Hi every one,

I need to ask if i could prevent website surfers from showing any page untill he is authenticated from the first page???

i mean if default.asp is the default starting page and if the user hit www.domain.com/otherpage.asp he will not be able to view the page or will be redirected to the home page...

thanks for any help



Ahmed Ali
Software Developer

__________________
Ahmed Ali
Senior Software Developer

i got it fastly!!!!

i used this jscript at the top of the page and it did what i need

<script type="text/javascript" language="JavaScript1.2">
<!--
if (document.referrer.indexOf("DomainName") == -1)
window.location = "http://www.DomainName.com";
//-->
</script>

i am asking if there is a way using ASP?????
any one has a comment.



Ahmed Ali
Software Developer

Ahmed,
I have not used the method you have illustrated but it looks to me that this will only test what the previous page was.
It will not test that the user has been authenticated, logged on or any other code on default.asp has been executed.
If you wish the user to be logged on to your site I suggest using a session variable to when they successfully log on such as a logonID.
Then test that on your further asp pages.


======================================
They say, best men are moulded out of faults,
And, for the most, become much more the better
For being a little bad.
======================================

thanks rodmcleay,
i asking if using the client side code is secure enough than using ASP
as faster solution.

any comment.

Ahmed Ali
Software Developer

Using clientside code is terribly NOT secure. All a user needs to do is shut off JavaScript and the check will fail. Plus as Rod pointed out, you are only testing the referrer of the current page.

Again, Rod has the right suggestion: the easiest way is to test for a session variable status. Save your login state in the session, then test it on all the pages. You could create a function or an include file that does this test and redirects if it fails, and call the function or include the file on every page that needs to validate login state.

Peter
----------------------------------------
Work smarter, not harder.