Small width layout Medium width layout Maximum width layout Small text Medium text Large text
     Search
Downloads Downloads Directory Directory Forums Forums Forge Forge Blogs Blogs        Marketplace Marketplace Careers Program Careers
Community › Forums Register  |  

Affordable ASP.NET Hosting Service
  Need Help?  
Professional technical support for DotNetNuke is available from DotNetNuke Corporation.
 


  Ads  
 


  Sponsors  

Meet Our Sponsors

ExactTarget email software solutions
Merak Mail Server
WebSecureStores -- ASP.NET & DotNetNuke Hosting Solutions
FCKeditor Project
Salaro -- Skins and more
OnyakTech
 


DotNetNuke Forums
 
  Forum  DotNetNuke® Pro...  Iframe Module [...  Passing User Password to the iframe
Previous Previous
 
Next Next
New Post 5/20/2008 1:33 PM
User is offline maguirre
4 posts
10th Ranked


Re: Passing User Password to the iframe 

Thanks again for your answer.

I modified the IFrame code to show User Password in the dropDownList and now the password is in the querystring. I need to do it in this way because of my boss requirements. We will take the risks on security matters. I don't have to worry about this.

Well, now the querystring has the user id and password and if y paste it into a browser window I avoid the login screen (this is what we need) and i'm sent to the next screen. But now I need the same, but into the iframe. Is there any IE settings that avoids me doing this?

 
New Post 6/10/2008 3:38 PM
User is offline Penny Rand
173 posts
9th Ranked


Re: Passing User Password to the iframe 

Did you find a solution to this problem? I'm facing the same issue. I considered removing the username/password completely and securing the page in the Iframe by only accepting traffic from my DNN server. I think that would work but can't test it at this time.

Any alternative would be welcome.

 
New Post 6/11/2008 6:45 AM
User is offline Penny Rand
173 posts
9th Ranked


Re: Passing User Password to the iframe 

Would you be willing to share your hack of the Iframe with me?

 
New Post 6/11/2008 7:05 AM
User is offline Brandon Haynes
542 posts
everysport.net
8th Ranked


Re: Passing User Password to the iframe 

I've been monitoring this thread for awhile now in complete horror.  The IFrame module should not be used in this manner, and inevitable penetrations could be consequently (unfairly) blamed on DNN.  Yikes.

Brandon


Brandon Haynes
BrandonHaynes.org
 
New Post 6/11/2008 5:35 PM
User is offline Penny Rand
173 posts
9th Ranked


Re: Passing User Password to the iframe 
Modified By Penny Rand  on 6/12/2008 12:35:55 AM)

There are more horrific things to worry about. Not sure how others are using this but I'm not passing DNN security objects in Iframe. I need to provide access during a transition period to a remote server application. That application is running on an Apache Proxy server and is secured by Basic Authentication with a single user and password. The Iframe page itself will be restricted by the DNN security role.

 

 
Previous Previous
 
Next Next
  Forum  DotNetNuke® Pro...  Iframe Module [...  Passing User Password to the iframe
 


Forum Policy

These Discussion Forums are dedicated to the discussion of the DotNetNuke Web Application Framework.

For the benefit of the community and to protect the integrity of the project, please observe the following posting guidelines:

1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DotNetNuke.
2. Discussion or promotion of DotNetNuke product releases under a different brand name are strictly prohibited.
3. No Flaming or Trolling.
4. No Profanity, Racism, or Prejudice.
5. Site Moderators have the final word on approving/removing a thread or post or comment.
6. English language posting only, please.

 


Cestus Websites
DotNetNuke websites en services in Nederland. Cestus Websites levert websites, projectmanagent, skins, modules, training en gespecialiseerde hosting op basis van het CMS DotNetNuke.
www.dotnetnuke-websites.nl
FREE Skins, Modules & Control Panel!
Choose how much you want to pay on our Skins, Modules, Containers and Control Panel - Starting from FREE!
www.dnngroup.com
Disgrafic
Diseño y creación de portales web dinámicos :: Desarrollo de módulos personalizados :: Soluciones a medida :: Imagen Corporativa :: Tu proveedor DNN en España
www.disgrafic.com

DotNetNuke Corporation   Terms Of Use  Privacy Statement
DotNetNuke®, DNN®, and the DotNetNuke logo are trademarks of DotNetNuke Corporation
Hosted by MaximumASP