Using Session to handle Membership - Secure enough?

  • Thread starter Thread starter Cirene
  • Start date Start date
C

Cirene

My membership portion of my website is pretty simple - only Admin and 2
other roles.

I was thinking of using session vars store the login information? Such
as...
If Session("IsAdmin") then.... ' allow access to the page

If they login ok I would just set Session("IsAdmin") = True, etc...

Is using Session vars a secure enough way to do it? I know that I will not
be able to take advantage of the login control, etc...

(I am using MySql and it's been a pain trying to make it the provider to use
the built-in stuff.)

Thanks!
 
Back
Top