Small width layout Medium width layout Maximum width layout Small text Medium text Large text
     Search
Downloads Downloads Directory Directory Forums Forums Forge Forge Blogs Blogs        Marketplace Marketplace Careers Program Careers
Community › Forums Register  |  

Maximum ASP
  Need Help?  
Professional technical support for DotNetNuke is available from DotNetNuke Corporation.
 


  Ads  
Iron Speed Designer is a software development tool for building database, reporting, and forms applications for .NET without hand-coding.
 


  Sponsors  

Meet Our Sponsors

The best choice for your web site host, email hosting, and domain registration.
CrystalTech Web Hosting™
Webhost4life, specialists in DNN hosting
Mad Development is a full service interactive agency focusing on the merge of design, technology, e-commerce, and affiliate marketing by providing total website solutions.
AspDotNetStoreFront - E-Commerce by Design - The Leading ASP.NET shopping cart platform for developers!
Click here to go to dev.live.com for Windows Live developer resources
 


DotNetNuke Forums
 
  Forum  DotNetNuke® Pro...  Iframe Module [...  Does it secure to pass User ID in querystring?
Previous Previous
 
Next Next
New Post 11/5/2007 5:28 PM
User is offline Dan Zhang
29 posts
10th Ranked


Does it secure to pass User ID in querystring? 

Hi everyone,

   I am trying to use DNN user profile to login other application through the IFrame, but I think pass UserID using IFrame parameter isn't secure. does anyone have more secure way to achive it?

 

Dan
 
New Post 11/6/2007 5:19 AM
User is offline Vitaly Kozadayev
687 posts
www.continure.com
7th Ranked






Re: Does it secure to pass User ID in querystring? 

Passing UserId isn't going to compromise anything. First of all it's exposed in other areas of DNN (granted, not to everybody). Second, it's no more dangerous then passing a username. IMHO.

Vitaly Kozadayev
Principal
Viva Portals, L.L.C.
 
New Post 11/6/2007 2:41 PM
User is offline Dan Zhang
29 posts
10th Ranked


Re: Does it secure to pass User ID in querystring? 

Hi Vitaly,

Thanks a lot for your anwser, I may have to pass the UserName beacuse UserID doesn't mean any thing for other application, my project manager refuse to use querystring. he recommand to use expired cookies, all the application are setting under same domain.

I perfer to pass the value through the IFRame,because it doesn't modify the DNN application. what do you advice? thanks in advance.

 

Dan
 
New Post 11/6/2007 10:06 PM
User is offline Stefan Cullmann
1454 posts
6th Ranked








Re: Does it secure to pass User ID in querystring? 

I modified IFrame for a customer, it made a webservice call to the server behind for authentification. As a result, a security token was submitted which was afterwards used as querystring parameter. Thhesecurity tokens  life time was limited to life only few minutes.

Even If this worked, I advise everybody not using Iframes for any security related applications. 

Stefan Cullmann - stefan.cullmann [at] dotnetnuke.com

forms & Lists (UDT5.0) will be the next major release of the User Defined Table project.
A first Preview is available, though it requires DotnetNuke 5 (Beta 5).

Need to import external data to a UDT? Try http://www.codeplex.com/Csv2UDTImport
 
 Page 1 of 1
Previous Previous
 
Next Next
  Forum  DotNetNuke® Pro...  Iframe Module [...  Does it secure to pass User ID in querystring?
 


Forum Policy

These Discussion Forums are dedicated to the discussion of the DotNetNuke Web Application Framework.

For the benefit of the community and to protect the integrity of the project, please observe the following posting guidelines:

1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DotNetNuke.
2. Discussion or promotion of DotNetNuke product releases under a different brand name are strictly prohibited.
3. No Flaming or Trolling.
4. No Profanity, Racism, or Prejudice.
5. Site Moderators have the final word on approving/removing a thread or post or comment.
6. English language posting only, please.
 


The Standard in Senior Housing Information
SNAPforSeniors provides consumers with free online resources to assist them with their search for senior housing
www.snapforseniors.com 		DotNetNuke Web Hosting w/ ASP.NET 3.5
Unlimited email boxes, Unlimited databases, Unlimited domains. Plans start at $4.97
www.MyWinHosting.com 		SteadyRain
Founded in 1999, SteadyRain has extensive experience delivering Internet technology strategies and solutions for a diverse client base, ranging from Fortune 500 firms to successful start-ups.
www.steadyrain.com

DotNetNuke Corporation   Terms Of Use  Privacy Statement
DotNetNuke®, DNN®, and the DotNetNuke logo are trademarks of DotNetNuke Corporation
Hosted by MaximumASP