.net Authentication Help

[Yuvatha]

Brothers,

 

Oka report URL undi ma system lo..where some user is logged in and browse that url to view/download report. Then he will log out. Tarvatha evadina ochi aa history lo chusi click cheste report open aipotundi..so ikada user is not logged in..also random ga hackers ila guess kotti url tho system ni attack cheyochu ..i am trying to fix this issue. Any suggestions??

 

Thanks

[pinky123]

ltt

[Yuvatha]

thanks

[newtodb]

have u integrated the report in a webform??

make sure  the way u used session variables if it is in webform

[Osama Bin Gandhi]

You mean aa url browsing history lo raakudada??  

[mukunda1]

report browser lo generate ayithe, history lo unna aa link ni next time open chesinappudu authentication adigetalu object design seyyali.

 

[Yuvatha]

have u integrated the report in a webform??

report is somewhere in a directory

 

You mean aa url browsing history lo raakudada??  

history lo rakapoina..hackers can do some permutations and combnations kada...even then it shudn't allow

[mukunda1]

have u integrated the report in a webform??

 

webform enti...ayanemmanna webdynpro lo work sesthunnada.

[newtodb]

report is somewhere in a directory

 

history lo rakapoina..hackers can do some permutations and combnations kada...even then it shudn't allow

how ur pulling data on to a report ?

[Yuvatha]

report browser lo generate ayithe, history lo unna aa link ni next time open chesinappudu authentication adigetalu object design seyyali.

 

i am not a report dev

[newtodb]

how ur pulling data on to a report ?

is it ssrs or crystal ?

[Osama Bin Gandhi]

first of all...log out aina tarvata you must clear all the session or whatever objects you have.

 

oka vela history lo direct report page open chesnaa he must be redirected to auth page.

 

 

[newtodb]

first of all...log out aina tarvata you must clear all the session or whatever objects you have.

 

oka vela history lo direct report page open chesnaa he must be redirected to auth page.

@gr33d

also check the session out time of that url

it may be lengthy that is y the  url is active even after some time

[Balanam_rodanam_Balam]

first of all...log out aina tarvata you must clear all the session or whatever objects you have.

 

oka vela history lo direct report page open chesnaa he must be redirected to auth page.

 

+ 1

[Yuvatha]

first of all...log out aina tarvata you must clear all the session or whatever objects you have.

 

oka vela history lo direct report page open chesnaa he must be redirected to auth page.

logout session cleared...

 

2nd point ni ela achieve cheyalo koncham clarity please.