I have a sql server 2005 as database and asp.net 3.5.
When I started my website, I was not familiar with asp.net authentication. Authentication seemed very tedious and tipical to me, so I used session variable to login.
In my website, when username tries to login, his/her username and password is matched with the username and password in database, if they match , user successfully logs into the website and a 'session[username]' is created for him/her.
At remaining pages, at page load , I check for the session[username] . If session exits, the page opens otherwise user is told to login again and redirected to the login page.
So, my question is this;
Can I use session for authentication...(its working fine but I m worried about security issues). ?? How it is vulnerable ??
Can someone provide me an easy way to use asp.net authentications..which can check user details at database ???
...
Go to the complete details ...