ASP.net multiple users logged in

Question

Regarding a clock in/out site. When user A logs in it shows his check in/outs. then user B logs in. When A refreshes the page, he gets B's Check in/outs.
I am probably doing this wrong because iam storing the username in a public variable when ever the user logs in server side, c#, too check for a lot of other permissions on the site, through different pages.

   if (publiclasses.isValid == true)
     {
        publiclasses.unilogin = UserNametextbox.Text.ToString();
        publiclasses.Checkifmissinglogout();
        Response.Redirect("checkin.aspx");
     }

How do i save the user in a different way that always keeps it "unique" and not just overrides the old one stored?

Could you show more code, of your login and of your data retrieving. this is not enough code to see what goes wrong. Where do you store your data? (In session, localstorage in database?) — Joel Harkes
– Joel Harkes, Commented Dec 21, 2016 at 7:46
Try using cookie or session for multiple users. Better use session that will handle users easily. I can't see anything like that in your code. — AT-2017
– AT-2017, Commented Dec 21, 2016 at 7:54

Haitham Shaddad · Accepted Answer · 2016-12-21 07:58:13Z

2

Using a public variable will be shared across all user sessions and it introduces concurrency issues, all of this assuming it is static.

To separate it, you have to use sessions.

ex:

    Session["unilogin"] = UserNametextbox.Text.ToString();

You have to make sure you use the session variable in any piece of code you reference the current public variable

answered Dec 21, 2016 at 7:58

Haitham Shaddad

4,4662 gold badges16 silver badges23 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Keith · Accepted Answer · 2016-12-21 09:11:08Z

You need to implement some kind if identity for your users. There are loads of ways to do this, but it depends on the exact ASP.NET variant which will be best for you. Most web applications use cookies for this.

Basically when user A signs in they get a cookie that says they are A. Every subsequent request they make will have that cookie attached and you can get which user they are from it.

At its very simplest this is very easy:

// In sign in POST back
Response.Cookies.Append("user", username);

// In further pages:
string username = Request.Cookies["user"];

However, this will make it very easy for B to pretend to be A - it isn't secure. The built in .NET methods will create an encrypted cookie that's much more secure.

Collectives™ on Stack Overflow

ASP.net multiple users logged in

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related