My website currently uses forms auth, which most references have said is the best method. Some people are saying that session variables and a custom auth method of checking for the user class being present is preferable. Any experts out there able to elaborate on this? I want to implement the best design and if switching to session auth. is the way to go the sooner i make that switch the better. :)
What way would you recommend and is there any major pitfalls to the other approach? As I see it, having to check for the user object being present for each page in session could be a pain, but for most pages I may need to do that anyways.
Thoughts?
Thx,
Rob
...
Go to the complete details ...