Using session variables with C# to let a page know whether you are logged in or not

[moorcroft]

Hi, I'm developing a web application using ASP .Net and C# as code behind.

On my home page Index.aspx I have login textbox's so if you correctly enter your username and password it says "You have successfully logged in". Then the C# performs the code Session["loggedIn"] = "true"; meaning that the application knows that the user is logged in.

Now whenever the user goes to the page ClassList.aspx there is a button at the top saying Start. Whenever the user presses Start, if he is logged in the user controls for that page appear, although if he is not logged in the following message appears: "You need to log in to use this section of the site".

The way that I am doing this is that I am saying in ClassList.aspx: if(Session["loggedIn"].Equals("false")) then show error message else show user controls.

The problem that I am having is that the user can access ClassList.aspx without initially going to the Index.aspx page and therefore if he presses Start, the system will not recognise the Session["loggedIn"] variable.

Can anybody think of any way of sorting this problem out as its doing my head in!

Thanks

[nateraaaa]

You also need to check to see if your Session variable is null. If the Sesion variable is null then the user has not logged in yet.

 if(Session["loggedIn"] != null) 
{ 
if(Session["loggedIn"].Equals("false"))
{
}
}
else
{
//inform user that they must be logged in to access this page.
}
 

Nathan

[moorcroft]

that works perfect thanks very much!

Andy