PLZ READ! Security Suggestions Needed.

[Anon]

I need login, on a Widows XP machine with IIS 5.1.

I need suggestions on how to make secure login, i would like to stay away from cookies, since people can block these.

If anyone knows a working method, that is secure and simple to use, and edit. Please let me know.

This is for a schools intranet, that has about 3000 High School students, half of which think they are hackers, and would like to get access to anything the staff has.

So I need to make this secure to impress the administration.

[Anon]

can you use .htaccess with IIS? im not too savy w. windows servers...

-m

[[deleted]]

"i would like to stay away from cookies, since people can block these."

... people can block everything. Truth is that people hardly ever block cookies (unless they are paranoid fools)

Doesn't IIS have some builtin security things like htaccess?

otherwise, just get over your cookie hangup and use cookies. Saves you a lot of trouble.