Re: Problems to logout without a loginstatus in vs2008

ClaCS — Sun, 05 Jul 2009 12:18:26 GMT

Thanks. I'll try with that code

Re: Problems to logout without a loginstatus in vs2008

akhhttar — Sat, 04 Jul 2009 07:30:50 GMT

Hi,

In master page you need to have following code to disable Back button fuctionality by disabling client side content caching,

Response.Buffer = True
Response.Cache.SetCacheability(HttpCacheability.NoCache)
Response.ExpiresAbsolute = DateTime.Now().AddDays(-1)
Response.Expires = -1500
Response.CacheControl = "no-cache"

Thanks

Muhammad Akhtar Shiekh

Problems to logout without a loginstatus in vs2008

ClaCS — Fri, 03 Jul 2009 17:11:50 GMT

hi!

I have a little project with forms authentication

web.config
--------------
<authentication mode="Forms">
      <forms defaultUrl="~/Login.aspx" loginUrl="~/Login.aspx" />
    </authentication>

I have 2 roles ('admin' and 'user') and, for the moment, 3 pages

Login.aspx (with a login control)
admin/adminPage.aspx
user/userPage.aspx

admin web.config
----------------------
<authorization>
            <allow roles="admin" />
            <deny users="*" />
        </authorization>

user web.config
---------------
<authorization>
            <allow roles="user" />
            <deny users="*" />
        </authorization>

the adminPage.aspx and userPage.aspx have a masterpage

The login process is correct, the 'admins' enter to admin's pages and the 'users' enter to user's page

The masterpage has a button (ID=btnLogout) and a loginName control I try logout dynamically with this button but I can't

I try with differents codes on the btnLogout_click

FormsAuthentication.SignOut()
Context.User = Nothing
Session.Abandon()
Session.Clear()

and FormsAuthentication.RedirectToLoginPage

When I press the button the browser shows me the Login page :) but When I press the back button (on the browser)
it shows me the last visited page (admin/adminPage.aspx if the last user was an 'admin' and user/userPage.aspx if the last user was an 'user')
It seems the logout process didn't close the session totally (or correctly)

so... How Can I do logout dynamically?? ...I need do it without a LoginStatus

sorry for my english :)

Regards

Security

Re: Problems to logout without a loginstatus in vs2008

Re: Problems to logout without a loginstatus in vs2008

Problems to logout without a loginstatus in vs2008