Question

I am writing a website that very explicitly requires a login wall.

Visitors should be required to log in before they are allowed to view a page.

The page being built depends very much on the user’s “ID”. I am not sure how or where to store the user’s login.

I am not sure whether I should use a session variable (e.g. Session["userId"]), or some other method. The problem I see with session variables is that it’s difficult to time out sessions.

Note: I’m using C# 3.5 with ASP.NET in Visual Studio 2008.

Answer 1

One of the idea is to use form authentication.

FormsAuthentication.SetAuthCookie(txtUserName.Text, true);
Response.Redirect("pagename.aspx");

The true part is that user password is saved to the browser cookie.