ASP.NET Login page

Question

I want to add login for registered users in my website. How shall I proceed with it? Is it through the use of sessions? What will happen to the Session variable once the logout happens??

Answer 1

Your question is extremely broad and there are many different ways that you can implement what is, in effect, a "membership" system for an ASP.NET website.

I would suggest that you start by reading the "Introduction to Membership" article from MSDN. This article will give you an overview of how ASP.NET membership works in the most "standard" way.

It also mentions using the various ASP.NET membership "controls" (Login, LoginView, LoginStatus & PasswordRecovery for example).

Using these controls along with the built-in ASP.NET membership providers (for example, ASP.NET provides a SQL membership provider to work against SQL Server as the data store for your user accounts and credentials) will allow you to implement a complete membership and authentication system with virtually no code at all (i.e. all the functionality is provided by the built-in "membership" controls and declarative mark-up).

Finally, a really good series of articles on this subject is:

Examining ASP.NET 2.0's Membership, Roles, and Profile

from the 4guysfromrolla site. It's starts at the very beginning of the membership topic and goes right the way through to touching on the implementation of a custom membership provider and administrative interface for managing user credentials to round out the whole subject.

Answer 2

I'd take a look a related questions, such as

Login Membership .NET

This topic is already covered quite a lot on SO.

Session state and log in are somewhat orthogonal. You have a session regardless of whether or not you are logged in.