Imports System
Imports System.Text
Imports System.Data
Imports System.Data.OleDb
Imports System.Web
Imports System.Web.Security
Imports System.Security.Principal


'### CRYPT can be a Cryptography class that can be reused for passwords, cookies etc..
Imports Snitz.CRYPT

'### CONFIG can get all the settings from Web.Config . Things that usually go in config.asp
Imports Snitz.CONFIG

Namespace Snitz
  Public Class AUTH
   
    Private objCRYPT As New CRYPT()
    Private objCONFIG As New CONFIG()
    Private ConnectionString As String = objCONFIG.ConnectionString() 'Get the connection string
    
    Public Function SignIN(ByVal UserName As String, ByVal Pass As String, ByVal SuccessURL As String, ByVal FailURL As String)
       
       '### GetRoles can be another function that connects to Snitz 
       'and grabs the user roles as comma delimited string
       'Password is best encrypted
       Dim UserRoles As String = GetRoles(UserName, objCRYPT.EncryptWithHash(Pass))
       If Not (UserRoles = "") Then
            FormsAuthentication.HashPasswordForStoringInConfigFile(Pass, "md5")
            Dim UserTicket As FormsAuthenticationTicket = New FormsAuthenticationTicket(1, _ 
            UserName, Now(), DateTime.Now.AddMinutes(30), Me.Persist(), UserRoles, _
            FormsAuthentication.FormsCookiePath)
            Dim UserCookie As HttpCookie = New HttpCookie(FormsAuthentication.FormsCookieName, _
            FormsAuthentication.Encrypt(UserTicket))
            If (Me.Persist()) Then
                UserCookie.Expires = UserTicket.Expiration
            End If
            Current.User = New GenericPrincipal(Current.User.Identity, UserRoles.Split(","))
            Current.Response.Cookies.Add(UserCookie)
            Current.Response.Redirect(SuccessURL)
       Else
            Current.Response.Redirect(FailURL)
       End If
    End Function
  End Class
  
  '### Can add GetRoles function here.
   Private Function GetRoles(ByVal UserName As String, ByVal Password As String) As String
        Dim Conn As OleDbConnection = New OleDbConnection(ConnectionString)
        Dim rList As StringBuilder = New StringBuilder
        Dim objCommand As New OleDbCommand("SELECT SQL Statement", Conn)
        
        '### Use parameters to log the user in
        objCommand.Parameters.Add("@USER", OleDbType.VarWChar).Value = UserName
        objCommand.Parameters.Add("@PASS", OleDbType.VarWChar).Value = Password
        		
        Conn.Open()
        Dim objDataReader As OleDbDataReader = objCommand.ExecuteReader(CommandBehavior.CloseConnection)
        
        '### No rows = Not a match
        If (objDataReader.HasRows) Then
              While objDataReader.Read()
                  
                  '### Check which group this user belongs to..
                  ' Remember to add that comma
                  If Not (objDataReader("GROUP_NAME") Is DbNull.Value) Then rList.Append(objDataReader("GROUP_NAME") &",")
              End While
              
              '### Lastly, add the "Member" role.  This closes the list
              rList.Append("Member")
        End If
        objDataReader.Close()
        objDataReader = Nothing
        Conn = Nothing
        Return rList.ToString()
    End Function
  
  End Class
End Namespace

Public Property Persist() As Boolean
    Get
        '### Returns True if checked, false if not
        RememberMe.Checked
    End Get
    
    '### But what if the checkbox needs to be set programmatically?
    Set(ByVal Value As Boolean)
        If (Value = True) Then
            RememberMe.Checked = True
        Else
            RememberMe.Checked = False
        End If
    End Set
End Property

quote:

---

Originally posted by -gary

And your point is what?

---

quote:

---

Originally posted by -gary

This whole open source thing is very over rated to start with and has no bearing on my experience with Snitz, so I fail to see why you would be "shocked" by anything I say.

---

quote:

---

I like about ASP.NET 2.0 is the built in Membership and profiles, but maybe the best route would be to upgrade the forums leaving the data structure as is. I'm flexible on features and such.

---