Newbee question: How to kill a cookie?

  • Thread starter Thread starter Valmir
  • Start date Start date
V

Valmir

Great! Thanks a lot.

--



---------------
Valmir


Raterus said:
Tried this?

FormsAuthentication.SignOut()

xiko tripa said:
Hi,

I've implemented the forms authentication just like the following msdn
article
Click to expand...
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetHT02.asp
(watch out for the line wrap)

Everything is working fine. Once the user is authenticated, he/she can
navigate out to the secure portion of the site and navigate back while
the ticket hasn't expired.

But the world isn't perfect and I was asked to implement a logoff
option. So I think I need to 'kill' the ticket. I've tryied a lot of
things with no success. For example (cookieName is a var containing
the cookie name generated by the FormsAuthenticationTicket object):

Context.Request.Cookies[cookieName].Expires = DateTime.Now;
or
Context.Response.Cookies[cookieName].Value = null;
or
Response.Cookies[CookieName].Expires = DateTime.Now;
or
Response.Cookies[CookieName].Value = "";
or
Response.Cookies.Remove(CookieName);

None of above expired the ticket, disabling the user to navigate back
to the site's secure area.

Any idea?

TIA

Valmir
Click to expand...
Click to expand...
 
Hi,

I've implemented the forms authentication just like the following msdn
article http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetHT02.asp
(watch out for the line wrap)

Everything is working fine. Once the user is authenticated, he/she can
navigate out to the secure portion of the site and navigate back while
the ticket hasn't expired.

But the world isn't perfect and I was asked to implement a logoff
option. So I think I need to 'kill' the ticket. I've tryied a lot of
things with no success. For example (cookieName is a var containing
the cookie name generated by the FormsAuthenticationTicket object):

Context.Request.Cookies[cookieName].Expires = DateTime.Now;
or
Context.Response.Cookies[cookieName].Value = null;
or
Response.Cookies[CookieName].Expires = DateTime.Now;
or
Response.Cookies[CookieName].Value = "";
or
Response.Cookies.Remove(CookieName);

None of above expired the ticket, disabling the user to navigate back
to the site's secure area.

Any idea?

TIA

Valmir
 
Raterus said:
Tried this?

FormsAuthentication.SignOut()
Click to expand...

Sorry! It didn't work... The user's still able to navigate back to
secure area even after calling FormsAuthentication.SignOut() on the
logoff.aspx
 
Back
Top