Home/ Questions/Q 6163189
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-23T21:47:00+00:00

How can i make something like this in MVC3 where i can still use

  • 0

How can i make something like this in MVC3 where i can still use [Authenticate] in the controller (or in a filter that is applied to all pages except the login page) ?

  1. User enters username and password which gets sent to the server as a post request.
  2. Application receives the posted information on the login page [httpPost]
  3. Application creates a new unique SESSIONID and writes it to the database
  4. Application requests that the browser writes a cookie with value SESSIONID=
  5. The next time the user requests a page cookie with SESSIONID= gets send everytime. (until it expires or is deleted)
  6. Application compares SESSIONID and IP address, which has been sent and checks if it exists as a valid session with that IP in the database. (Some session cleanup will be performed on login as well, users other sessions that exists will be removed)

This approach, seems to be rather difficult for me in ASP.NET. 🙂

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    This is already build into Asp.Net. I think you should have a look at the Membership provider
    => http://msdn.microsoft.com/en-us/library/yh26yfzy.aspx

    • 0