Login-Password Profile Pages

[Jabbamonkey]

Hi,

 

I am very much a newbie to ASP.Net and would like to create a site that allows users to register, login, and have their own profile pages. I was wondering if anyone could list out exactly what I would need. For example, I know I'll need a table to store user info (login, password), another table to store their personal information. I also know I'll need cookies to track that the user is still logged in/out. I just want to make sure I have a list of everything that is needed, so I can educate myself on everything before I begin.

 

Thanks for your help.

 

Jabbamonkey

[evaleah]

Sounds like you have it covered. I can't think of anything else specific to usernames and passwords.

 

You could choose to you session instead of cookies for user authentication. Might be another thing to look at.

[kahlua001]

You can use FormsAuthentication in particular. Also, look into Hash encrypting your passwords.

[Jabbamonkey]

Hash encrypting ... Ok, password encryption was something I was worried about. As I said before, I am very new to this. How touch is it to set up, and can you provide any examples to scripts(links, etc.)?

 

Jabbamonkey

[kahlua001]

Best thing to do is pick up an ASP.NET book. They all go thru Authentication and they come complete with examples. I thought ASP.NET Unleashed by SAMS was a good beginner book with great examples. HTH

[Jabbamonkey]

At the moment I have SAMS Teach Yourself ASP in 24 Hours and it's pretty good. The problem with the beginner books, is that they are very limited. They detail very basic stuff, and don't go into specifics (what do you expect from a beginner's book?). It's easiest for me to see some code, disect it and figure out how it works (based on the knowledge I got from the book), then tailor the script to my needs. Then, after doing all that, it's pretty easy to write my own code.

 

Jabbamonkey

[Derek Stone]

Hashes are not a form of encryption, but a form of checksum. Encryption implies that the data can be retrieved. Passwords, once hashed, can not be.

 

Dim provider As New System.Security.Cryptography.MD5CryptoServiceProvider()
Dim hash() As Byte = provider.ComputeHash(System.Text.Encoding.Default.GetBytes("foobar"))
Dim hashedPassword As String = System.Convert.ToBase64String(hash)