Hi,
I am using form auth on a web app using a SQL Server DB. The user is redirected to the login page from any other page if he is not logged in.
The login page has a username and password textbox...with a Stored Proc been used to validate...the SP returns a bolean value. If the username and password are correct...then the user is validated.
How does that security sound. My main concerns are in relation to SQL injections and JS injections...these would not be possible under this setup is that correct? My thinking is that Im using a stored proc...and the user cant get to anypage without been validated.
Any advice appreciated...
...
Go to the complete details ...