Password protect posts and pages in BlogEngine

10. March 2012 14:49 by rtur.net in Security  //  Tags: , ,   //   Comments (6)

MB_0024_LOCKSometimes you might want to protect individual posts or pages with a password so that only users you sent password to can access this resource. Not exactly wide-spread scenario, which explains why it is not currently supported by BlogEngine. But when you need it you need it, and this extension should cover the basics. More...

Quick and dirty role management in ASP.NET MVC

3. June 2009 20:24 by rtur.net in Asp.net MVC, Security  //  Tags: , ,   //   Comments (5)

Rl-0Wrapper around standard Membership provider that ships with ASP.NET MVC 1.0 out of the box fit well common scenario for social websites with self-registration and all users treated equal. When you have more complex requirements, in portal-like style application, you are very much out of luck. Account controller that comes with MVC 1.0 has very limited user management implementation and does not go into role management at all. It would be nice to have role management implemented the same way as account management, but if you need to roll right away I’ll show you quick and dirty way of doing basic user/role management with what we have now. More...

Using machineKey with ASP.NET Membership

30. March 2009 20:42 by rtur.net in asp.net, Security  //  Tags: ,   //   Comments (4)

mbrship-1Either you run your web site in the shared hosting environment or on your local IIS server, you likely have several ASP.NET applications running in the same root directory. Each of them can be configured as a separate web application and run totally independent from others. Although BlogEngine is not (yet) multi-blogging platform, you can easily run bunch of BlogEngins on the same root for number of bloggers. Lets say, you have 3 bloggers contributing to your site and you want each of them have their very own blog, then you create similar structure: More...

Fighting spam with Waegis

24. November 2008 17:20 by rtur.net in Security  //  Tags: , ,   //   Comments (9)

spam4Are you getting a lot of spam lately? BlogEngine has built-in filter and it worked just fine for me up until now. But for the last couple of months I got some spam getting through. Not a hole lot yet and sources seem to be pretty obvious so that I probably could’ve easily block it myself with simple home-made solution, but I decided to use it as an opportunity to take a look at big boy’s spam fighting machines. More...

Securing images in Asp.Net

16. November 2008 17:55 by rtur.net in Security  //  Tags: ,   //   Comments (1)

sshot-33This post is a sequel to Keeping things private and will explain how to secure images so that only authenticated users can see them. This is relevant when you want to publish private album on the web. All image files in the web application are viewable by default, you can right-click any image to see information about it in the properties, you can load image into browser directly (just type in http://rtur.net/blog/pics/rssbutton.gif for example), you can download any image by saving it to the local drive etc. Obviously, with private albums you don’t want this kind of behavior. More...

Keeping things private

1. November 2008 16:59 by rtur.net in Security  //  Tags:   //   Comments (4)
prvt-1

Blogging is all about openness, spreading and sharing. Most likely you want as many eyeballs on you blog as possible and blogging software, naturally, optimized for doing just that. But what if you want to keep things private? May be you keep your personal diary online because you want to have access to it from anywhere or you want members only blog for friends or family? Yes this is true that you might look for alternative first and get specialized software, but if you already feel comfortable with BlogEngine, well, you know that story about hammer and nail, right? More...

Recent Tweets

Twitter May 15, 19:37
Trying to figure out if Linux Mint need an upgrade. And I thought Windows versions complicated. Is that LMDE thing what I need for my Nadia?

Twitter May 2, 20:36
So Channel9 metro app is limited compared to website and will launch IE if I try to download video... why would I use it instead of web?

Twitter May 1, 17:46
Back to the business after a week completely off the grid. It always sunny in Mexico :)

@rtur