edv/VERAG_Homepage
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Apps sicher gegen Scriot Exploits gemacht wegen Absicherendem Encoden Der Strings der Seite Mittels Server.HtmlEncode(beliebiger String)

Browse Source
This commit is contained in:
ja
2021-09-22 11:16:32 +02:00
parent 87d560c788
commit 71c8d5b798
3 changed files with 18 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
login/login_FLEX.aspx.vb
View File

@@ -38,16 +38,13 @@ Partial Class login_login_TEST
Login1.FailureText = "Account has not been activated."
Exit Select
Case Else
If Session.IsNewSession = True Then
Session.Add("test", Login1.UserName)
CustomerIDTextBox = Login1.FindControl("CustomerID")
Session.Add("CustomerID", CustomerIDTextBox.Text)
Session.Add("PW", Login1.Password)
FormsAuthentication.RedirectFromLoginPage(Login1.UserName, Login1.RememberMeSet)
Else
FormsAuthentication.RedirectFromLoginPage(Login1.UserName, Login1.RememberMeSet)
End If
Session.Add("test", Login1.UserName)
CustomerIDTextBox = Login1.FindControl("CustomerID")
Session.Add("CustomerID", CustomerIDTextBox.Text)
Session.Add("PW", Login1.Password)
FormsAuthentication.RedirectFromLoginPage(Login1.UserName, Login1.RememberMeSet)
'FormsAuthentication.SetAuthCookie(Login1.UserName, True)
'Response.Redirect("mypage.aspx")