Questions tagged [anonymousidentification]

14 questions
7
votes
2 answers

Different users get the same cookie - value in .ASPXANONYMOUS

My site allows anonymous users. I saw that under heavy load anonymous users get sometimes profile values from other users. I first delete my cookies and get a valid unique value in the cookie value .ASPXANONYMOUS. After a couple of requests I get a…
Mathias F
  • 15,906
  • 22
  • 89
  • 159
5
votes
1 answer

Anonymous Identification in ASP.NET Core MVC

In the previous ASP.NET MVC, you can turn on the anonymous identification easily by adding 1 line in your web.config: We can use the anonymous identification, i.e., Request.AnonymousID to identify…
David Liang
  • 20,385
  • 6
  • 44
  • 70
2
votes
0 answers

User sign/login without email or phone: anonymous user account login system

I'm creating a login system that doesn't require email, phone, or any other identification, making it completely anonymous, and I'm worried about the implications of a system like this. To summarize, I'm creating a system where the user can login…
tomDev
  • 5,620
  • 5
  • 29
  • 39
2
votes
0 answers

Login SQL using Application Pool Identity and IIS set to Windows Authentication

First I'll explain the setup: I am developing for an Intranet environment. I have a server with Microsoft Server 2008 R2, IIS 7 and Microsoft SQL 2012 that contains all my applications. The IIS is configured to authenticate only using Kerberos. And…
1
vote
1 answer

.net site all pages do a 302 redirect with AspxAutoDetectCookieSupport

First let me say that I did see this article: How to remove AspxAutoDetectCookieSupport However it seems like it fixes the url issue, but not the 302 AspxAutoDetectCookieSupport issue. I've also read just about every other article on the web about…
1
vote
1 answer

How can I detect if a request and response cookies are different?

I need to detect if a request cookie - value is different from a response cookie - value. Its not as easy as: if(cookiesArePresent) { bool isDifferent = HttpContext.Current.Response.Cookies[".ASPXANONYMOUS"].value ==…
Mathias F
  • 15,906
  • 22
  • 89
  • 159
1
vote
0 answers

Brute force, CAPTCHA and unique visitors identification

Some websites we're running have been audited for security issues and one problem is that we don't protect authentification forms against brute force. It has been decided that we would implement a CAPTCHA system after several wrong auth attempts.…
0
votes
1 answer

How would I implement the AnonymousId\Anonymous User functionality found in (classic 4.x) ASP.NET in ASP.NET Core 6 MVC

I want to implement or use the AnonymousId\Anonymous user functionality found in the older ASP.NET MVC 4 system but in a ASP.NET Core 6 MVC application. I have seen 3 NuGet packages which seem to do it but 2 are very old, and the third has very…
0
votes
0 answers

Get the most accurate information about the client

What tools can be used to obtain the most accurate information (Country, City, Browser, mobile, etcera ) about the client request on server. For example IP, maybe an external database. If not, are there alternative ways? Any variants.
Artem Baranov
  • 863
  • 11
  • 11
0
votes
1 answer

Creating and using anonymous ID for user at the same time as creating an Auth uid Firebase?

I would like to know how to create a second (Anonymous) identifier for a user when they are creating an account. The reason for this is I am letting a user create an account so they can be rewarded but I will need to know if they should be rewarded…
0
votes
1 answer

two anonymous user at a time

We are using anonymous identification in asp.net. Anonymous identification creates cookie whenever user lands on our application first time. according to the value of cookie we identify our user and made our business check whenever user lands on our…
Fahad Farooqi
  • 117
  • 1
  • 2
  • 14
0
votes
1 answer

How do you get AnonymousID from cookie ASPXANONYMOUS?

If I have a look at my cookievalue .ASPXANONYMOUS it is a string ie WZnX-rXHygEkAAAAOTFhZjE5YTctZmEzZi00MTMwLWEwNTAtYjYwMzI0N2M0NTY4gQUsRlThiJWAjBgmBnpeIba7eGo1 The value Request.AnonymousID is a Guid. How do you get from ASPXANONYMOUS to…
Mathias F
  • 15,906
  • 22
  • 89
  • 159
0
votes
4 answers

Profile System: User share the same id

I have a strange effect on my site when it is under heavy load. I randomly get the properties of other users settings. I have my own implementation of the profile system so I guess I can not blame the profile system itself. I just need a point to…
Mathias F
  • 15,906
  • 22
  • 89
  • 159
0
votes
3 answers

Ensuring the user cannot register on system even with different email address

I am on creating a system, I am trying to ensure that user cannot register more than once even he uses different email-addresses or he changes its ip, so what strategies should i use ? can I do it with cookies ?
Muaz Usmani
  • 1,298
  • 6
  • 26
  • 48