Session in asp using cookies

Austin Muts

10y809.NET

I am using cookies (cookieless= AutoDetect) for my website.How can i control a session eg logoff a user who has been inactive for an hour and also lock out a user account if a user tries more than 4 times to login.Lock out a user for an hour and allowed back again.

Thank you in advance.

2 Replies

Know the answer? Post it — somebody with the same question will find it here.

Austin Muts10y ago
It cant work because i am using cookieless Forms Authentication

FormsAuthenticationTicket ticket = new FormsAuthenticationTicket(
1, // ticket version
this.Username.Text.Trim(), // authenticated username
DateTime.Now, // issueDate
DateTime.Now.AddMinutes(30), // expiryDate
true,
// true to persist across browser sessions
// userData, // can be used to store additional user data
FormsAuthentication.FormsCookiePath);
string encryptedTicket = FormsAuthentication.Encrypt(ticket);

HttpCookie AuthCookie =new HttpCookie(FormsAuthentication.FormsCookieName, encryptedTicket);
AuthCookie.HttpOnly = true;
AuthCookie.Secure = true;
AuthCookie = FormsAuthentication.GetAuthCookie(Username.Text, true);
AuthCookie.Expires = DateTime.Now.AddMinutes(30);
Response.Cookies.Add(AuthCookie);
FormsAuthentication.RedirectFromLoginPage(Username.Text, false);
Raja T10y ago
Hello Austin, Please refer below links

http://www.aspdotnet-suresh.com/2015/04/lock-user-after-3-attempts-in-aspnet-using-csharp-vbnet-with-example.html

http://forums.asp.net/t/1999074.aspx?How+to+enable+account+lockout+after+3+failed+login+attempts+in+ASP+net+web+pages+site+

http://www.dotnetfunda.com/forums/show/10534/lock-account-after-3-unsuccessful-attempt

https://msdn.microsoft.com/en-us/library/ms178581.aspx