>
<authorization>
<deny users="?"/>
</authorization>
<!--
The <customErrors> section enables configuration
of what to do if/when an unhandled error occurs
during the execution of a request. Specifically,
it enables developers to configure html error pages
to be displayed in place of a error stack trace. <customErrors mode="RemoteOnly" defaultRedirect="GenericErrorPage.htm">
<error statusCode="403" redirect="NoAccess.htm" />
<error statusCode="404" redirect="FileNotFound.htm" />
</customErrors>
-->
<pages>
<controls>
<add tagPrefix="asp" namespace="System.Web.UI" assembly="System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"/>
<add tagPrefix="asp" namespace="System.Web.UI.WebControls" assembly="System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"/>
</controls>
</pages>
<httpHandlers>
<remove verb="*" path="*.asmx"/>
<add verb="*" path="*.asmx" validate="false" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"/>
<add verb="*" path="*_AppService.axd" validate="false" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"/>
<add verb="GET,HEAD" path="ScriptResource.axd" type="System.Web.Handlers.ScriptResourceHandler, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" validate="false"/>
</httpHandlers>
<httpModules>
<add name="ScriptModule" type="System.Web.Handlers.ScriptModule, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"/>
</httpModules>
</system.web>
</location>
<system.codedom>
<compilers>
<compiler language="c#;cs;csharp" extension=".cs" warningLevel="4" type="Microsoft.CSharp.CSharpCodeProvider, System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089">
<providerOption name="CompilerVersion" value="v3.5"/>
<providerOption name="WarnAsError" value="false"/>
</compiler>
<compiler language="vb;vbs;visualbasic;vbscript" extension=".vb" warningLevel="4" type="Microsoft.VisualBasic.VBCodeProvider, System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089">
<providerOption name="CompilerVersion" value="v3.5"/>
<providerOption name="OptionInfer" value="true"/>
<providerOption name="WarnAsError" value="false"/>
</compiler>
</compilers>
</system.codedom>
<!--
The system.webServer section is required for running ASP.NET AJAX under Internet
Information Services 7.0. It is not necessary for previous version of IIS.
-->
<system.webServer>
<validation validateIntegratedModeConfiguration="false"/>
<modules>
<remove name="ScriptModule"/>
<add name="ScriptModule" preCondition="managedHandler" type="System.Web.Handlers.ScriptModule, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"/>
</modules>
<handlers>
<remove name="WebServiceHandlerFactory-Integrated"/>
<remove name="ScriptHandlerFactory"/>
<remove name="ScriptHandlerFactoryAppServices"/>
<remove name="ScriptResource"/>
<add name="ScriptHandlerFactory" verb="*" path="*.asmx" preCondition="integratedMode" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"/>
<add name="ScriptHandlerFactoryAppServices" verb="*" path="*_AppService.axd" preCondition="integratedMode" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"/>
<add name="ScriptResource" preCondition="integratedMode" verb="GET,HEAD" path="ScriptResource.axd" type="System.Web.Handlers.ScriptResourceHandler, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"/>
</handlers>
</system.webServer>
<runtime>
<assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
<dependentAssembly>
<assemblyIdentity name="System.Web.Extensions" publicKeyToken="31bf3856ad364e35"/>
<bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="3.5.0.0"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="System.Web.Extensions.Design" publicKeyToken="31bf3856ad364e35"/>
<bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="3.5.0.0"/>
</dependentAssembly>
</assemblyBinding>
</runtime>
<system.web>
<compilation>
<assemblies>
