I am using asp.net membership provider for sign-up/login. While user login, I create a session variable Session["UID"]. I am facing a particular problem. Now I am facing two problem with Session variable.
1. After particular time interval, session get abandoned, but user is still logged in.
2. If any unhandeled exception occure, then session variable loses its value, while user is logged in.
Following is my code:
[HttpPost]
public ActionResult LogOn(LogOnModel model, string returnUrl)
{
if (ModelState.IsValid)
{
if (Membership.ValidateUser(model.UserName, model.Password))
{
Session["UID"] = new Guid(Membership.GetUser(model.UserName, false).ProviderUserKey.ToString());
...
}
}
}
What is wrong with my code? I am fairly new with membership provider.
...
Go to the complete details ...