Neueste Web-Entwicklung Tutorials
 

ASP.NET MVC - Sicherheit


Um zu erfahren, ASP.NET MVC, bauen wir eine Internet-Anwendung.

Teil VIII: Sicherheits Hinzufügen.


MVC Application Security

Die Models Ordner enthält die Klassen, die das Anwendungsmodell darstellen.

Visual Web Developer erstellt automatisch eine AccountModels.cs Datei, die die Modelle für die Anwendungsauthentifizierung enthält.

AccountModels enthält eine LogOnModel, ein ChangePasswordModel und ein RegisterModel:

Modell


Das Passwort ändern Modell

public class ChangePasswordModel
{

[Required]
[ DataType(DataType.Password) ]
[ Display(Name = "Current password") ]
public string OldPassword { get; set; }

[Required]
[ StringLength(100, ErrorMessage = "The {0} must be at least {2}      characters long.", MinimumLength = 6) ]
[ DataType(DataType.Password) ]
[ Display(Name = "New password") ]
public string NewPassword { get; set; }

[ DataType(DataType.Password) ]
[ Display(Name = "Confirm new password") ]
[ Compare("NewPassword", ErrorMessage = "The new password and confirmation password do not match.") ]
public string ConfirmPassword { get; set; }

}

Das Logon Modell

public class LogOnModel
{

[Required]
[ Display(Name = "User name") ]
public string UserName { get; set; }

[Required]
[ DataType(DataType.Password) ]
[ Display(Name = "Password") ]
public string Password { get; set; }

[ Display(Name = "Remember me?") ]
public bool RememberMe { get; set; }

}

Das Register Modell

public class RegisterModel
{

[Required]
[ Display(Name = "User name") ]
public string UserName { get; set; }

[Required]
[ DataType(DataType.EmailAddress) ]
[ Display(Name = "Email address") ]
public string Email { get; set; }

[Required]
[ StringLength(100, ErrorMessage = "The {0} must be at least {2} characters long." , MinimumLength = 6) ]
[ DataType(DataType.Password) ]
[ Display(Name = "Password") ]
public string Password { get; set; }

[ DataType(DataType.Password) ]
[ Display(Name = "Confirm password") ]
[ Compare("Password", ErrorMessage = "The password and confirmation password do not match.") ]
public string ConfirmPassword { get; set; }

}