0

我正在将安全性集成到现有的 asp 经典网站中。而且我想让匿名用户仍然能够访问该站点，直到我准备好切换开关。不应该设置允许用户=“*”让每个人都进入而不是重定向吗？现在它正在重定向所有页面，直到您进行身份验证。

<configuration>
    <connectionStrings>
        <add name="foConnectionString" connectionString="Data Source=;Initial Catalog=fo;Persist Security Info=True;User ID=foSecurity;Password=" providerName="System.Data.SqlClient"/>
    </connectionStrings>
    <system.web>

  <authorization>
        <allow users="*"/>
      </authorization>  

        <authentication mode="Forms">
        <forms loginUrl="~/Account/Login.aspx" timeout="2880"/>
        </authentication>

        <membership>
            <providers>
                <clear/>
                <add name="AspNetSqlMembershipProvider" type="System.Web.Security.SqlMembershipProvider" connectionStringName="foSecurityConnectionString" enablePasswordRetrieval="false" enablePasswordReset="true" requiresQuestionAndAnswer="false" requiresUniqueEmail="false" maxInvalidPasswordAttempts="5" minRequiredPasswordLength="6" minRequiredNonalphanumericCharacters="0" passwordAttemptWindow="10" applicationName="/foSecurity"/>
            </providers>
        </membership>
        <profile>
            <providers>
                <clear/>
                <add name="AspNetSqlProfileProvider" type="System.Web.Profile.SqlProfileProvider" connectionStringName="foSecurityConnectionString" applicationName="/foSecurity"/>
            </providers>
        </profile>
        <roleManager enabled="true">
   <providers>
    <clear />
    <add connectionStringName="foSecurityConnectionString" applicationName="/foSecurity"
     name="AspNetSqlRoleProvider" type="System.Web.Security.SqlRoleProvider" />
    <add applicationName="/foSecurity" name="AspNetWindowsTokenRoleProvider"
     type="System.Web.Security.WindowsTokenRoleProvider" />
   </providers>
  </roleManager>
        <customErrors mode="Off"/>


    </system.web>
    <system.webServer>
    <defaultDocument>
            <files>
                <add value="index.asp" />
            </files>
        </defaultDocument>
        <modules runAllManagedModulesForAllRequests="true"/>
    </system.webServer>



</configuration>
4

0 回答 0