Small width layout Medium width layout Maximum width layout Small text Medium text Large text
     Search
Downloads Downloads Directory Directory Forums Forums Forge Forge Blogs Blogs        Marketplace Marketplace Careers Program Careers
Community › Forums Register  |  

Affordable ASP.NET Hosting Service
  Need Help?  
Professional technical support for DotNetNuke is available from DotNetNuke Corporation.
 


  Ads  
WebHostForAsp.net
 


  Sponsors  

Meet Our Sponsors

R2integrated - formerly bi4ce
Jango Studios - Skins, Modules and Hosting for DotNetNuke
eUKhost.com is commited to offer exceptional UK Windows Web Hosting solutions with quality 24x7 technical support.Our plans support ASP.Net, ASP, ASP.NET Ajax extensions, XML, MSSQL, MySQL, PHP,DNN, multiple domains and Shared SSL as standard.
SmarterTools
The Official Microsoft ASP.NET Website
Portal Webhosting - Hosting For Developers
 


DotNetNuke Forums
 
  Forum  DotNetNuke® Pro...  Iframe Module [...  Passing User Password to the iframe
Previous Previous
 
Next Next
New Post 5/20/2008 1:33 PM
User is offline maguirre
4 posts
10th Ranked


Re: Passing User Password to the iframe 

Thanks again for your answer.

I modified the IFrame code to show User Password in the dropDownList and now the password is in the querystring. I need to do it in this way because of my boss requirements. We will take the risks on security matters. I don't have to worry about this.

Well, now the querystring has the user id and password and if y paste it into a browser window I avoid the login screen (this is what we need) and i'm sent to the next screen. But now I need the same, but into the iframe. Is there any IE settings that avoids me doing this?

 
New Post 6/10/2008 3:38 PM
User is offline Penny Rand
173 posts
9th Ranked


Re: Passing User Password to the iframe 

Did you find a solution to this problem? I'm facing the same issue. I considered removing the username/password completely and securing the page in the Iframe by only accepting traffic from my DNN server. I think that would work but can't test it at this time.

Any alternative would be welcome.

 
New Post 6/11/2008 6:45 AM
User is offline Penny Rand
173 posts
9th Ranked


Re: Passing User Password to the iframe 

Would you be willing to share your hack of the Iframe with me?

 
New Post 6/11/2008 7:05 AM
User is offline Brandon Haynes
517 posts
everysport.net
8th Ranked


Re: Passing User Password to the iframe 

I've been monitoring this thread for awhile now in complete horror.  The IFrame module should not be used in this manner, and inevitable penetrations could be consequently (unfairly) blamed on DNN.  Yikes.

Brandon


Brandon Haynes
BrandonHaynes.org
 
New Post 6/11/2008 5:35 PM
User is offline Penny Rand
173 posts
9th Ranked


Re: Passing User Password to the iframe 
Modified By Penny Rand  on 6/12/2008 12:35:55 AM)

There are more horrific things to worry about. Not sure how others are using this but I'm not passing DNN security objects in Iframe. I need to provide access during a transition period to a remote server application. That application is running on an Apache Proxy server and is secured by Basic Authentication with a single user and password. The Iframe page itself will be restricted by the DNN security role.

 

 
Previous Previous
 
Next Next
  Forum  DotNetNuke® Pro...  Iframe Module [...  Passing User Password to the iframe
 


Forum Policy

These Discussion Forums are dedicated to the discussion of the DotNetNuke Web Application Framework.

For the benefit of the community and to protect the integrity of the project, please observe the following posting guidelines:

1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DotNetNuke.
2. Discussion or promotion of DotNetNuke product releases under a different brand name are strictly prohibited.
3. No Flaming or Trolling.
4. No Profanity, Racism, or Prejudice.
5. Site Moderators have the final word on approving/removing a thread or post or comment.
6. English language posting only, please.

 


Get Smarter Mail, SmarterStats, SmarterTickets
Windows mail server, web log analytics, and customer service management software - Free Editions Available!
www.smartertools.com
DotNetNuke Modules, Skins, Training and Consulting
If you want DotNetNuke done right then look no further. Developed Solutions provides module development, skin design, user and developer training and consulting. Based in Adelaide, Australia, we offer our services worldwide.
www.developedsolutions.com.au
Venexus, Inc.
Need custom a custom DotNetNuke module? From module planning to deployment, including training and support, Venexus developers deliver end-to-end web solutions on time and on budget.
www.venexus.com

DotNetNuke Corporation   Terms Of Use  Privacy Statement
DotNetNuke®, DNN®, and the DotNetNuke logo are trademarks of DotNetNuke Corporation
Hosted by MaximumASP