用户在注册后无法从他的系统登录 [英] User not able to login from his system after got register

查看:63
本文介绍了用户在注册后无法从他的系统登录的处理方法,对大家解决问题具有一定的参考价值,需要的朋友们下面随着小编来一起学习吧!

问题描述

在我在asp.net中托管的网站c#



In my hosted web-site in asp.net c#

 my users are able to register but the problem is when they try to login after register they 
can't able to login, means data can not be retrived. may be the reason is that they are access the 
basedata from a device or system at other location and different one.

In web.config file i do write a mechine key.





请帮助



我尝试过:



在web.config文件中我做了写一个机器代码。



当我通过我的系统登录时,我可以举个例子,我可以登录系统。但是当我从我的手机登录时我无法登录,它给出了密码错误信息。(我在验证控件中给出了)。



please help

What I have tried:

In web.config file i do write a mechine code.

I maens let a take example when i login through my system I can log in to the system. but when i login from my mobile i can't able to login, it gives a password is wrong message.(which i gave in validation control).

推荐答案

For首先,永远不要这样做。

以明文形式存储密码是一个非常非常糟糕的主意:代码犯罪 [ ^ ]其实。

看看这里:密码存储:如何操作。 [ ^ ]它解释了为什么以及如何处理它。

最好的方法不是酿造你自己的,而是使用会员资格:会员资格介绍 [ ^ ]它为您处理所有内容,并提供额外的安全性,如果未经授权的人试图访问安全页面,系统本身将拒绝他们的权限并将其发送到登录页面。 />


如果您必须继续使用您的版本,请按照提示中的说明操作并散列您的密码 - 并使用调试程序跟踪您的代码并确切地确定继续我们不能为您做到这一点,因为它或多或少地依赖于您的数据库及其拥有的数据,而且我们无法访问它,因此我们无法在相同条件下运行它,或者看到返回的是什么。
For starters, never do that.
Storing passwords in clear text is a very, very bad idea: A Code Crime[^] in fact.
Have a look here: Password Storage: How to do it.[^] and it explains why, and what to do about it.
The best way is not to "brew your own" but to use Membership: Introduction to Membership[^] it handles it all for you, and provides extra security in that if an unauthorised person tries to access "secure" pages the system itself will refuse them permission and send them to the login page.

If you must continue with your version, then follow the instructions in the tip, and hash your passwords - and use the debugger to follow your code through and work out exactly what is going on. We can't do that for you because it is dependant to a greater or lesser extent on your DB and the data it holds, and we don't have access to that so we can't run it under the same conditions, or see what is being returned.


这篇关于用户在注册后无法从他的系统登录的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!

查看全文
登录 关闭
扫码关注1秒登录
发送“验证码”获取 | 15天全站免登陆