ASP.NET：需要基于网络掩码登录

发布于 2024-08-16 07:03:29 字数 198 浏览 2 评论 0原文

我需要保护对 .NET web 应用程序中所有页面的访问 - 除了以下请求：

本地网络（运行 IIS 的网络）
数据库中列出的 IP/网络掩码

所有其他请求都应重定向到

我正在考虑的登录表单HttpModule 的方向 - 但从未编写过。谁能对此提供任何想法？

谢谢你！

原文

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

我不咬妳我踢妳 2024-08-23 07:03:29

使用 HttpModule 将是实现此目的的最佳方法。您可以使用它在页面执行之前捕获任何请求，并在需要时重定向到登录表单。

public class SecurityModule : IHttpModule
{
    private HttpApplication m_HttpApplication;

    public void Init(HttpApplication context)
    {
        m_HttpApplication = context;
        m_HttpApplication.PreRequestHandlerExecute += new EventHandler(OnPreRequestHandlerExecute);
    }

    public void Dispose()
    {
        // Do Nothing
    }

    private void OnPreRequestHandlerExecute(object sender, EventArgs e)
    {
        // Get IP address
        string ipAddress = m_HttpApplication.Context.Request.UserHostAddress;

        // Check if the IP address requires login
        bool requiresLogin = ValidateIpAddress(ipAddress);

        // Redirect if required
        if (requiresLogin)
            Response.Redirect("~/Login.aspx", true);
        }

        private bool ValidateIpAddress(string ipAddress)
        {
            // This method would check that the IP address is from the local
            // network or in the database and return true or false accordingly.

            return false;
        }
    }

您还需要修改 web.config 并添加对该模块的引用：

<httpModules>
    <add name="SecurityModule" type="MyApp.SecurityModule, MyApp"/>
</httpModules>

此代码还需要一些修改以确保登录的用户不会重定向回登录页面，但这应该足以让您开始了。

Using a HttpModule would be the best way to do this. You could use this to catch any requests before the page executes and redirect to the login form if required.

public class SecurityModule : IHttpModule
{
    private HttpApplication m_HttpApplication;

    public void Init(HttpApplication context)
    {
        m_HttpApplication = context;
        m_HttpApplication.PreRequestHandlerExecute += new EventHandler(OnPreRequestHandlerExecute);
    }

    public void Dispose()
    {
        // Do Nothing
    }

    private void OnPreRequestHandlerExecute(object sender, EventArgs e)
    {
        // Get IP address
        string ipAddress = m_HttpApplication.Context.Request.UserHostAddress;

        // Check if the IP address requires login
        bool requiresLogin = ValidateIpAddress(ipAddress);

        // Redirect if required
        if (requiresLogin)
            Response.Redirect("~/Login.aspx", true);
        }

        private bool ValidateIpAddress(string ipAddress)
        {
            // This method would check that the IP address is from the local
            // network or in the database and return true or false accordingly.

            return false;
        }
    }

You'll also need to modify web.config and add a reference to the module:

<httpModules>
    <add name="SecurityModule" type="MyApp.SecurityModule, MyApp"/>
</httpModules>

This code would also need some modification to ensure that users who are logged in are not redirected back to the login page, but it should be enough to get you started.

回复收藏 0 原文