ASP.Net Login Control - How to write code to manually Login

    In my case I had to apply an auto login feature to one of our web applications, but it is using the ASP.Net Login Control, which it was difficult to write code to login the system manually without using the Login Control...

    In order to follow up with this tutorial you need to read the previous one, please see here

https://edgarvzla.blogspot.com/2018/06/aspnet-login-control-how-to-get-users.html

   Once you have completed with the steps into my tutorial above, please continue with the code below to validate and login the user:


                      bIsAuthenticated = Membership.ValidateUser(UserId, sPassword);

                    HttpContext.Current.Session["IsAuthenticated"] = bIsAuthenticated;
                    if ( bIsAuthenticated)
                    {
                        HttpContext.Current.Session["UserName"] = UserId;

                        IIdentity identity = new GenericIdentity(UserId);
                        IPrincipal principal = new GenericPrincipal(identity, null);
                        HttpContext.Current.User = principal;
                        Thread.CurrentPrincipal = principal;

                        FormsAuthentication.SetAuthCookie(UserId, true);
                    }

ASP.Net Login Control - How to get user's password using Membership with passwordFormat like encrypted

    In order to allow the system to get a user's password from our database when we are using a Membership provider and the ASP.Net Login Control, it is necessary to follow up the steps below:

1) Inside the web.config file find the membership tag into the system.web, add/update the properties below:
    enablePasswordRetrieval = "true"
    passwordFormat = "Encrypted"


<membership> <providers> <clear/> <add name="ExtendedSqlMembershipProvider" type="System.Web.Security.SqlMembershipProvider" connectionStringName="testDB" enablePasswordRetrieval="true" enablePasswordReset="true" requiresQuestionAndAnswer="false" requiresUniqueEmail="false" maxInvalidPasswordAttempts="5" minRequiredPasswordLength="6" minRequiredNonalphanumericCharacters="0" passwordAttemptWindow="10" applicationName="/" passwordFormat="Encrypted" /> </providers> </membership>

2) Create the keys using the code below:

public static class RNGCrypto_MachineKey
{
    public static string getRandomKey(int bytelength)
    {
        byte[] buff = new byte[bytelength];
        RNGCryptoServiceProvider rng = new RNGCryptoServiceProvider();
        rng.GetBytes(buff);
        StringBuilder sb = new StringBuilder(bytelength * 2);
        for (int i = 0; i < buff.Length; i++)
            sb.Append(string.Format("{0:X2}", buff[i]));
        return sb.ToString();
    }
}

How to call the function above?:

string key64 = RNGCrypto_MachineKey.getRandomKey(64);
string key32 = RNGCrypto_MachineKey.getRandomKey(32);

3) Now, inside the web.config file, add the following inside the tag system.web and apply the keys you got from the code above:

 <machineKey validationKey="paste here the key64 string" decryptionKey="paste here the key32 string" validation="SHA1" decryption="AES"/>

4) Change the PasswordFormat from the table Memberships and assign the value 2 (it means Encrypted) to all the users

5) Inside your backend code, write the instructions to reset and save a new password

MembershipUser UserInfo = Membership.GetUser("UserName", false);
string ResetPassword = UserInfo.ResetPassword();
IsPasswordChanged = UserInfo.ChangePassword(ResetPassword, "password");

6) Once you have changed all passwords using the encrypted format (specified in web.config), add the instruction below to get the password from the database

string sPassword = Membership.GetUser("UserName").GetPassword();

Could not load file or assembly 'System.Web.Mobile' or one of its dependencies. The system cannot find the file specified.

Could not load file or assembly 'System.Web.Mobile' or one of its dependencies. The system cannot find the file specified.
Source Error:

Line 1: <%@ page language="C#" autoeventwireup="true" inherits="mobile_qccontrol, App_Web_-_tlfas5" %> Line 2: Line 3: <%@ Register TagPrefix="mobile" Namespace="System.Web.UI.MobileControls" Assembly="System.Web.Mobile" %> Line 4: Line 5: <html xmlns="http://www.w3.org/1999/xhtml" >

When our web appication is developed using .Net Framework 2.0, we need to specify the same in our IIS...

a) Open the IIS (Internet Information Services)
b) Go to Application Pools, and right click on the related one
c) Click on Advanced Settings
d) Change .NET CLR Version to v2.0

Calling LoadLibraryEx on ISAPI filter "C:\Windows\Microsoft.NET\Framework\v4.0.30319\\aspnet_filter.dll" failed

HTTP Error 500.0 - Internal Server Error

Calling LoadLibraryEx on ISAPI filter "C:\Windows\Microsoft.NET\Framework\v4.0.30319\\aspnet_filter.dll" failed


Please allow 32 bits application from the IIS Application Pool settings...

a) Open IIS Manager
b) Go to Applicaion Pools
c) Right click on the related application pool and select advanced settings
d) Enable 32 bit applications must be true

SAP.Net Connector Error - An attempt was made to load a program with an incorrect format. (Exception from HRESULT: 0x8007000B)

SAP.Net Connector Error:
An attempt was made to load a program with an incorrect format. (Exception from HRESULT: 0x8007000B)

If you are trying to connect to the SAP RFC Function from a web page and the system is getting this error, please allow 32 bits application from the IIS Application Pool settings...

a) Open IIS Manager
b) Go to Applicaion Pools
c) Right click on the related application pool and select advanced settings
d) Enable 32 bit applications must be true