|
Home > Archive > Web Servers on Windows > July 2005 > Software to secure dynamic pages based on url strings
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Software to secure dynamic pages based on url strings
|
|
| tamas.lugosi@gmail.com 2005-07-05, 5:51 pm |
| I have a dynamic site which uses url strings to get the page content.
(www.mysite.com/index.asp?pageid=1 etc.)
I want to put password protection on specific pages, so user1 can see
index.asp?pageid=1 and user2 can only see index.asp?pageid=2.
I need to use a 3rd party software to enable this password protection.
I've tried IISProtect and a few others. The trouble is they can protect
single files / directories like the index.asp page but not
index.asp?pageid=2.
Is there software out there that can take into account the query string
and not be worried about the file structure?
| |
| terpatwork@hotmail.com 2005-07-18, 5:50 pm |
| why not pass things through method = post instead of method = get?
Then the user would not know that there exists pageid=1 or pageid=2 -
it's all invisible because you're not passing items along the query
string and they won't be able to modify whether they're pageid=1 or 2
because it's all in the back end
| |
|
| Thanks for the suggestion, unfortunately that will not solve my
problem.
I cannot build user authentication into the application itself, so I
need a 3rd party method of restricting access to certain pages. The GET
method using URL parameters is the only thing that differentiates one
page from another, so hiding them would only make life more difficult.
Most authentication software (IIS Protect, Authentix, etc) uses the
directory structure or specific file name to restrict user access. In
my case thats innapropriate as I have one file and one directory
structure.
I need an authentication software that can identify URL parameters as
well as files and directory structure.
|
|
|
|
|