2. ASPRunnerPro General questions
  3. Security and permissions
This topic is locked

Security and permissions

 		4/20/2004 11:57:57 PM
ASPRunnerPro General questions
author

Just finished setting up most of my pages and noticed that the login page wasn't working for me. The login page was easily bypassed by typing in the xxx_list.asp page. I could also go to the rest of my pages just as easily even though they have different usernames and passwords. I am using the hardcoded username and password.
Am I missing something?
ALP
Sergey Kornilov admin 4/21/2004

You are testing this while your session is still active.
Try to log out first or just close your browser and type list page URL in a new browser's window. You will be redirected to the login page in this case.
501067 4/21/2004

Thanks for the response. I had already tried it in a new browser window and it does redirect as you mentioned. However, without logging in if I reenter the list page it sends me to the list page. I noticed this morming that it says logged in as guest. I thought that guest access was allowed if using database passwords only.

I also logged in to one page and then typed in the xxx_list.asp for another page and was again redirected with guest permission. I can view but not add/edit or delete. Is there a way to disable guest access altogether?
Many Thanks
Sergey Kornilov admin 4/23/2004

Please download latest update here that fixes this issue.