I currently have an iOS app that is built and functioning except for one slight problem. I would like to retain CAPTCHA whenever an anonymous user creates an account via the web (using Drupal's user registration form). However, I would like to have another URL that houses the same Drupal registration form (without CAPTCHA) so that users can create an account from within the iOS app (app connects to Drupal site using Drupal iOS SDK and userRegister function).
Is this possible in Drupal 6? Is there a way to clone the user_register form such that the original form has CAPTCHA and lives at mysite.com/user/register whereas user_register_clone form does not have CAPTCHA and lives at mysite.com/user/register/mobile?
Thanks in advance and have a great day/night!!!!
In the autoassignrole (http://drupal.org/project/autoassignrole) module there is a clear example of cloning the user register form and creating a register process in a different page than register.
The module assign user roles based on the path the user is creating the account from.
So you could check the module's code for examples.
Related
I'm trying to limit the ability for user accounts to be created. My host has noticed spam activity on my account and has suggested that it is being generated by accessing the user account creation script directly.
When I try to access that feature in Drupal 7, the Setting tab doesn't render correctly. Fields and Display tabs function correctly.
Screen Snap
If your host is right about the script being accessed directly, then your site might be hacked.
Since you also have problems with rendering of the settings tab, I would execute these steps in this order:
Follow the instructions for updating Drupal, starting with backup of
the database and the files:
https://www.drupal.org/docs/7/updating-your-drupal-site/update-procedure-minor-version-change
Set secure permissions for files and folders: https://www.drupal.org/node/244924
The second step alone might help stopping the user creation by direct access to the script, but it will not get back the original settings tab.
In back-end go to Configuration -> People -> Account settings. There is a section Registration and cancellation and Who can register radio buttons group where you can forbid anonymous user create account. If that's already set well and people are still registering then it really is possible that your site has been hacked.
hi i would like to know how would you lougout an user if he modifies the url or refreshes the web pages like in bank web sites
in asp .net.
Thanks for your answers
I have implemented a solution similar to Vignesh Kumar's answer by using roles and restricting access to pages based on the roles a user has. When a user logs in I check which pages they can access based on their assigned roles and build the navigation menu accordingly so that they're not able to navigate to restricted pages.
In my master page's Page_Load method I check whether a user has access to the page they're trying to access and if not I log them out and redirect them to the login screen.
i have created an intranet website using visual studio(c#) , i have published it as well and it works fine . the website has a registration page and lets user to create accounts , my problem is whenever someone registers in website , i would like to see the list of registered users and assign them permissions(member , guest , admin etc) so that not everyone who register can see the protected content
how do i do this , do i use visual studio's ASP.NET CONFIGURATION PAGE for this?
am a complete beginner in asp , can some one please guide.
You can accomplish this by using roles in .Net. When a new user is created just have them have a default role of guest. Then you can create a notification that gets triggered by a new user registration such as an email, then you can review the list of users and edit a user to have a specific role.
Documentation can be found here - http://msdn.microsoft.com/en-us/library/5k850zwb(v=vs.100).aspx
We have third party applications I need to link from my application. Where for those third part web sites I have user name and password with us (They are public websites). When the user click on those links we need to prefill user name and password and submit the form. Like single sign on kind of experience for the user. Is anyone tried doing this how we can do it. We need to open the web page with in Iframe or with in DEV ?
ASP.NET, Jquery and Java Script our platform.
I ended up getting the login page into my project and towards the end with jquery I posted the form filling the the user name and password. Not good solution but it works well
I Want Set Access level user For Buttons in the forms. example in the each form i have Add , Edit ,search and Delete button and I want user1 access to delete and update button in the form 1 and user 2 access to all buttons in each forms.
i create Table for Save Forms Name and Create other Table for Save User Profile and create table for save access User to forms and button. But I do not know how these settings in the form.
In any form is when you load the data read from the database?And to apply settings or Can I do this, write a general function,That automatically does this for every form????
thanks all
The following link was of great help when I encountered the same problem (it is for asp.net 2.0 but applies to the newer versions):
Recipe: Implementing Role-Based Security with ASP.NET 2.0 using Windows Authentication and SQL Server
SO in few words, you need to set up the Roles and then use them to enable access to users according to their roles. Enabling buttons and disabling buttons in a form can happen in the code behind utilizing the Roles.
For example you can use this piece of code if you have setup a role called Administrators:
If User.IsInRole("Administrators") Then
'Do something only admins are allowed to-do
End If
I hope that this is helpfull.