Access the answers to your technology questions today.
Subscribe Now
30-day free trial. Register in 60 seconds.
What Makes Experts Exchange Unique?
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
Subscribe Now
30-day free trial. Register in 60 seconds.
Join the Community
Give a Little. Get a Lot.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Join the Community
by: tedbillyPosted on 2008-07-20 at 13:02:54ID: 22046748
The cookie is actually a mechanism to store the session identifier. If the session times out it will override the cookied timeout.
ctFromLogi nPage() means you are completely bypassing the 'Forms Authentication' workflow. For example, your code to check the authentication is totally unnecessary. .NET does that work for you if you use 'Forms Authentication' without the bypass.
/QuickStar tv20/aspne t/doc/secu rity/ forms auth.aspx it looks very simple compared to your code and it works. Other than a different authentication provided and UI I've used the identical algorithm for dozens of web applications on all versions of .NET.
By the way, the fact that you aren't using FormsAuthentication.Redire
That function tells the run-time that the user is logged in.
When you look at this sample: http://quickstarts.asp.net