Page Load Problem

[jbtman]

I have web appliation done that uses master pages. I have two content pages, Default and Account. When the application loads Default loads and allows the user to log in. This sets a session variable this way

HttpContext.Current.Session.Add("UserValidated", True)

and then redirects to the Account page

There is a logout button on the account page that does this

HttpContext.Current.Session.Item("UserValidated") = "False"
HttpContext.Current.Session.Abandon()
HttpContext.Current.Session.Clear()
Response.Redirect("Default.aspx")

I have a session checking function in place in the page events of the master page.

Now if I try to go to the Accounts page directly without logging in it succeeds as the Session checking function does not get called.

In the master page I have tried putting the session check function in the page load, init, preinit and everywhere else I can think of!!

Any help would be appreciated!!

 

[jbtman]

Oh, when I say go to the Account page directly I mean after I have logged out and got sent to Default.

 

[whatsthehampton]

Hi jbtman,

I'm not sure what your session check function looks like but why not put the session check in the page Load of the protected Accounts page?

HTH, Jon

http://www.iSkool.net

 

[jbtman]

I have tried that as well. It is currently in the page load of the master page, which does not get executed, and neither does the page load event of the Accounts page.

Here is the function

Public Function CheckSession() As Boolean
Dim blnSessionValid As Boolean

blnSessionValid = HttpContext.Current.Session.Item("UserValidated")
If Not blnSessionValid Then
Return False
Else
Return True
End If
End Function

 

[jbtman]

Update:

If I put this into the Page_Load event of my master page it seems to work find.

Response.Cache.SetCacheability(HttpCacheability.NoCache)
Response.ExpiresAbsolute = DateTime.Now.AddMonths(-1)

Could that code be problematic?