Need Help with Passwords

[uncgis]

What is the best way to handle user logins...Should I use cookies or session variables. I am looking for the best secure way. Currently, I am using this at the top of my pages

'Below checks to ensure that the user is logged in.
if session ("username") = "" then
response.redirect "???.asp?msg=" & server.urlencode("Login Failed--Invalid Username or Password. No Matches Found.")
elseif session ("password") = "" then
response.redirect "????.asp?msg=" & server.urlencode("Login Failed--Invalid Username or Password")
else


any suggestions

Thanks

 

[DotNetGnat]

please take a look at these other two threads of mine...

thread333-1075083
thread333-1096723

-DNG

 

[uncgis]

Thanks for responding....the threads helped me out a lot. I think that I will use the session variables....do you know of any other way to handle logins (besides cookies and session variables)?

Thanks again

 

[DotNetGnat]

Sessions and cookies are the most common and secure method for most sites to handle logins over the Internet. these were built in specifically for login purposes...i am not sure about other methods...

yeah those two threads have lot of good information about sessions and cookies...glad to be of help...

-DNG