Login Form with Remember me Featuers

P.S. This technique is generally used to implement "Remember me" feature. There are some modifications that you can find on the net, but nothing spectacular - they all base their operation on combination username/token somehow stored in the client cookie.

This implies serious security questions. By stealing the cookie, someone else can log in instead of the user. However, user must think of that outcome and not click "Remember me" if he's not confident that nobody is going to steal the cookie, it's as simple as that.

Make sure that cookie expires (and gets deleted) in reasonable time, e.g. seven days. That will reduce the security risk. Another measure to protect user is to limit access rights when user is automatically logged in. For example, user which has not manually logged in, but was logged in using the token from the cookie, cannot perform payment, cannot change password or email, or do any other change to his profile. Such user can only view information from the site, but as soon as he tries to make any modifications, proper login form would be presented to actually verify identity.

Zoran

you can develop such apps easily by using login control as well as custom system too. there are many project on this site look on [Our recommended articles]. 

http://www.c-sharpcorner.com/UploadFile/abhikumarvatsa/1686/

above article has no any remember me checkbox but when you login browser will ask to save the session. well, if you wish to do so then you have to save the session when you check the box. if user not check the box then, create the session for some time. I have listed here some suggested urls

http://vbcity.com/forums/t/143578.aspx

http://www.codefixer.com/codesnippets/cookieLogin.asp

http://www.daniweb.com/web-development/aspnet/threads/30505

You can store a cookie at the client which contains two pieces of information:
- username - that is username under which user has successfully logged in last time (and checked the "Remember me" checkbox)
- token - randomly generated value stored in database for that user last time when user has successfully logged in.

When user arrives again, you check whether the same token is stored in database for that user. If so, then automatically login the user and create new token for him.

Hope this is sufficient for you to implement the feature. Don't hesitate to ask more questions if you need more help on this.

Zoran