Session Management

iswarya chandran

Hi .,

iam making an web application in that when the user login i just assign session to them to login.. when they logout i cleared the session.. but when we click the back and front button in the browser the previous page be loaded after logout.. so here how can i maintain session for each page..

please give me the idea..

14 Replies

Know the answer? Post it — somebody with the same question will find it here.

Sunny Sharma13y ago
Accepted answer
I think your problem is content caching at client side.

Add this to your Master Page / Base Page- Page_Load:

Response.AddHeader("Cache-Control", "no-cache, no-store, max-age=0, must-revalidate");

It should work.
Iftikar Hussain13y ago
please mart it answer so that it will help others.

Regards,
Iftikar
Sunny Sharma13y ago
you're always welcome, I'm glad i could help.
Iftikar Hussain13y ago
no problem.

Regards,
Iftikar
iswarya chandran13y ago
sir,, its working..

am very thankful to you both for giving me such a wonderful explanations and spend your valuable time with me..

thank you sir..
Iftikar Hussain13y ago
you can set no-cache in Base page

public class BasePage: System.Web.UI.Page
{
protected override void OnLoad(EventArgs e)
{
Response.AddHeader("Cache-Control", "no-cache, no-store, max-age=0, must-revalidate");
base.OnLoad(e);
}
}

Regards,
Iftikar
iswarya chandran13y ago
@Iftikar sir,,

yes sir if i cleared browser history it works.. but for me once logged out it should reloaded.. without clearing the browser history too the page should be go to login page..
iswarya chandran13y ago
@Sunny sir,,

in master page where can i add this code??
Iftikar Hussain13y ago
the page will be displayed from browser history. If you click on the page, then it will redirect to sessionexpired page. For testing once you log out just clear your browser history and then check

Regards,
Iftikar
iswarya chandran13y ago
sir, i checked that too..

after logging out if i press back button in the browser the previous page will be displayed.
Iftikar Hussain13y ago
create one base page as i shown you earlier and inherit to all your page

Regards,
Iftikar
iswarya chandran13y ago
sir,
am using master page with 2 menus.. first menu having admin login option.. once logged in 2nd menu get appear.. like add profile etc.,

In the master page
if (session["Admin"]="A")
{
          menu1.visible=false;
            menu2.visible=false;
        }
        else
        {
          menu1.visible=false;
            menu2.visible=false;
        }

In the login page i assigned session as
                                session["Admin"]="A";
                          Response.Redirect("~\User.aspx")
and if i give as u said in Add profile page load event, it wont go inside tht page aftr login too..
Iftikar Hussain13y ago
Hi,
try like this
if you are using Master Page in Page_Load

protected void Page_Load(object sender, EventArgs e)
{
if (Session["CurrentUser"] == null)
{
Response.Redirect("SessionExpired.aspx");
}
}

//the below approch need to follow, since session will expire after defined time(in web.config)
if not master page, then create on base page and check session there

public class BasePage : System.Web.UI.Page
{
protected override void OnInit(EventArgs e)
{
ValidateSession();
base.OnInit(e);
}
private void ValidateSession()
{
if (Session["CurrentUser"] == null)
{
Response.Redirect("SessionExpired.aspx");
}
}
}

inherit this base page to all your page like this

public partial class UserProfile : BasePage
{
}

Regards,
Iftikar
Sunny Sharma13y ago
Hi iswarya,

You just don't need to maintain session for all the pages. Just check the Session variable to be true at page_load of or may be on a single master page if you're using Master Page. If the session variable is false then redirect the user to login form. Below is the pattern:

............. Page_Load(....)
{
bool userLoggedIn=false;
        try
          {
          userLoggedIn=(bool)Session["userLoggedIn"];
          }
catch { }
if(!userLoggedIn)
        {
          Response.redirect("Login.aspx");
        }

}

------------------

Happy Coding :)

Cheers!