Say we have a member login area. I dont want to use the built in form authentication method provided by microsoft. I want to do something like storing user identity in a session or cookie, but i am not sure if storing user id and password in sessions is a good implementation? Can I store user id in a session variable and password in another, and then on the master page, i try creating a user object from these two session variables, if failed, redirect? Is this ok?
...
Go to the complete details ...