A user has logged a complaint stating that he was working on a page then when the next page loaded, his username displayed at the top of the page (using asp:LoginName) was switched to somebody else! He also said he tried to logout and then log back in and it still showed the other user.
This is obviously very concerning for me. I'm not sure how this happened and I can't reproduce it. I suspect it has something to do with some/many concurrent users on the site but I don't know for sure.
It's an ASP.NET 3.5 app using forms authentication and cookieless is set to UseCookies. I do have a User class that I instantiate before each database interaction to get the userId. Here's the class.
public class User
{
MembershipUser _user = Membership.GetUser();
public Guid UserId
{
get { return GetUserId( ...
Go to the complete details ...