<add assembly="MySql.Data, Version=6.1.2.0, Culture=neutral, PublicKeyToken=C5687FC88969C44D"/></assemblies></compilation></system.web></configuration>
Fabio Mans
06/10/2009
João Teixeira
06/10/2009
João Teixeira
06/10/2009
Fabio Mans
06/10/2009
Fabio Mans
06/10/2009
<location path="Images">
<system.web>
<authorization>
<allow users="*" />
</authorization>
</system.web>
</location> Com esta restrição todo o seu site vai continuar bloqueado exceto a pasta Images. Fabio
João Teixeira
06/10/2009
Fabio Mans
06/10/2009
João Teixeira
06/10/2009
Fabio Mans
06/10/2009
João Teixeira
06/10/2009
João Teixeira
06/10/2009
FROM usuarios
WHERE (usuario_nome = @nome) AND (usuario_senha = @senha) (Eu testo esta query colocando um usuario no @nome e uma senha no @senha, e como preview aparece a linha deste usuario com o id, nome e senha. Entendo que a query está correta.) Depois eu criei um objectdatasource no webform de login associando os parametros @nome e @senha aos textbox do formulario. Aí criei um botao "entrar" para fazer a comparação. No evento click eu coloquei dessa forma: mas está dando errado, eu coloco o nome e senha e continua na mesma pagina. O comando está errado? como eu ajusto ele? public partial class login : System.Web.UI.Page
{
protected void Page_Load(object sender, EventArgs e)
{ }
protected void CmdLogin_Click(object sender, EventArgs e)
{
if (txtLogin.Text == this.ObjectDataSource1.Select() && txtSenha.Text == this.ObjectDataSource1.Select())
{
FormsAuthentication.RedirectFromLoginPage(txtLogin.Text, chkLembrar.Checked);
}
}
}
Fabio Mans
06/10/2009
txtLogin.Text == this.ObjectDataSource1.Select() && txtSenha.Text == this.ObjectDataSource1.Select()
João Teixeira
06/10/2009
FROM usuarios
WHERE (usuario_nome = @nome) AND (usuario_senha = @senha) ... eu não entendi o que vc sugeriu usar ao invés do objectdatasource.... retornar um objeto? como eu faria isso? não entendi.
Fabio Mans
06/10/2009
txtLogin.Text == this.ObjectDataSource1.Select() - Não é igual, qual o contepudo de Select()??
&& txtSenha.Text == this.ObjectDataSource1.Select() - Não é igual
Não sendo igual nenhum dos dois não está autenticando.
João Teixeira
06/10/2009
Fabio Mans
06/10/2009
João Teixeira
06/10/2009
João Teixeira
06/10/2009
Fabio Mans
06/10/2009
João Teixeira
06/10/2009
{
protected void Page_Load(object sender, EventArgs e)
{ }
protected void CmdLogin_Click(object sender, EventArgs e)
{
if (txtLogin.Text == DataRow[0]["usuario_nome"].ToString() && txtSenha.Text == DataRow[0]["usuario_senha"].ToString()) {
FormsAuthentication.RedirectFromLoginPage(txtLogin.Text, chkLembrar.Checked);
}
}
}
Fabio Mans
06/10/2009
{
txtNome.Text = ds.Tables["dados"].Rows[0][0].ToString();
DateTime Nasc = Convert.ToDateTime(ds.Tables["dados"].Rows[0][1].ToString());
txtNascimento.Text = Nasc.ToString("dd/MM/yyyy");
txtNacionalidade.Text = ds.Tables["dados"].Rows[0][2].ToString();
drpEstadoCivil.SelectedValue = ds.Tables["dados"].Rows[0][3].ToString();
}
João Teixeira
06/10/2009
using System.Collections.Generic;
using System.Web;
using System.Security.Authentication;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.Security;
using System.Data;
using System.Collections; protected void CmdLogin_Click(object sender, EventArgs e)
{ string nome = usuarios.Row[0]["usuario_nome"].ToString();
string senha = usuarios.Row[0]["usuario_senha"].ToString();
if (txtLogin.Text == nome && txtSenha.Text == senha)
{
FormsAuthentication.RedirectFromLoginPage(txtLogin.Text, chkLembrar.Checked);
} }
Fabio Mans
06/10/2009
João Teixeira
06/10/2009
Fabio Mans
06/10/2009
João Teixeira
06/10/2009
FROM usuarios
WHERE (usuario_nome = @nome) AND (usuario_senha = @senha) Assim, os valores que forem digitados nos textboxs, serao comparados com os do datatable. se essa comparação for verdadeira, ele entra no formulario, senao, continua na tela de login. É o que estou tentando fazer.
