Protect an ASPX page.

Protect a single aspx page or several aspx pages with a user login. Just add a Script to any aspx page you want to protect. Works with an Access Database. You can have one or multiple users.

DEMO protected.aspx
user = admin
pw = admin

Example Files:

admin.zip (d/l example files and database)

Database Connection (change path to your database location)
admindbconn.aspx

End Function

'Database connection
    Sub DataBase_Connect(strSQL)
    
        objConnection = New OledbConnection(strConnection)
        objConnection.Open()
        objCommand = New OledbCommand(strSQL, objConnection)
        objDataReader  = objCommand.ExecuteReader()
    
    End Sub
    
    'Database disconnect
    Sub DataBase_Disconnect()
    
        objDataReader.Close()
        objConnection.Close()
    
    End Sub
    
    'Check if user has started a session
    Function Check_User()
   
	if session("userid") = "" then
    	  Server.Transfer("adminlogin.aspx")
    	end if
    
    End function

Private strDBLocation = DB_Path()
    Private strConnection as string = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & strDBLocation
    Private objConnection
    Private objCommand
    Private objDataReader as OledbDataReader

</script>

Admin Login Page
adminlogin.aspx

<%@ Page Language="VB" Debug="True" %>
<%@ import Namespace="System.Data.Oledb" %>

'When button is click check login and password with database users table
   'If login and password is correct starts a user session

Sub btnlogin_Click(Sender as Object, e as EventArgs)

'Declared Login fields variables
        Dim strUname as string
        Dim strPass as string
        Dim strSQLQuery as string
        Dim CheckUname as string
        Dim Checkpass as string

CheckUname = uname.Text
        Checkpass = password.Text
                
        'Display the login error message
        lblinvalid.text = "Your username and / or password were incorrect. Please try again."

'Database SQL query
        strSQLQuery = "SELECT * FROM users"
        DataBase_Connect(strSQLQuery)

Do while (objDataReader.Read())

strUname=objDataReader("uname")
            strPass=objDataReader("password")

if CheckUname = "" And Checkpass = "" Then
                lblinvalid.text = "You must enter a username and password. Please try again."
                lblinvalid.Visible = True
            elseif CheckUname = "" Then
                lblinvalid.text = "You must enter a user name. Please try again."
                lblinvalid.Visible = True
            elseif Checkpass = "" Then
                lblinvalid.text = "You must enter a password. Please try again."
                lblinvalid.Visible = True
            elseif (strUname <> Request.Form("uname")) Then
                lblinvalid.text = "Your username is incorrect. Please try again."
                lblinvalid.Visible = True
            elseif (strPass <> Request.Form("password")) Then
                lblinvalid.text = "Your password is incorrect. Please try again."
                lblinvalid.Visible = True
            else
                Session("userid") = strUname
                Response.Redirect("protected.aspx")
            end if

loop

'Close the database connection
        DataBase_Disconnect()

End Sub

</script>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<title>EyeDeco Admin Login</title>

</head>
<body>
<br />

<div align="center">
<h3>Admin</h3>

</div>

<form runat="server">
        <div style="text-align: center; margin-bottom: 12px;"><asp:Label runat="server" class="cred" id="lblinvalid" Visible=false /></div>
        <table cellspacing="1" cellpadding="2" width="260" bgcolor="#ffffff" border="0" align="center">
                <tr>
                    <td align="left" bgcolor="#6898d0" colspan="2">
                        Admin Login
                    </td>
                </tr>
                <tr>
                    <td width="80" bgcolor="#f7f7f7">
                        User Name:
                    </td>
                    <td bgcolor="#fbfbfb">
                       <asp:TextBox runat="server" id="uname" class="textbox" size="20" />
                    </td>
                </tr>
                <tr>
                    <td width="80" bgcolor="#f7f7f7">
                        Password
                    </td>
                    <td bgcolor="#fbfbfb">
                        <asp:TextBox runat="server" id="password" class="textbox" size="20" textmode="password" />
                    </td>
                </tr>
                <tr>
                    <td valign="bottom" align="middle" bgcolor="#f7f7f7" colspan="2">
                        <asp:Button runat="server" class="submit" OnClick="btnlogin_Click" Text="Login"/>
                    </td>
                </tr>
        </table>
    </form>

</body>
</html>

Protected ASPX Page Example:
protected.aspx

<%@ Page Language="VB" Debug="True" %>
<%@ Page Language="VB" Debug="True" %>
<%@ import Namespace="System.Data" %>
<%@ import Namespace="System.Data.Oledb" %>

'++++++++++++++++++++++++++++++++++++++++++++
 'Handles page load events
  Sub Page_Load(Sender As Object, E As EventArgs)

'Call check user function - Check if user has started a session 
          Check_User()

If Not Page.IsPostBack then

End If

End Sub
'++++++++++++++++++++++++++++++++++++++++++++

</script>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<head runat="server">
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252" />
<title>Protected ASPX Page</title>
</head>

<body>

<p>Protected ASPX Page</p>
<p>You could also have links here to other protected pages. </p>
</body>

</html>

-----------------------------------------------------------------------------------------------

This is the Script to add to the top of any aspx page to protect.

-----------------------------------------------------------------------------------------------

ChasWebs.com

Websites, Hosting & More by Chas.
chas@chaswebs.com
Seminole, Florida 33772