c# - Http session issue -
I met the strange session issue. I have developed a web site that uses the session to track user specific information to determine if a particular user is allowed to access a portion of the web site. I am using VSTS 2008 + .NET 3.5 + C # to develop ASP.NET web site.
In my design, when I sign in, if no session ID is available, then users will be asked to input their username and password (if pass passwords check, available session ID given Will go); If session ID is available, it means that the user's site management is permitted and authenticated, then all the functions of the site manager are accessed by the user - that is, all login users have permission to use Site Manager.
The problem is such a problem,
- I'm using a new IE window because I have not signed in earlier, and I use my credentials
- Then I enter (IE not closed) to enter the address bar of the same IE window, Google apprears,
- to enter Paste address in the same IE window, I wonder if I'm not asking the input password For the sake of
What is a wrong idea? What I want to do is in phase (3) The user should be asked with input password.
Session state only if the user deletes the session cookies that your server has given it, then lost it Will not request for user duration ( session.timeout
property) period. Or if you leave it in your code
Comments
Post a Comment