session in asp.net C#

Question

basically i have 3 pages, log in page, main page and registration page.

My users have 2 access level, admin and User.

Admin can go to registration apge, User can't.

On log in page, there are 2 session, Name and Role.

on page load, I clear both session.

If log in is succeeded, I filled in the values.

My problem is..

I log in as Admin, Session["Name"]="admin"; Session["Role"]="Admin";

I go to main page, then to registration page with hyper link. (enable only for admin)

On registration pageload, I check the role. If it is not access, I redirect to main page.

Every page has logged out hyper link.

I will redirect that link to log in page.

As I clear the session values at the loading of log in page, they are all clear.

When I get to Admin page, I copy the URL.

I log out and log in as someone else with User access.

I go to Main page.

I can't go to registraion page as the hyper link is disable.

But when I paste the URL, it can go to registration page.

Only when I click something, it will redirect to main page as the page_load function is not run at the first time.

Any idea?

Stilgar · Accepted Answer · 2010-12-13 08:09:25Z

2

From your explaination it seems there is a high chance this is actually the browser caching the page and not sending a request at all. Try to print the username on the page and see if it will change when you hit the url again. You can also use tools like Firebug, IE9 Dev Tools, Fiddler, etc. to see if request is sent.

BTW consider using the Membership and Role providers instead of sticking stuff in session ( http://odetocode.com/articles/427.aspx )

answered Dec 13, 2010 at 8:09

Stilgar

23.8k16 gold badges68 silver badges108 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

william Over a year ago

No, it is the old username. not the new one. I forgot to mention that. that's why i think they never run page_load function coz i changed the username in that function.

Stilgar Over a year ago

So it is the browser caching, isn't it? You get the old everything and the server code does not run. Try opening the page when you are not logged in at all. Try opening it in IE (I've noticed IE does not like to cache whole pages while other browsers do)

Collectives™ on Stack Overflow

session in asp.net C#

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related