Home/ Questions/Q 6535349
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-25T10:21:46+00:00

I have noticed that if a user is still logged in or has a

  • 0

I have noticed that if a user is still logged in or has a persistent cookie, even if he gets “banned”, or disabled in the database (Users Table flags), the user can still access everything until that cookie goes away or the user logs out of the site. Great security right.

So I am putting together a ActionFilterAttribute that checks for this, the disturbing thing for me is I have to hit the database for every controller that his ActionFilterAttribute is applied to. There has to be a better way of doing this but I have not found one yet.

Any ideas would be awesome..

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    There has to be a better way of doing this but I have not found one yet.

    No there isn’t. Sorry. If the notion of disabled/banned user exists only in your database there is no other way but hitting your database. ASP.NET only verifies the validity of the authentication cookie which is sent on each request. It doesn’t even know what a disabled user means so you cannot expect it do more than it already does.

    • 0