Use authentication Forms authentication mode.
First, in the Application Program Configuration file (Web. config. The details are as follows:
Configure the authentication node to use the forms authentication mode. You can search for the nodes online.
<Authentication mode = "forms">
<Forms name = ". User" loginurl = "login. aspx" timeout = "1"/>
</Authentication>
Configure the authorization node to reject Anonymous Access
<Authorization>
<Deny users = "? "/>
</Authorization>
Then, you can connect to the database on the login. ASPX page to verify the user. The method I use is:
If (validatelogin (UID, PWD) // This method searches for records in the database based on the UID passed in, and returns true if any.
{
Formsauthentication. setauthcookie (UID, false );
// Set the cookie. You can also use redirectfromloginpage (UID, false) to directly go to the default page.
Response. Redirect ("index. aspx"); // redirect
}
In this way, if the user wants to access restricted resources without authentication, it will be directed to the login. ASPX page.
