Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeArchived Discus...Archived Discus...Developing Under Previous Versions of .NETDeveloping Under Previous Versions of .NETASP.Net 2.0ASP.Net 2.0Login URLLogin URL
Previous
 
Next
New Post
7/28/2008 2:33 AM
 

Hi All,

      I have developed a module which has links and in the settings i have link type which has http post component. I will define the url in the following format

http://www.dnnsite.com/default.aspx?{Tag1}&{Tag2}={Tag3}&{Tag4} or whatever the format is specified. where tag1 to tag4 are the values which we give. I am able to redirect to another site with the values in the querystring posted(not visible in url) i have tried this for another site developed in php and i also had a successful login.

Now i need to login to the dnn site similarily. what is the url format i need to give for autologin of dnn. so that i will specify the format and give the username and password parameters like http://www.dnnsite.com/default.aspx?username=uname&password=pwd will be the url after retrieving the values. Can anybody please specify the format for dnn login. ITS REALLY URGENT

Thanks,

Sandeep.M

 

 
New Post
7/28/2008 9:33 AM
 

Hi Sandeep,

It is not very secure to pass user credentials via querystring, so I suspect you will find little assistance along this avenue.  While HTTPS will prevent interception of such a querystring value, the user's credentials would be stored on server logs, possibly in browser history, etc.  Although it's an easy way to allow cross-application authentication, it's not a good one.  Avoid it.

You did say that your querystring was "posted (not visible in url)" so it's possible that you meant that you POSTed hidden form values.  Querystring values are not part of the form post process.  If that's indeed what you meant, then you are perhaps on a better track. 

You might be able to construct a hodge-podge cross-application authentication system in this manner.  To get the necessary control IDs which you will post to, I'd load up a dev toolbar like the IE Developer Toolbar (or the Firefox equivelent) and visit my DNN login page.  Click on the input fields and retrieve the name values of the input fields, and use these as names in your posting application.  This just might work.

However, it will be a pretty brittle solution.  When skin or container is changed, the values of these names could change as well, breaking your application.  There is no guarantee that DNN will not modify the authentication control hierarchy, also resulting in an ID change.

If you are trying to coordinate authentication across two applications, as it appears that you are, I would suggest (if possible) taking a step back and thinking about a more robust solution.  In DNN, this would likely involve a hybrid membership provider and some webservice hooks for the foreign application to access.  Note that these are reasonably advanced developer tasks (perhaps 6 out of 10 on the difficulty meter?).

Hope this gets you started!

Brandon


Brandon Haynes
BrandonHaynes.org
 
New Post
7/28/2008 5:05 PM
 

Brandon Haynes wrote

If you are trying to coordinate authentication across two applications, as it appears that you are, I would suggest (if possible) taking a step back and thinking about a more robust solution.  In DNN, this would likely involve a hybrid membership provider and some webservice hooks for the foreign application to access.  Note that these are reasonably advanced developer tasks (perhaps 6 out of 10 on the difficulty meter?).

see:

Single Sign On



Michael Washington
http://ADefWebserver.com
www.ADefHelpDesk.com
A Free Open Source DotNetNuke Help Desk Module
 
Previous
 
Next
HomeHomeArchived Discus...Archived Discus...Developing Under Previous Versions of .NETDeveloping Under Previous Versions of .NETASP.Net 2.0ASP.Net 2.0Login URLLogin URL


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out