Fabio Mans
06/10/2009
Fabio Mans
06/10/2009
João Teixeira
06/10/2009
FROM usuarios
WHERE (usuario_nome = @nome) AND (usuario_senha = @senha) Na verdade eu só preciso comparar o texto digitado para login e senha com o usuario_nome e usuario_senha... só isso... e eu não consigo fazer isso... se a query estiver errada, pode corrigir... não quero nada rebuscado, apenas compara o que o usuario digitou com o que está no banco de dados usuarios... como eu faço este código para gerar a datatable?
Fabio Mans
06/10/2009
João Teixeira
06/10/2009
Fabio Mans
06/10/2009
public DataSet ObterUsuario(string nome, string senha)
{
DataSet ds = new DataSet("eventos");
using (SqlConnection cn = new SqlConnection(ConfigurationManager.ConnectionStrings["cnnString"].ConnectionString))
{
string sql = "SELECT usuario_id, usuario_nome, usuario_senha FROM usuarios WHERE (usuario_nome = @nome) AND (usuario_senha = @senha)";
using (SqlCommand cmd = new SqlCommand(sql, cn))
{
cmd.CommandType = CommandType.Text;
cmd.Parameters.AddWithValue("@nome", nome);
cmd.Parameters.AddWithValue("senha", senha);
SqlDataAdapter da = new SqlDataAdapter(cmd);
da.Fill(ds);
}
}
return ds;
}
João Teixeira
06/10/2009
Fabio Mans
06/10/2009
Fabio
Fabio Mans
06/10/2009
João Teixeira
06/10/2009
Fabio Mans
06/10/2009
João Teixeira
06/10/2009
Detalhes da Exceção: MySql.Data.MySqlClient.MySqlException: SELECT command denied to user 'antectreinamento'@'201.51.121.39' for table 'proc'
Erro de Origem:
Linha 21: com.Parameters.AddWithValue("@UserID", DbType.String).Value = UserID; Linha 22: conect.Open(); Linha 23: MySqlDataReader dr = com.ExecuteReader(); Linha 24: User _user = null; Linha 25: while (dr.Read())
Arquivo de Origem: c:\Documents and Settings\joão luiz\Meus documentos\Visual Studio 2008\Projects\antectreinamento\App_Code\DBOOperations.cs Linha: 23
Rastreamento de Pilha:
[MySqlException (0x80004005): SELECT command denied to user 'antectreinamento'@'201.51.121.39' for table 'proc'] MySql.Data.MySqlClient.MySqlStream.ReadPacket() +216 MySql.Data.MySqlClient.NativeDriver.ReadResult() +91 MySql.Data.MySqlClient.ResultSet.NextResult() +427 MySql.Data.MySqlClient.MySqlDataReader.NextResult() +400 MySql.Data.MySqlClient.MySqlCommand.ExecuteReader(CommandBehavior behavior) +998 MySql.Data.MySqlClient.MySqlCommand.ExecuteReader() +6 MySql.Data.MySqlClient.SchemaProvider.GetProcedures(String[] restrictions) +1934 MySql.Data.MySqlClient.ISSchemaProvider.GetProcedures(String[] restrictions) +38 MySql.Data.MySqlClient.ISSchemaProvider.GetSchemaInternal(String collection, String[] restrictions) +165 MySql.Data.MySqlClient.SchemaProvider.GetSchema(String collection, String[] restrictions) +83 MySql.Data.MySqlClient.MySqlConnection.GetSchema(String collectionName, String[] restrictionValues) +55 MySql.Data.MySqlClient.ProcedureCache.GetProcData(MySqlConnection connection, String spName) +202 MySql.Data.MySqlClient.ProcedureCache.AddNew(MySqlConnection connection, String spName) +44 MySql.Data.MySqlClient.ProcedureCache.GetProcedure(MySqlConnection conn, String spName) +186 MySql.Data.MySqlClient.StoredProcedure.GetParameters(String procName) +77 MySql.Data.MySqlClient.StoredProcedure.Resolve(Boolean preparing) +191 MySql.Data.MySqlClient.MySqlCommand.ExecuteReader(CommandBehavior behavior) +549 MySql.Data.MySqlClient.MySqlCommand.ExecuteReader() +6 DBOOperations.CheckUser(String UserID) in c:\Documents and Settings\joão luiz\Meus documentos\Visual Studio 2008\Projects\antectreinamento\App_Code\DBOOperations.cs:23 