Session Management

Question

Hi . iam making an web application in that when the user login i just assign session to them to login.. when they logout i cleared the session.. but when we click the back and front button in the browser the previous page be loaded after logout.. so here how can i maintain session for each page.. please give me the idea..

Sunny Sharma · Answer

I think your problem is content caching at client side. Add this to your Master Page / Base Page- Page_Load: Response.AddHeader(Cache-Control no-cache no-store max-age=0 must-revalidate); It should work.

Iftikar Hussain · Answer

you can set no-cache in Base page public class BasePage: System.Web.UI.Page { protected override void OnLoad(EventArgs e) { Response.AddHeader(Cache-Control no-cache no-store max-age=0 must-revalidate); base.OnLoad(e); } } Regards Iftikar

Iftikar Hussain · Answer

Hi try like this if you are using Master Page in Page_Load protected void Page_Load(object sender EventArgs e) { if (Session[CurrentUser] == null) { Response.Redirect(SessionExpired.aspx); } } //the below approch need to follow since session will expire after defined time(in web.config) if not master page then create on base page and check session there public class BasePage : System.Web.UI.Page { protected override void OnInit(EventArgs e) { ValidateSession(); base.OnInit(e); } private void ValidateSession() { if (Session[CurrentUser] == null) { Response.Redirect(SessionExpired.aspx); } } } inherit this base page to all your page like this public partial class UserProfile : BasePage { } Regards Iftikar

Sunny Sharma · Answer

Hi iswarya You just don't need to maintain session for all the pages. Just check the Session variable to be true at page_load of or may be on a single master page if you're using Master Page. If the session variable is false then redirect the user to login form. Below is the pattern: ............. Page_Load(....) { bool userLoggedIn=false; try { userLoggedIn=(bool)Session[userLoggedIn]; } catch { } if(!userLoggedIn) { Response.redirect(Login.aspx); } } ------------------ Happy Coding :) Cheers!

Iftikar Hussain · Answer

please mart it answer so that it will help others. Regards Iftikar

Sunny Sharma · Answer

you're always welcome I'm glad i could help.

Iftikar Hussain · Answer

no problem. Regards Iftikar

iswarya chandran · Answer

sir its working.. am very thankful to you both for giving me such a wonderful explanations and spend your valuable time with me.. thank you sir..

iswarya chandran · Answer

@ Iftikar sir yes sir if i cleared browser history it works.. but for me once logged out it should reloaded.. without clearing the browser history too the page should be go to login page..

iswarya chandran · Answer

@Sunny sir in master page where can i add this code??

Iftikar Hussain · Answer

the page will be displayed from browser history. If you click on the page then it will redirect to sessionexpired page. For testing once you log out just clear your browser history and then check Regards Iftikar

iswarya chandran · Answer

sir i checked that too.. after logging out if i press back button in the browser the previous page will be displayed.

Iftikar Hussain · Answer

create one base page as i shown you earlier and inherit to all your page Regards Iftikar

iswarya chandran · Answer

sir am using master page with 2 menus.. first menu having admin login option.. once logged in 2nd menu get appear.. like add profile etc. In the master page if (session[Admin]=A) { menu1.visible=false; menu2.visible=false; } else { menu1.visible=false; menu2.visible=false; } In the login page i assigned session as session[Admin]=A; Response.Redirect(~\User.aspx) and if i give as u said in Add profile page load event it wont go inside tht page aftr login too..