<configuration> 
  <system.web> 
 
    <authorization> 
      <deny users="?" /> 
    </authorization> 
 
  </system.web> 
</configuration> 

 
Protected Sub btn_login_Click(ByVal sender As Object, ByVal e As System.EventArgs) Handles btn_login.Click 
        Dim ConnectionString As String = "Provider=Microsoft.Jet.OLEDB.4.0; Ole DB Services=-4; Data Source=" + Server.MapPath("..\db\dbNautica.mdb").ToString 
        Dim myConnection As New OleDbConnection(ConnectionString) 
        Dim user As String = txtusername.Text 
        Dim pass As String = txtpassword.Text 
        Dim sql As String = "SELECT ruolo FROM Utente " 
        sql = sql + "WHERE NomeUtente = '" + user + "' AND Password = '" + pass + "'" 
        Dim myCommand As New OleDbCommand(sql, myConnection) 
 
        myConnection.Open() 
        If myCommand.ExecuteScalar = "user" Then 
            Session("nomeutente") = user 
            Session("Ruolo") = "user" 
            FormsAuthentication.Authenticate(user, pass) 
            FormsAuthentication.RedirectFromLoginPage(user, False) 
            Dim userIDsql As String 
            userIDsql = "SELECT ID, Cognome, Nome FROM Utente WHERE NomeUtente = """ + Session("nomeutente") + """;" 
            Dim command As New OleDbCommand(userIDsql, myConnection) 
            Dim reader As OleDbDataReader 
            reader = command.ExecuteReader() 
            While reader.Read() 
                Session("IDUtente") = reader.Item(0) 
                Session("credenzialiUtente") = reader.Item(1) + " " + reader.Item(2) 
            End While 
            myConnection.Close() 
        ElseIf myCommand.ExecuteScalar = "admin" Then 
            Session("Ruolo") = "admin" 
            FormsAuthentication.Authenticate(user, pass) 
            FormsAuthentication.RedirectFromLoginPage(user, False) 
            Response.Redirect("../Protect/admin/menuAdmin.aspx") 
            myConnection.Close() 
        Else 
            messaggio.Visible = True 
            messaggio.Text = "Nome utente o password errati." 
            myConnection.Close() 
        End If 
    End Sub 
End Class 

 
<authorization> 
      <allow users="*" /> 
    </authorization> 
 
<authentication mode="Forms"> 
      <forms loginUrl="Site/Login.aspx" timeout="30" path="/" name="frmAut" defaultUrl="Protect/myPage.aspx" /> 
    </authentication> 

<?xml version="1.0" encoding="utf-8" ?>
<siteMap xmlns="http://schemas.microsoft.com/AspNet/SiteMap-File-1.0" >
    <siteMapNode url="HomePage.aspx" title="HOME"  description="Nuova Nautica">
      <siteMapNode url="Site/Login.aspx" title ="LOGIN" description="Effettua l'accesso">
        <siteMapNode url="Site/Registrazione.aspx" title="REGISTRATI" description="Registrati ora per prenotare un noleggio"/>
        <siteMapNode url="Protect/myPage.aspx" title="PAGINA PERSONALE" description="Riepilogo dati personali"/>
      </siteMapNode>
      <siteMapNode url="Site/Officina.aspx" title="OFFICINA"  description="Chi siamo" />
      <siteMapNode url="Site/Servizi.aspx" title="SERVIZI"  description="I nostri servizi">
        <siteMapNode url="Site/Vendita.aspx" title="VENDITA"  description="Visualizza le imbarcazioni in vendita">
          <siteMapNode url="Site/GommoniVendita.aspx" title="GOMMONI" description="Visualizza i gommoni in vendita"/>
          <siteMapNode url="Site/BarcheVendita.aspx" title="BARCHE" description="Visualizza le barche a motore in vendita"/>
        </siteMapNode>
        <siteMapNode url="Site/Noleggio.aspx" title="NOLEGGIO"  description="Visualizza le imbarcazioni disponibili per il noleggio">
          <siteMapNode url="Site/GommoniNoleggio.aspx" title="GOMMONI" description="Visualizza i gommoni disponibili per il noleggio"/>
          <siteMapNode url="Site/BarcheNoleggio.aspx" title="BARCHE" description="Visualizza le barche a motore disponibili per il noleggio"/>
          <siteMapNode url="Protect/PrenotaNoleggio.aspx" title="PRENOTA" description="Prenota il noleggio di una delle imbarcazioni disponibili presso la nostra azienda"/>
        </siteMapNode>
      </siteMapNode>
      <siteMapNode url="Site/Contatti.aspx" title="CONTATTI"  description="Come contattarci e raggiungerci" />
    </siteMapNode>
</siteMap>