Home/ Questions/Q 8329367
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-09T01:45:37+00:00

In ASP.NET web app, I have login.aspx. I force that every user access through

  • 0

In ASP.NET web app, I have login.aspx.
I force that every user access through Login.aspx, setting that on web.config:

<authentication mode="Forms">
<forms name="coockie_aut" loginUrl="login.aspx" protection="All" path="/" timeout="60" slidingExpiration="true"/>
</authentication>

My question is:
Using form authentication and loginurl, would it prevent from trying to hack any web page without accessing first Login.aspx? Does it mean that allways allways there will be forced to access Login.aspx first?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    That depends what you mean by “hack”. Default Forms Authentication will redirect any request with no session authentication token to the login page. There are all kinds of session stealing, man-in-the-middle, brute-force, and other varieties of attacks that you may still be vulnerable to.

    • 0