How to implement Secure web page navigations in asp.net ?

Question

Hello am vinayak i want to know how to make secure web pages in asp.net am storing user name in session after login using that only am checking only if session is empty or not but how to avoid the problem when any one try to open the page he/she will get the page since the session will be there how to implement the secure page like in hotmail if you try to open the url from diff system it will not allow to open it will navigate to login page. my main point : 1)how to avoid others to open my web pages when i am logged in or if am logged out. 2)how to make session empty when we will cancel the tab or close the browser. thanks in advance

Vishal Jadhav · Answer

Best way is to assign role to the user. You can implement it as per suggestion of Rddhi. And if you want pure redirection to another page use a WebRequest and WebResponse. By implementing this two classes eg. On page redirection and on target page's page load you can achieve desired result. Thanks.

vinayak ghanti · Answer

hello vishal sir if some one directly accessing child page how to redirect him to login page i tried with checking empty session but it will work for only if session is empty when i logged in that time its not working allowing me to access child page directly

vinayak ghanti · Answer

thank you Vishal Jadhav i got it

vinayak ghanti · Answer

thanku you Riddhi Valecha

Riddhi Valecha · Answer

Hi... As far as I have understood I can give you 1 solution. 1.Add a column in database. 2. Take all details of the user in the datatable and assign it to session variable. 3. Eg- Username Password Level Reporter - Are your columns. Now for this user say the level is Member. THen check if(dr[Level].TOString() == Member) { //Hide all menus that the user should not view. } 4.This will also work if necessary links are called from database. Hope this helps.

Vishal Jadhav · Answer

Hi Vinayak Here are your answers: 1. There are two different solutions for two different scenarios i.e. when you are logged in and when you are logged off -You need to save all user's access permissions. to restrict them from viewing your pages i.e. only authorized user can only be able see that page no matter whether you are logged in or logged off. -When you are logged in to the system you need to maintain the session to avoid others to access your session. 2. Whenever you close the browser session will automatically get emptied.