Securing your application from unauthorized users

Over the last several chapters I showed you how to allow users to post data to your site…and save that data to a database so it could be displayed again later.…At this point, however, anyone with a web browser and an Internet connection is able to comment…and post data to your site completely anonymously.…Clearly, we want some control over who does what on our site.…We don't want just anyone to be able to post an item for auction or anonymously bid on auctions.…In this chapter I'll show you how to address these concerns by locking your site down so…that only authorized users are able to access it.…

Then I'll walk you through the code that Microsoft has already written for you that allows users…to create user accounts on your site and log in to your site with those accounts.…Let's take a look at the biggest security risk on our demo site right now.…The fact that anyone in the world can visit your site and post an item for auction or…submit a bid to an auction completely anonymously.…Luckily, ASP.NET MVC offers a quick and simple way to lock down controller actions through…