Restrict Access to Aspx Page

[Jacques Oberto]

Hi All,

One of the aspx pages in my application is a run-time
image generator and is called using URL by other pages
in my app.
I would like to restrict direct acces to the image generator
page from external (different domains) applications/webusers.
How can I achieve that?
Thanks,

Jacques

 

[Jacques Oberto]

One of the aspx pages in my application is a run-time

image generator and is called using URL by other pages
in my app.
I would like to restrict direct acces to the image generator
page from external (different domains) applications/webusers.
How can I achieve that?

I think I found a solution by defining a Session variable in
the code behind of the authorized pages and checking that
variable in the restricted aspx page.

 

[Guest]

Hi All,

One of the aspx pages in my application is a run-time
image generator and is called using URL by other pages
in my app.
I would like to restrict direct acces to the image generator
page from external (different domains) applications/webusers.
How can I achieve that?
Thanks,

Jacques

Check HttpRequest parameters as in the following code

if (context.Request.UrlReferrer == null
|| context.Request.UrlReferrer.Host.Length == 0
|| context.Request.UrlReferrer.Host.CompareTo
(context.Request.Url.Host.ToString()) == 0)
{

// show image

}

 

[Jacques Oberto]

Check HttpRequest parameters as in the following code

if (context.Request.UrlReferrer == null
|| context.Request.UrlReferrer.Host.Length == 0
|| context.Request.UrlReferrer.Host.CompareTo
(context.Request.Url.Host.ToString()) == 0)
{

// show image

}


Thanks Alexey, very useful. That should also allow to define
a group of authorized external users.

Jacques

 

[Guest]

Check HttpRequest parameters as in the following code

if (context.Request.UrlReferrer == null
|| context.Request.UrlReferrer.Host.Length == 0
|| context.Request.UrlReferrer.Host.CompareTo
(context.Request.Url.Host.ToString()) == 0)
{

// show image

}

Thanks Alexey, very useful. That should also allow to define
a group of authorized external users.

Jacques

Then you can simply add context.Request.UrlReferrer.Host.CompareTo
("domain.com") to check if requests comes from an authorized domain.

 

[Cubaman]

Hi All,

One of the aspx pages in my application is a run-time
image generator and is called using URL by other pages
in my app.
I would like to restrict direct acces to the image generator
page from external (different domains) applications/webusers.
How can I achieve that?
Thanks,

Jacques

You can create groups, and just configure acces in your web.config.
http://support.microsoft.com/kb/815151

 

[Guest]

You can create groups, and just configure acces in your web.config.http://support.microsoft.com/kb/815151

Windows authentication for remote access from the internet?