In VB.Net can someone tell me how you pass a persons ID from a database once they have logged in, to other pages they wish to view.

For example they login from login.asp
Then that directs them to default.asp
If they then wish to view admin.asp

How do I pass the ID through so that its admin.asp?ID=100 please

Dosent .asp suggest classic ASP whereas .aspx suggests ASP.Net ?

If youre using classic ASP then Dim user_id As String = Session("user_id").ToString()  wouldent work....itd need to be Dim user_id As String = Session("user_id")

So I take it I need to set the session ID equal to something. Then on every page other than the login page, check to see whether this they are logged it or not?

Found a working solution on the net if your intrested Fuman...

http://www.xoc.net/works/tips/forms-authentication.asp



i altered it slightly on my version to use a control that calls stored procedures and outputs the results back to me instead of the plain text info stored in web.config



 Private Function ValidateUser(ByVal strUsername As String, ByVal strPassword As String) As Boolean
        Return true if the username and password is valid, false if it isnt

        Dim sHashedPassword As String = FormsAuthentication.HashPasswordForStoringInConfigFile(strPassword, "MD5")

        Dim loginOk As Boolean = dbOperations.CheckLogin(strUsername, sHashedPassword)

        Return loginOk

    End Function


   Private Function AssignRoles(ByVal strUsername As String) As String
        Return a | separated list of roles this user is a member of

        Return dbOperations.AssignUserRoles(strUsername)

    End Function



other than that its the same as in the example.

if you need to protect aspx pages, put them in a subfolder from the root of the site and put a web.config file in the directory with this in :


 
   
     
   
 




the magic code is in the Global.asax file that controls the session data

its also roles based so you can hide important buttons like delete record from an unprivlaged but logged in user by hiding the button if the roles dont match.

should get you running