Question

I have an ASP.NET page called admin.aspx that needs to be protected from direct access.

I want it to be accessed only when the user enter his name & password in another page called login.aspx.

I’m working in ASP.NET with Visual Basic .NET 2008, and I have no idea how to do it.

How can I do it?

Answer 1

I found it :

In the login page (“login.aspx”) do this :

Session("Name") = "Yes"

Response.Redirect("admin.aspx")

In the admin page (“admin.aspx”) this :

If Session("Name") = "Yes" Then
    'You can here display anything you want, or just leave it blank
Else
    Response.Redirect("ErrorPage.aspx")
End If