URL containing login details

[jmason50]

Can anyone point me in the direction of a resource that has info on creating a login for an ASP/Access protected site that allows me to create URL logins for users? So that instead of seeing a login page and entering a username/password they can simply click on a URL (which contains the appropriate details) and be taken straight into the site?

[PeOfEo]

You cant do this. You can use a query string yess to pass a variable but this would not exactly be a secure login then would it because a user could just type out the url :rolleyes:. You can however mod the session length to last for long periods of time so that they can stay logged in for months at a time, just like that little remember me check boxes. But if you still have your heard set on the query string it would be simple.
if request.querystring("key") = something then
response.redirect("thepageafter")
end if

[jmason50]

Thanks PeOfEo. Question for ya regarding...
"this would not exactly be a secure login then would it because a user could just type out the url"
As far as security goes, how is putting the password in a URL link and using a query string to pass it any less secure than a user simply trying to guess the password by typing it into the login box on the page?
What I'm hoping to do here is make it easier for registered users to login, by having them click on a URL link to login rather than having to click on a link, then type in the username and/or password. The way I see it, they know the login details anyway, so why make them retype them every time they visit the site...:cool:

[jmason50]

Forgot to add, what I'm also after here is the correct format for the link.
Is http://www.site.com/login.asp?user=me&password=1234 on the right track?

[PeOfEo]

The most secure login is a data base w/ a session. Matching the pass with what is in the data base and then setting session variables to pass the login and all. You can modify the sessions to last just about as long as you want them to, up to weeks and weeks, so the person never logs out basically. It is also preferable that you be on sql server for security and speed reasons. But yes that is what a query string looks like.

[ray326]

Originally posted by jmason50
Can anyone point me in the direction of a resource that has info on creating a login for an ASP/Access protected site that allows me to create URL logins for users? So that instead of seeing a login page and entering a username/password they can simply click on a URL (which contains the appropriate details) and be taken straight into the site?
Is this an internal Microsoft-only application infrastructure? If so you're undoubtedly also using NT Domains or Active Dir for network authentication. In that case you can set the site up on the IIS server to use the NT handshake with the users' (no doubt) IE web browser and EVERYONE accessing the site will automagically be authenticated to the server as their network login ID. Now all you have to do is decide whether that REMOTE_USER should be given access to this application.