ASP.NET 会员资格中的多个安全问题
我们使用 ASP.NET Membership Provider 来管理应用程序中的用户。
一切都很好，直到我们有了新的要求。 用户应该能够选择多个安全问题并给出相同的答案。
在恢复密码时，将向用户显示安全问题之一，如果用户回答正确，则会发送密码。
默认情况下，ASP.NET 会员资格仅提供一个安全问题和一个安全答案。 有没有办法让它使用多个？
We are using the ASP.NET Membership Provider for managing the users in our application.
All was fine until when we had a new requirement.
Users should be able to select multiple security questions and give answers to the same.
While recovering the password, the user will be presented with one of the security questions and if the user answers correctly the password will be sent.
By default ASP.NET Membership provides only one security question and one security answer.
Is there is any way to make it use multiple ones?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
创建您自己的自定义 ASP.NET 会员资格提供程序将是关键。此外，您还必须为使用密码 Q 的 .NET 登录控件创建自定义模板，以便可以显示多个问题/答案部分。
您可能必须将会员资格提供商设置为不使用密码问题/答案，而是自行进行编程管理。默认情况下，它使用单个 Q/A 来管理安全性；但由于您需要多个，因此使用自定义逻辑来管理它可能更容易。
编辑：我能想到的唯一的另一件事是有两个提供程序定义，每个定义都有自己的密码问题/答案，这样您就可以有效地在每个用户的数据库中存储两条记录。问题是 UI 控件不适用于该方法，因此您需要自定义构建 UI。
HTH。
Creating your own custom ASP.NET membership provider would be the key. Additionally, you'd have to create a custom template for the .NET login controls that use the password Q's, so that you can display multiple question/answer sections.
You may have to set the membership provider to not use the password question/answer, but programmably manage it yourself. By default, it uses that single Q/A to manage security; but since you need multiple, it may be easier to use custom logic to manage this.
EDIT: the only other thing I can think of is have two provider definitions, each with their own password question/answer, so that you are effectively storing two records in the database per user. The thing is that the UI controls won't work with that approach, so you would need to custom build the UI.
HTH.
您可以通过子类化默认的 ASP.NET 成员资格提供程序来根据您的特定要求对其进行自定义。
You could customize the default ASP.NET Membership provider to your specific requirements by subclassing it.