ASP.NET 實作 AD 登入驗證

1.修改web.config 加入

＜connectionStrings＞
＜add name="ADConnectionString"
connectionString="LDAP://Lifeacademy.org/DC=Lifeacademy,DC=org"/＞
＜/connectionStrings＞

＜system.web＞
＜membership defaultProvider="MyADMembershipProvider"＞
＜providers＞
＜add
name="MyADMembershipProvider"
type="System.Web.Security.ActiveDirectoryMembershipProvider, System.Web, Version=2.0.0.0,
Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"
connectionStringName="ADConnectionString"
connectionUsername="laaspnet"
connectionPassword="laaspnet000"
attributeMapUsername="SAMAccountName"
/＞
＜/providers＞
＜/membership＞


2.參考加入System.DirectoryServices

3.網頁加入login控制項

SQL SERVER 避免被駭客攻擊的心得

停用預儲程序 xp_cmdshell 並刪除 xplog70.dll

sql 指令全部改用參數化

美FBI防禦網路攻擊的12項建議
http://www.ithome.com.tw/itadm/article.php?c=52845