Tengo este codigo en un login pero no me funciona, cuando le doy submit me manda a una pagina Default.aspx en lugar de q no me logee, no se pq me manda a esa pagina,
web.config
__________________________________________________ ______________
<configuration>
<system.web>
<authentication mode="Forms">
<forms loginUrl="LoginPage.aspx">
</forms>
</authentication>
<authorization>
<allow users="?" />
</authorization>
</system.web>
</configuration>
Loginpage.aspx__________________________________________________ _______________
<%@ Import NameSpace="System.Data" %>
<%@ Import NameSpace="System.Data.SqlClient" %>
<html>
<body>
<h1>Please Log In</h1>
<hr>
<form runat="server">
<table cellpadding="8">
<tr>
<td>
User Name:
</td>
<td>
<asp:TextBox ID="UserName" RunAt="server" />
</td>
</tr>
<tr>
<td>
Password:
</td>
<td>
<asp:TextBox ID="Password" RunAt="server" />
</td>
</tr>
<tr>
<td>
<asp:Button Text="Submit" OnClick="OnSubmit" RunAt="server" />
</td>
<td>
<asp:CheckBox Text="Remember me" ID="RememberMe" RunAt="server" />
</td>
</tr>
</table>
</form>
<hr3>
<h3><asp:Label ID="Output" RunAt="server" /></h3>
</body>
</html>
<script language="C#" runat="server">
bool CustomAuthenticate (string username, string password)
{
SqlConnection connection = new SqlConnection
("server=localhost;database=weblogin;uid=sa;pwd=") ;
try {
connection.Open ();
StringBuilder builder = new StringBuilder ();
builder.Append ("select count (*) from users " + "where username = \'");
builder.Append (username);
builder.Append ("\' and cast (rtrim (password) as " + "varbinary) = cast (\'");
builder.Append (password);
builder.Append ("\' as varbinary)");
SqlCommand command = new SqlCommand (builder.ToString (), connection);
int count = (int) command.ExecuteScalar ();
return (count > 0);
}
catch (SqlException) {
return false;
}
finally {
connection.Close ();
}
}
void OnSubmit (Object sender, EventArgs e)
{
string url = FormsAuthentication.GetRedirectUrl (UserName.Text, RememberMe.Checked);
FormsAuthentication.SetAuthCookie (UserName.Text, RememberMe.Checked);
if (RememberMe.Checked) {
HttpCookie cookie = Response.Cookies[FormsAuthentication.FormsCookieName];
cookie.Expires = DateTime.Now + new TimeSpan (7, 0, 0, 0);
}
Response.Redirect (url);
}
</script>
__________________________________________________ _____________
Pagina despues de hacer login
<%@ Page Language="C#" %>
<html>
<body>
<h1>Protected Page</h1>
<hr><br>
<% Response.Write (Context.User.Identity.Name + ": "); %>
Login Exitoso
</body>
</html>
<script language="C#" runat="server">
void OnViewSecret (Object sender, EventArgs e)
{
Response.Redirect ("Secret/ProtectedPage.aspx");
}
</script>
__________________________________________________ _______________
webconfig de pagina despues de login
<configuration>
<system.web>
<authorization>
<deny users="?" />
</authorization>
</system.web>
</configuration>