.NET Framework Security

Using ASP.NET Forms Authentication

In Chapter 13, Forms Authentication was introduced as a new feature of ASP.NET. Now that we have covered everything behind that sample, let's look at it again and “tweak” a few things this time. Starting with the web.config file for the FormAuth site, Listing 14.9 shows the complete web.config file.

Listing 14.9. web.config File for FormAuth Application

<?xml version="1.0" encoding="utf-8" ?> <configuration> <system.web> <authentication mode="Forms"> <forms name=".NETBOOKDEMO" loginUrl="login.aspx" protection="All" timeout="30" path="/" /> </authentication> <authorization> <deny users="?" /> </authorization> <globalization requestEncoding="utf-8" responseEncoding="utf-8" /> </system.web> </configuration> ...