Skal virksomheder stå stærkere mod angreb og kunne udvikle sig, skal sikkerhed, drift og forretning tænkes sammen. Det er tanken bag Jysk IT’s ambition om at skabe en “sikker fremtid” for kunderne.
dk_akj >> nu er den funktion bare lige en smule svær at anvende i en ASP verden :-)
Du kan finde navnet i Request.ServerVariables("AUTH_USER") og LOGON_USER. Men begge kræver at du anvender Basic eller Windows authentication, altså at der logges på et Windows domæne/server.
Du kan prøve at lave en lille ASP side med denne stump kode:
For Each Item In Request.ServerVariables Response.Write "<B>" & Item & "</B>: " & Request.ServerVariables(Item) & "<BR>" Next
Dette vil bla. vise alle de informationer om klienten du har til rådighed. Mit bud er, at hvis din maskine kører stand-alone, vil du ikke have information om brugeren.
Men hvis vi bruger en windows server i firmaet burde dette så ikke virke??
Dim UserID UserID = Request.ServerVariables("LOGON_USER") If Len(UserID) = 0 then Response.Status = "401 Unauthorized" Session.Abandon Response.End End If Session("UserID") = UCase(Mid(UserID, InStr(UserID, "\")+1))
Jo principielt. Det burde dog ikke være nødvendigt med det check på UserID. Hvis du konfigurerer dit site (og evt. underliggende virtual dirs) til Basic eller Windows (Challenge Response på NT4), vil den håndtere det for dig. Dvs. at ingen får lov at se din side, med mindre der er authenticated af serveren. Derfor laver du reelt et check på noget som din server i forvejen håndterer for dig.
Du skal være opmærksom på, at med basic authentication sendes password i klar tekst. D.v.s. at Request.ServerVariables("AUTH_PASSWORD") indeholder brugerens password.
Dette er en sikkerhedsrisko der bør overvejes nøje. Det vil eks. være lidt dumt at etablere webmail fra Internettet med basic authentication, med mindre man eks. kompenserer med SSL.
Ja, du kunne jo eks. lave en ActiveX component/script med dk_akj's eksempel, men så skal du være opmærksom på, at mange mennesker slår det fra i browseren så det er umiddelbart ikke en sikker metode.
Hvilken type brugere er der tale om ? totalt fremmede på et offentligt site, medarbejdere på et intranet eller ?
Hvis det er på intranet har du jo muligheden for at tilføje intranetet som en trusted zone, og configurere så der kan køres activex'er uden der spørges.
Jeg har et vbs script der kan tilføje sider til trustede zones. Hvordan er expertens regler ift til at poste vbs'en her ??
Den kommer her på experten så er der andre der har glæde af det også :o) Husk at brug af scriptet er på eget ansvar, det retter i registreringsdatabasen.
//akj
Dim key Dim val Dim main Dim ret Dim currentstate Dim Shell dim domain
domain="pc-akj"
Set Shell = CreateObject("WScript.Shell")
If Not KeyExists("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\"& domain &"\http") Then
main = "HKEY_CURRENT_USER\"
ret = MsgBox("Dette script retter diverse nøgler i registreringsdatabasen så portalen virker korrekt." & vbCrLf & "Klik OK for at køre scriptet" & vbCrLf & "Klik Cancel for at afbryde", vbOKCancel, "FV Portal") If ret = vbOK Then
' tilføj domænet key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\"& domain &"\http" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
' tilføj "my computer" key = "SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\Flags" val = "MyComputer" Shell.regwrite main & skey, val
' ret indstillinger key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1200" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1201" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1400" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1402" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1405" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1406" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1407" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1601" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1604" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1605" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1606" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1607" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1800" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1802" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1803" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1804" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1805" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1A00" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1A02" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1A03" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1A04" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1C00" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1E05" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\Description" val = "Your computer" Shell.regwrite main & key, val
key = "SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\DisplayName" val = "My Computer" Shell.regwrite main & key, val
key = "SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\Icon" val = "explorer.exe#0100" Shell.regwrite main & key, val
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\MinLevel" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\RecommendedLevel" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
main = "HKEY_LOCAL_MACHINE\"
' tilføj domænet key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\"& domain &"\http" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
' tilføj "my computer" key = "SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\Flags" val = "MyComputer" Shell.regwrite main & key, val
' ret indstillinger key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1200" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1201" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1400" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1402" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1405" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1406" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1407" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1601" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1604" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1605" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1606" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1607" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1800" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1802" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1803" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1804" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1805" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1A00" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1A02" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1A03" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1A04" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1C00" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1E05" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\Description" val = "Your computer" Shell.regwrite main & key, val
key = "SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\DisplayName" val = "My Computer" Shell.regwrite main & key, val
key = "SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\Icon" val = "explorer.exe#0100" Shell.regwrite main & key, val
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\MinLevel" val = 0 Shell.regwrite main & key, val, "REG_DWORD"
key = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\RecommendedLevel" val = 0 Shell.regwrite main & key, val, "REG_DWORD" MsgBox "Registreringsnøgler rettet" End If End If
Function KeyExists(ByVal RegKey) Dim Shell Dim ErrDesc(1) Set Shell = CreateObject("WScript.Shell") KeyExists = True On Error Resume Next '===> RegKey = Replace(RegKey & "\","\\","\") ' without the above line of code, the presence or absence of the final "\" ' is what determines whether you are checking for a key or a named value. ' It's then the caller's responsibility to pass the string with a final "\" to ' check for a key, or without a final "\" to check for a named value... '=== Shell.RegRead (vbCr) ErrDesc(0) = Replace(Err.Description, vbCr, "") Err.Clear Shell.RegRead (RegKey) ErrDesc(1) = Replace(Err.Description, RegKey, "") If ErrDesc(0) = ErrDesc(1) Then KeyExists = False End Function
Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.