I'm thinking of adding login/registration to my personal site...

Not sure what scenarios this will be used to enable in the long run, but I might play around with some web services (with authentication) and a few 'prototypes' for articles and MSDN features that I've been musing about...

  • Do you run a personal site?
  • Do you have any form of authentication?
  • What do you use to handle it (I'm planning Forms Authentication against SQL Server)?
  • What do you use it for?

this is for <www.duncanmackenzie.net> ... which is quickly becoming my little sandbox for asp.net code :)

Comments

  • Anonymous
    July 26, 2004
    Duncan,

    I use FormsAuthentication against SqlServer for RegexLib.com. I use it to authenticate the owners of patterns via direct website access as well as via webservice access.

    Basically, in a WebService scenario I pass AuthenticationTickets around.
  • Anonymous
    July 26, 2004
    I'm not sure if you've seen it or not, but here's a great article about using Forms Authentication with SQL Server 2000. http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetHT03.asp
  • Anonymous
    July 26, 2004
    Yes
    Yes
    Forms Auth
    ID'ing anyone permitted to add/edit content*

    * - works great for stopping comment spam. Stops comments too, but that's besides the point. Allows just me to update the photo album, or a friend to update the news if they ever want to. Lets me edit pages from anywhere, etc.
  • Anonymous
    July 26, 2004
    I use FormsAuthentication against a SqlServer for my sites. I simply store the hashed password so there is no risk of plain text sniffing. I have found there to be too many spiders that just crawl around leeching up every bit of content for redistribution.

    I know several people who host code examples that have added free registrations to protect their code from automated leeching.
  • Anonymous
    July 26, 2004
    I put some simple protection on my personal site to guard some mildly personal pictures.

    What I did was use a simple form combined with a few lines of ASP to verify against a hard coded password. The password was a combination of my birthdate & middle name and that's clearly stated at the login. I used those things cause it's stuff only the family and close friends would know offhand.

    It offers all the protection I needed and it literally took all of ten minutes to make.
  • Anonymous
    July 27, 2004
    I use forms authentication against SQL Server too. I basically use it for permissions for content management right now, but I think I'll soon show certain content only to select individuals. I doesn't hurt, you can always give people the option to remain anonymous.