.net2.0安全验证与用户管理

学习初期：

设计到的知识 ：

   一   登陆控件包括：Login,LoginView,PasswordRecovery,LoginStatus,LoginName,CreateUserWizard,ChangePassword一共7个控件。

控件里集成了MemberShip类

   二  MemberShip类

        管理用户的各种方法属性。

   三 配置文件

     

       < authentication mode = " Forms " >
         < forms name = " LoginPage "
               loginUrl = " Login.aspx "
               protection = " None "  
                timeout = " 30 "    
                cookieless = " UseDeviceProfile "  
          enableCrossAppRedirects = " false " />
       </ authentication >

<!-- 以上为声明网站的标单验证方式，指定登陆页面，session时间等属性 -->


       < authorization >
         < deny users = " ? " />
       </ authorization >

<!-- 以上声明为匿名用户不允许访问 -->

   < location path = " RegUser.aspx " >
     < system.web >
       < authorization >
         < allow users = " * " />
       </ authorization >
     </ system.web >
   </ location >

<!--- 以上声明设置单页面的访问权限为任何人都可访问 ->

       < membership defaultProvider = " SQLMemberShip " >
         < providers >
           < remove name = " AspNetSqlProvider " />
           < add name = " SQLMemberShip "  type = " System.Web.Security.SqlMembershipProvider "
               connectionStringName = " UserServer "
               minRequiredNonalphanumericCharacters = " 0 "
                />
         </ providers >
       </ membership >

<!-- 配置membership类默认的提供程序为SQLMemberShip,并指定提供程序的命名空间和连接字符串，连接字符串为以创建好的系统服务数据库，用于管理用户信息等，创建可以通过工具aspnet_regsql来向导完成 -->

 

      

< roleManager defaultProvider = " SqlProvider "  
  enabled = " true "
  cacheRolesInCookie = " true "
  cookieName = " .ASPROLES "
  cookieTimeout = " 30 "
  cookiePath = " / "
  cookieRequireSSL = " false "
  cookieSlidingExpiration = " true "
  cookieProtection = " Encryption " >

         < providers >
           < clear />
           < add
            name = " SqlProvider "
            type = " System.Web.Security.SqlRoleProvider "
            connectionStringName = " UserServer "
            applicationName = " MyApplication "   />
         </ providers >

       </ roleManager >

<!-- 设置Role角色的提供程序，以及设置相关属性 -->

 

Provider模式