login.CmdLogin_Click(Object sender, EventArgs e) in c:\Documents and Settings\joão luiz\Meus documentos\Visual Studio 2008\Projects\antectreinamento\login.aspx.cs:21 System.Web.UI.WebControls.Button.OnClick(EventArgs e) +111 System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument) +110 System.Web.UI.WebControls.Button.System.Web.UI.IPostBackEventHandler.RaisePostBackEvent(String eventArgument) +10 System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument) +13 System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData) +36 System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +1565
Informações sobre a Versão: Microsoft .NET Framework Versão:2.0.50727.3082; Versão do ASP.NET:2.0.50727.3082
Fabio Mans
06/10/2009
João Teixeira
06/10/2009
João Teixeira
06/10/2009
(
@UserID VARCHAR(50)
)
BEGIN AS
SELECT usuario_senha
FROM usuarios
WHERE usuario_nome = @UserID END
Fabio Mans
06/10/2009
João Teixeira
06/10/2009
Fabio Mans
06/10/2009
João Teixeira
06/10/2009
Detalhes da Exceção: MySql.Data.MySqlClient.MySqlException: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'CheckUser' at line 1
Erro de Origem:
Linha 21: com.Parameters.AddWithValue("UserID", DbType.String).Value = Userid; Linha 22: conect.Open(); Linha 23: MySqlDataReader dr = com.ExecuteReader(); Linha 24: User _user = null; Linha 25: while (dr.Read())
Arquivo de Origem: c:\Documents and Settings\joão luiz\Meus documentos\Visual Studio 2008\Projects\antectreinamento\App_Code\DBOOperations.cs Linha: 23
Rastreamento de Pilha:
[MySqlException (0x80004005): You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'CheckUser' at line 1] MySql.Data.MySqlClient.MySqlStream.ReadPacket() +216 MySql.Data.MySqlClient.NativeDriver.ReadResult() +91 MySql.Data.MySqlClient.ResultSet.NextResult() +427 MySql.Data.MySqlClient.MySqlDataReader.NextResult() +400 MySql.Data.MySqlClient.MySqlCommand.ExecuteReader(CommandBehavior behavior) +998 MySql.Data.MySqlClient.MySqlCommand.ExecuteReader() +6 DBOOperations.CheckUser(String Userid) in c:\Documents and Settings\joão luiz\Meus documentos\Visual Studio 2008\Projects\antectreinamento\App_Code\DBOOperations.cs:23 login.CmdLogin_Click(Object sender, EventArgs e) in c:\Documents and Settings\joão luiz\Meus documentos\Visual Studio 2008\Projects\antectreinamento\login.aspx.cs:21 System.Web.UI.WebControls.Button.OnClick(EventArgs e) +111 System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument) +110 System.Web.UI.WebControls.Button.System.Web.UI.IPostBackEventHandler.RaisePostBackEvent(String eventArgument) +10 System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument) +13 System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData) +36 System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +1565
Informações sobre a Versão: Microsoft .NET Framework Versão:2.0.50727.3082; Versão do ASP.NET:2.0.50727.3082
Fabio Mans
06/10/2009
João Teixeira
06/10/2009
Fabio Mans
06/10/2009
João Teixeira
06/10/2009
{
using (MySqlConnection conect = new MySqlConnection(ConfigurationManager.ConnectionStrings["antectreinamentoConnectionString"].ConnectionString))
{
using (MySqlCommand com = new MySqlCommand("SELECT usuario_senha FROM usuarios WHERE usuario_nome = '" + Userid + "'", conect))
{
com.CommandType = CommandType.Text;
conect.Open();
MySqlDataReader dr = com.ExecuteReader();
User _user = null;
if (dr.HasRows)
{
if (dr.Read())
_user = new User();
_user.Senha = dr.GetString("usuario_senha");
} return _user; }
}
}
Fabio Mans
06/10/2009
João Teixeira
06/10/2009