hello, I have buttons in my master page that allow users to nevigate in the site without log in. I...

this is my login page:

protected void Page_Load(object sender, EventArgs e)

{

Session["admin"] = false;

if (IsPostBack)

{

return;

}

HttpCookie cUserName = Request.Cookies["UserName"];

HttpCookie cPass = Request.Cookies["UserPass"];

/*if (cUserName != null && cPass != null)

{

Login2(cUserName.Value, cPass.Value);

}*/

}

protected void Login1_Authenticate(object sender, AuthenticateEventArgs e)

{

bool Authenticated = false;

Authenticated = SiteLevelCustomAuthenticationMethod(Login1.UserName, Login1.Password);

e.Authenticated = Authenticated;

if (Authenticated == true && Login1.RememberMeSet == true)

{

HttpCookie cUserName = new HttpCookie("UserName");

cUserName.Value = Login1.UserName;

cUserName.Expires = DateTime.Now.AddYears(2);

Response.Cookies.Add(cUserName);

HttpCookie cPass = new HttpCookie("UserPass");

cPass.Value = Login1.Password;

cPass.Expires = DateTime.Now.AddYears(2);

Response.Cookies.Add(cPass);

}

if (Authenticated == true)

{

if (Request.QueryString["url"] != null && !Request.QueryString["url"].Equals(""))

Response.Redirect(Request.QueryString["url"]);

Response.Redirect("About/About.aspx");

}

/* private void Login2(string UserName, string Password)

{////////////NOT USEDDD

bool Authenticated;

Authenticated = SiteLevelCustomAuthenticationMethod(UserName, Password);

if (Authenticated == true)

{

Session["user"] = UserName;

if (Request.QueryString["table"] != null && !Request.QueryString["table"].Equals(""))

Response.Redirect(Request.QueryString["table"], true);

Response.Redirect("/Catalog/Dogs.aspx", true);

}

}*/

private bool SiteLevelCustomAuthenticationMethod(string UserName, string Password)

{

bool boolReturnValue = false;

string strConnection = @"Data Source=SARIT-DELL;Initial Catalog=PetsProj;Integrated Security=True";

SqlConnection Connection = new SqlConnection(strConnection);

String strSQL = "Select * From UserDetail";

SqlCommand command = new SqlCommand(strSQL, Connection);

SqlDataReader Dr;

Connection.Open();

Dr = command.ExecuteReader();

while (Dr.Read())

{

if ((UserName == Dr["UserName"].ToString()) & (Password == Dr["UserPass"].ToString()))

{

boolReturnValue = true;

Session["UserFirstName"] = Dr["UserFirstName"].ToString();

Session["UserLastName"] = Dr["UserLastName"].ToString();

Session["User"] = Dr["UserName"];

// Session["UserDiv"] = Dr["UserDiv"];

}

Dr.Close();

return boolReturnValue;

where do I need to put the session? because I've tried already what you suggested and it always redirect me to the login page (even if the user is logged in)

3 Replies

Know the answer? Post it — somebody with the same question will find it here.

s14y ago
Problem solved, thanks anyway!
0
s14y ago
this is my login page:

protected void Page_Load(object sender, EventArgs e)
{
Session["admin"] = false;

if (IsPostBack)
{

return;
}
HttpCookie cUserName = Request.Cookies["UserName"];
HttpCookie cPass = Request.Cookies["UserPass"];

/*if (cUserName != null && cPass != null)
{
Login2(cUserName.Value, cPass.Value);
}*/
}
protected void Login1_Authenticate(object sender, AuthenticateEventArgs e)
{
bool Authenticated = false;
Authenticated = SiteLevelCustomAuthenticationMethod(Login1.UserName, Login1.Password);
e.Authenticated = Authenticated;
if (Authenticated == true && Login1.RememberMeSet == true)
{
HttpCookie cUserName = new HttpCookie("UserName");
cUserName.Value = Login1.UserName;
cUserName.Expires = DateTime.Now.AddYears(2);
Response.Cookies.Add(cUserName);

HttpCookie cPass = new HttpCookie("UserPass");
cPass.Value = Login1.Password;
cPass.Expires = DateTime.Now.AddYears(2);
Response.Cookies.Add(cPass);
}
if (Authenticated == true)
{
if (Request.QueryString["url"] != null && !Request.QueryString["url"].Equals(""))
Response.Redirect(Request.QueryString["url"]);
Response.Redirect("About/About.aspx");
}

}

/* private void Login2(string UserName, string Password)
{////////////NOT USEDDD
bool Authenticated;
Authenticated = SiteLevelCustomAuthenticationMethod(UserName, Password);
if (Authenticated == true)
{
Session["user"] = UserName;
if (Request.QueryString["table"] != null && !Request.QueryString["table"].Equals(""))
Response.Redirect(Request.QueryString["table"], true);
Response.Redirect("/Catalog/Dogs.aspx", true);
}
}*/
private bool SiteLevelCustomAuthenticationMethod(string UserName, string Password)
{
bool boolReturnValue = false;

string strConnection = @"Data Source=SARIT-DELL;Initial Catalog=PetsProj;Integrated Security=True";
SqlConnection Connection = new SqlConnection(strConnection);
String strSQL = "Select * From UserDetail";
SqlCommand command = new SqlCommand(strSQL, Connection);
SqlDataReader Dr;
Connection.Open();
Dr = command.ExecuteReader();
while (Dr.Read())
{
if ((UserName == Dr["UserName"].ToString()) & (Password == Dr["UserPass"].ToString()))
{
boolReturnValue = true;
Session["UserFirstName"] = Dr["UserFirstName"].ToString();
Session["UserLastName"] = Dr["UserLastName"].ToString();
Session["User"] = Dr["UserName"];
// Session["UserDiv"] = Dr["UserDiv"];
}

}
Dr.Close();
return boolReturnValue;

where do I need to put the session? because I've tried already what you suggested and it always redirect me to the login page (even if the user is logged in)
0
Sukesh Marla14y ago
Do One thing, After Login Create A sesesison Variable say UserId and store values inside it.
if (Session["UserId"]!=null) Response.Redirect("~/CheckOut.aspx"); else Response.Redirect("~/Login.aspx", true);
after logout do Session.abandon();
Chec this is corerct answer if it helped
0