First of all, I have always developed applications for intranet use only at work. With that said, I have always used my own login screen, separate from forms authentication and session variables that are called on each page through a security class to manage a users access to certain menu items based on their application role(s). I'm now developing a small application that will be internet based and am thinking session variables is not the most secure approach.
I have decided to try and make forms authentication work for my application however, I have run into a problem. I have a specific page that I want to have accessible by anyone and everyone. We'll call it Main.aspx. From that page, i'd like to have the folks with a user account choose whether or not they want to log in.
The problem is when I set up the application to work with forms authentication it redirects the user to the login page, ...
Go to the complete details ...