Using Session Variables to Maintain Security
Written by Eric Smith, Northstar Computer Systems LLC
Depending on the application you have, you may need to enforce security on pages. However, you can't just check the person's login on one page and send them on their way. Instead, you'll need to make sure they have logged in on every page that you run. This isn't as hard as it sounds, trust me.
After the user has logged in successfully, set a Session variable to True, as shown here:
Session("IsLoggedIn") = True
On every page after that, call this CheckForLogin subroutine, which can be placed in a server-side include file to be added to every page.
Sub CheckForLogin()
If Not Session("IsLoggedIn") Then
Response.Redirect "login.asp"
End If
End Sub
If they haven't logged in, they are immediately bounced to the login page. Make sure you call this routine before showing any HTML, since the Response.Redirect has to be part of the HTTP header.
Keywords: [
Uncategorized ASP Tips
]
Publication Date: 7/1/1999
|