Click here to Skip to main content
15,867,686 members
Articles / Web Development / ASP.NET
Article

ASP.NET Session Login Without Cookies

Rate me:
Please Sign up or sign in to vote.
2.65/5 (46 votes)
11 Aug 2003 304.2K   74   28
Easiest way to authenticate users without cookies.

Introduction

The following describes the easiest way I have found to force users to log into an ASP.NET website for each session but not require them to accept cookies. You must do the following things.

  1. Create a Web.config file with the appropriate entries to allow session state management.
  2. Create a well formed Global.asax file with the code below included in it.
  3. Create a login page to authenticate users against a database or whatever method you desire.

Code usage

Required Code in the Global.asax

VB.NET
' Fires when the session is started and sets the default loggedin state to ""
Sub Session_Start(ByVal sender As Object, ByVal e As EventArgs)
Session("Loggedin") = ""
CheckLoggedIn()
End Sub
VB.NET
' Called when the request has been process by the Request Handler and 
' HttpSessionState is available [This is the key piece of code that forces 
' the user is login check with each page request]
Sub Application_OnPostRequestHandlerExecute()
CheckLoggedIn()
End Sub
VB.NET
'Check that the user is logged in.
Sub CheckLoggedIn()
'If the user is not logged in and you are not currently on the Login Page.
If Session("LoggedIn") = "" And InStr(Request.RawUrl, "Login.aspx") = 0 Then
Response.Redirect("~/Login/Login.aspx")
End If
End Sub

Finally create a Login.aspx file that authenticates the user. If the user is allowed in, set: Session("Loggedin") = "Yes"

That's all there is to it. Hope this helps! Enjoy!

License

This article has no explicit license attached to it but may contain usage terms in the article text or the download files themselves. If in doubt please contact the author via the discussion board below.

A list of licenses authors might use can be found here


Written By
United States United States
This member has not yet provided a Biography. Assume it's interesting and varied, and probably something to do with programming.

Comments and Discussions

 
GeneralMy vote of 3 Pin
Amir Mahfoozi20-Dec-11 20:58
Amir Mahfoozi20-Dec-11 20:58 
GeneralMy vote of 1 Pin
nirav_k_mehta27-Dec-10 1:22
nirav_k_mehta27-Dec-10 1:22 
Questionhow session we create for name at all pages Pin
imadbaloch13-Apr-09 4:30
imadbaloch13-Apr-09 4:30 
AnswerRe: how session we create for name at all pages Pin
mauji11-Jul-09 21:27
mauji11-Jul-09 21:27 
QuestionWhat is the appropriate code in Web.Config Pin
Naveen Mahesh29-Jul-07 19:01
Naveen Mahesh29-Jul-07 19:01 
Questionhow to create login? Pin
caabool_oo5-Apr-07 2:13
caabool_oo5-Apr-07 2:13 
Generallogin form Pin
non219-Apr-05 21:28
non219-Apr-05 21:28 
GeneralRe: login form Pin
balazs_hideghety8-Jun-05 21:53
balazs_hideghety8-Jun-05 21:53 
Generalshop_store Pin
Anonymous17-Apr-05 22:57
Anonymous17-Apr-05 22:57 
GeneralRe: shop_store Pin
Wraith0118-Apr-05 3:33
Wraith0118-Apr-05 3:33 
GeneralRawUrl problem Pin
dr_iscux11-Jan-05 8:30
dr_iscux11-Jan-05 8:30 
GeneralRe: RawUrl problem Pin
Wraith0111-Jan-05 9:25
Wraith0111-Jan-05 9:25 
QuestionRe: RawUrl problem Pin
samdani_basha9-Sep-07 0:17
samdani_basha9-Sep-07 0:17 
AnswerRe: RawUrl problem Pin
joel8528-Nov-08 18:54
joel8528-Nov-08 18:54 
GeneralDeserves a better rating Pin
Nish Nishant29-Oct-03 1:06
sitebuilderNish Nishant29-Oct-03 1:06 
Generalweb.config in subdirectory Pin
Majid Shahabfar26-Oct-03 23:59
Majid Shahabfar26-Oct-03 23:59 
GeneralNot exactly Pin
Philip Patrick13-Aug-03 4:15
professionalPhilip Patrick13-Aug-03 4:15 
GeneralRe: Not exactly Pin
Zek3vil13-Aug-03 5:17
Zek3vil13-Aug-03 5:17 
GeneralRe: Not exactly Pin
Philip Patrick13-Aug-03 5:27
professionalPhilip Patrick13-Aug-03 5:27 
GeneralCookieless = no good Pin
dog_spawn13-Aug-03 5:28
dog_spawn13-Aug-03 5:28 
GeneralRe: Cookieless = no good Pin
Philip Patrick20-Aug-03 20:28
professionalPhilip Patrick20-Aug-03 20:28 
GeneralRe: Cookieless = no good Pin
dog_spawn20-Aug-03 21:33
dog_spawn20-Aug-03 21:33 
GeneralRe: Cookieless = no good Pin
DaveAuld30-Aug-03 16:54
professionalDaveAuld30-Aug-03 16:54 
GeneralYes Pin
dog_spawn31-Aug-03 3:35
dog_spawn31-Aug-03 3:35 
GeneralRe: Not exactly Pin
Daniel Fisher (lennybacon)19-Aug-03 6:38
Daniel Fisher (lennybacon)19-Aug-03 6:38 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.