asp question
- Started
- Last post
- 5 Responses
- blindpilot
i need to get the windows login via asp/vbscript.
i can't use .net or php.
anyone ? any ideas??
- lostnation0
Request.ServerVariables("AUTH_US... will give you the username given to loginto the app if it is password protected; not sure if you can get the windows login though
- Kevin_Sweeney0
you mean the username and password they use to log on to windows? um...it *might* be possible, but that seems like a HUGE security risk so I doubt its possible. think about it, grabbing their IP from asp/php is a piece of cake to begin with -- all you'd then need to do is have a worm/trojan that downloads onto their computer opens up a port on their computer and then you'd have complete access to all of their files. unless that's what you're trying to do =P
- Kevin_Sweeney0
scratch that, you probably wouldn't even need any malware to log on remotely.
- _lp0
Are these logins coming from your pages, or are you trying to 'hak' them from a site??
bit more explanation would help us help you!
- blindpilot0
basically it is for an intranet type app for a client.
they use citrix, which is like terminal services, to log in to the central server, where everything is situated.
i have found out how to do it though. the site must not have 'anonymous access' selected and should use basic windows authentication,
this means that the LLOCAL_USER environmental var is populated and is easily got.
it was only to avoid a login to the server and a separate login to determine peoples 'security clearance'.
whether it is a security issue or not, i don't know, but for our client, the 'security clearance' is to tailor there UI, not to protect anything sensitive.
thanks anyway guys