Log In with FormsAuthenticationTicket

[MaryNET]

Hi,
If a user checks (chkPersistCookie.Checked) when logging in,
I would like to make it so it never expires
(always logged in)
I'm not sure what "ck.Expires = tkt.Expiration;" is doing.
Would the code below make it so the user is always logged in (if chkPersistCookie.Checked is checked). thanks

FormsAuthenticationTicket tkt;
string cookiestr;
HttpCookie ck;

tkt = new FormsAuthenticationTicket(1, "Test", DateTime.Now,
DateTime.Now.AddMinutes(120), chkPersistCookie.Checked, "your custom data");
cookiestr = FormsAuthentication.Encrypt(tkt);
ck = new HttpCookie(FormsAuthentication.FormsCookieName, cookiestr);

if (chkPersistCookie.Checked)
ck.Expires = tkt.Expiration;
ck.Path = FormsAuthentication.FormsCookiePath;
Response.Cookies.Add(ck);

Response.Redirect("Main.aspx", true);

 

[jmeckley]

i haven't worked too much with cookies but it appears you are setting your cookies to timeout after 2 hours. either set the cookie to have a sliding expiration date, or set the expiration date to something like 1 month/year from now.

It's usually good pracice to keep cookies as short as possible. so setting the cookie for a day or two with a sliding expiration date will keep them logged in as long they:
visit the site at least once within the expiration period
do not clear the cookies on their computer.

Jason Meckley
Programmer
Specialty Bakers, Inc.

 

[MaryNET]

thanks Jason,

So the "DateTime.Now.AddMinutes(120), . ." handles
how long a person will be signed in for.
I'll just make it for a year or something.

 

[ca8msm]

It's usually good pracice to keep cookies as short as possible

I'll just make it for a year or something.

???


-------------------------------------------------------

Mark,
[URL unfurl="true"]http://aspnetlibrary.com[/url]
[URL unfurl="true"]http://mdssolutions.co.uk[/url] - Delivering professional ASP.NET solutions
[URL unfurl="true"]http://weblogs.asp.net/marksmith[/url]