How to set logout option after login

Akhilesh Patel

14y12.5k.NET

I made a login page and it's working and now i want to set logout status
i'm doing but not success till now .............
please help me..............Thanks a lot of you.........

4 Replies

Know the answer? Post it — somebody with the same question will find it here.

Jimmy Namgail13y ago
Hi Anuja, i have checked what you have mentioned here but its not working properly, the problem is if i logout... the control goes to homepage then if i click on back button of internet explorer then it again goes to that page from where i logged out....i think it shouldn't be happend like this..it should give message like..session expired..
+1
Anuja Pawar14y ago
Hi Akhilesh,

How to make secure web application
Step1->The best way to add logout button in your master page instead of each page in your application

Demonstration:- LinkButton ID="lnk" runat="server" Text="Logout" ForeColor="white"
   onclick="lnk_Click" CausesValidation="false">asp:LinkButton>

Step2-> Now remove the session from cache, To do it, write the following code in page_load event of your master page in which you have logout button.

Demonstration:-

   protected void Page_Load(object sender, EventArgs e)
   {
       Response.Cache.SetCacheability(HttpCacheability.NoCache);
   }

Step3-> Now write the following code in click event of link button

Demonstration:-
     protected void lnk_Click(object sender, EventArgs e)
   {
   Session.Abandon();
   Response.Redirect("~/Home.aspx");
   }

After performing all these steps your logout button will perform fine,
If you want to make more secure of your web application then you need to add Global.asax file in your web application. We define an event in this file that will perform globally and provide security from intruders.

Step1-> *Right click on your web application .
   *Add new item.
   *Add Global.asax file.

Step2-> Write a function in your Global.asax file as mention below.

     void session_start()
   {
   if (Session["usr"] == null)
   {
   Response.Redirect("~/Home.aspx");
   //Here you can write the address of your home page or index page
   // Or which you want to make start page.
   }
   }

Now your web application is secure. If any one paste the url of any page of your web application in the browser but browser will show only home or index page of your web application insteade of appropriate page. This is because your Global.asax file that works globally.
+1
Krishna Garad14y ago
put this Loginstatus on your master page


                        [ Log In ]


                        Welcome !
                        [ ]


and in masterpage.cs page create event called Logged_out where you can write the code to log out the user.
0
Satyapriya Nayak14y ago
Hi Akhilesh,

Please refer the below links

http://www.codeproject.com/Articles/210993/Session-Fixation-vulnerability-in-ASP-NET

http://www.codeproject.com/Tips/135121/Browser-back-button-issue-after-logout.aspx

Thanks
0