Session

[KryptoS]

Hey,

I was testing my website and found the following bug:

eg.

not all users have the same rights on my website. When a normal users login I set Session("user&quot = 1, when a admin logs in I set Session("user&quot = 2. But when I login with a normal user and visit a certain webpage, then log out, and log in with the admin, than visit that page again the Session("user&quot changes back too 1.
When I first login as an admin, visit a page, log out and relogin as a normal user and visit that page again, the session chang back too 2.

The problem can be solved when I delete my tempory internet files when I log out, but isn't there another way?

somebody can help me?

 

[JuanitaC]

When you log out, do you abandon the session? (Session.Abandon). This should end the session completely, so that when you log back in, all session variables will be new and not holding the old values. Try it and see if it helps.

 

[dilettante]

I think Juanita's hit it on the head - your session cookie is still active at the client.