Small width layout Medium width layout Maximum width layout Small text Medium text Large text
     Search
Downloads Downloads Directory Directory Forums Forums Forge Forge Blogs Blogs        Marketplace Marketplace Careers Program Careers
Community › Forums Register  |  

AppTheory specializes in solutions based on the DotNetNuke platform and has 2 employees on the DotNetNuke Core Team.
  Need Help?  
Professional technical support for DotNetNuke is available from DotNetNuke Corporation.
 


  Ads  
Active Modules -- Active Forums for DotNetNuke
 


  Sponsors  

Meet Our Sponsors

SourceGear - Tools for Developers
.: CounterSoft :.
telerik
ExactTarget email software solutions
Merak Mail Server
WebSecureStores -- ASP.NET & DotNetNuke Hosting Solutions
 


DotNetNuke Forums
 
  Forum  DotNetNuke® Pro...  Iframe Module [...  Does it secure to pass User ID in querystring?
Previous Previous
 
Next Next
New Post 11/5/2007 5:28 PM
User is offline Dan Zhang
28 posts
10th Ranked


Does it secure to pass User ID in querystring? 

Hi everyone,

   I am trying to use DNN user profile to login other application through the IFrame, but I think pass UserID using IFrame parameter isn't secure. does anyone have more secure way to achive it?

 

Dan
 
New Post 11/6/2007 5:19 AM
User is offline Vitaly Kozadayev
671 posts
www.continure.com
7th Ranked






Re: Does it secure to pass User ID in querystring? 

Passing UserId isn't going to compromise anything. First of all it's exposed in other areas of DNN (granted, not to everybody). Second, it's no more dangerous then passing a username. IMHO.

Vitaly Kozadayev
Principal
Viva Portals, L.L.C.
 
New Post 11/6/2007 2:41 PM
User is offline Dan Zhang
28 posts
10th Ranked


Re: Does it secure to pass User ID in querystring? 

Hi Vitaly,

Thanks a lot for your anwser, I may have to pass the UserName beacuse UserID doesn't mean any thing for other application, my project manager refuse to use querystring. he recommand to use expired cookies, all the application are setting under same domain.

I perfer to pass the value through the IFRame,because it doesn't modify the DNN application. what do you advice? thanks in advance.

 

Dan
 
New Post 11/6/2007 10:06 PM
User is offline Stefan Cullmann
1431 posts
6th Ranked








Re: Does it secure to pass User ID in querystring? 

I modified IFrame for a customer, it made a webservice call to the server behind for authentification. As a result, a security token was submitted which was afterwards used as querystring parameter. Thhesecurity tokens  life time was limited to life only few minutes.

Even If this worked, I advise everybody not using Iframes for any security related applications. 

Stefan Cullmann - stefan.cullmann [at] dotnetnuke.com

forms & Lists (UDT5.0) will be the next major release of the User Defined Table project.
A first Preview is available, though it requires DotnetNuke 5 (Beta 5).
 
 Page 1 of 1
Previous Previous
 
Next Next
  Forum  DotNetNuke® Pro...  Iframe Module [...  Does it secure to pass User ID in querystring?
 


Forum Policy

These Discussion Forums are dedicated to the discussion of the DotNetNuke Web Application Framework.

For the benefit of the community and to protect the integrity of the project, please observe the following posting guidelines:

1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DotNetNuke.
2. Discussion or promotion of DotNetNuke product releases under a different brand name are strictly prohibited.
3. No Flaming or Trolling.
4. No Profanity, Racism, or Prejudice.
5. Site Moderators have the final word on approving/removing a thread or post or comment.
6. English language posting only, please.
 


TechNexxus
Business process and technology sourcing solutions delivering superior people, process and value. We have used, and continue to use, DNN successfully in numerous client projects to deliver exceptional value. We are proud to support the DNN team and community.
www.technexxus.com 		PartnerPoint - Microsoft Technology Community
PartnerPoint is one of the largest online communities of Microsoft Partners Worldwide. With over 5,000 active members, it serves as a collaboration platform for other technology communties around the globe
www.partnerpoint.com 		Web Valley
Website design, Database development
www.webvalley.com

DotNetNuke Corporation   Terms Of Use  Privacy Statement
DotNetNuke®, DNN®, and the DotNetNuke logo are trademarks of DotNetNuke Corporation
Hosted by MaximumASP