in my first project, i have used 2 textboxes for username and password and button control. when user enters his credential and click on button then it checks the existance of user and when find it then redirect to a secure zone. There is only 2 users on website. I have used following code in config file:
<location path="noticezone">
<system.web>
<authorization>
<allow users="mac"/>
<deny users="*"/>
</authorization>
</system.web>
</location>
<location path="libraryzone">
<system.web>
<authorization>
<deny users="*"/>
<allow users="jac"/>
</authorization>
</system.web>
</location>
In above code only mac is authenticated to access in notice zone of site and only jac is authenticated to access libraryzone of site.
Is there any security related issue or hacking issue.
...
Go to the complete details ...