Hi all,
I create a login system (i don't use login control because the language used in my website is not english ) which puts username into a session variable after validating user account. In each page that needs user login,i have a method to check for this variable. Then,if the user clicks the Logout button,i will set the session["username"] to null and redirect to login page. This works fine if user clicks the logout button when the session hasn't timed out. If he clicks when session timed out, i got the message of page not found. I think that: this may be because session timed out,when user clicks button,he is redirected to login page before the logout method is activated . But i don't know how to fix this problem.
I also want to ask if i implement login system this way,is there any problem regarding security ? I already searched the internet but didn't find a document on creating login system manually in asp.net.
Thank you very much. ...
Go to the complete details ...