how to really logout in asp.net

Question

I use LoginControl for login into my website in asp.net, but when for logout use login status or session.Abandon or .sign out ,there's white backspace, my homepage is loaded and its not secure.

Please help me that use realy logout in my project.

u got issue with session and cookies...make sure u clear them out when u logout. — Newton Sheikh, Oct 29 '13 at 08:34
possible duplicate of [Programatically logout an ASP.NET user](http://stackoverflow.com/questions/3098724/programatically-logout-an-asp-net-user) — abatishchev, Jul 17 '15 at 16:11

score 9 · Answer 1 · answered Oct 29 '13 at 07:25

9

use FormsAuthentication.SignOut(); as below:

protected void LogoutButton_Click(object sender, EventArgs e)
{
    FormsAuthentication.SignOut();
    Response.Redirect("~/Login.aspx");
}

answered Oct 29 '13 at 07:25

Habibillah

27,347
5
36
56

i try it but when enter backspace my home page is loaded – mirza Oct 29 '13 at 07:40

score 3 · Answer 2 · edited Feb 03 '22 at 11:17

3

Use Session.Clear() like this:

protected void Button_Click(object sender, EventArgs e)
{
    Session.Clear();
    Response.Redirect("Login.aspx");
}

edited Feb 03 '22 at 11:17

SharpC

6,974
4
45
40

answered Oct 29 '13 at 08:13

Priya Gund

156
5

score 3 · Answer 3 · answered Sep 06 '17 at 12:46

3

None worked for me but this does.

Context.GetOwinContext().Authentication.SignOut(DefaultAuthenticationTypes.ApplicationCookie);

answered Sep 06 '17 at 12:46

Crismogram

906
15
27

score 2 · Answer 4 · answered Oct 29 '13 at 08:21

The home webpage is loading from the browser cache, use the below metadata tags to force the browser to clear cache after exiting the page

<head runat="server">
<meta http-equiv="cache-control" content="no-cache" />
<meta http-equiv="Expires" content="0" />
<meta http-equiv="cache-control" content="no-store" />
<meta http-equiv="cache-control" content="must-revalidate" />
<meta http-equiv="cache-control" content="proxy-revalidate" />

score 1 · Accepted Answer · edited Dec 29 '14 at 19:22

1

I found a solution that I use in my master page

if (Membership.GetUser() != null)
    .....
else Response.Redirect("Login.aspx")

and codebehind for logout button:

FormsAuthentication.SignOut();
Response.Redirect("Login.aspx");

Thanks for your help!

edited Dec 29 '14 at 19:22

erdekhayser

6,537
2
37
69

answered Oct 31 '13 at 13:47

mirza

766
2
7
12

2

This doesn't work if you use the same master page for Login.aspx, it will cause an infinite redirect loop, which is really bad. – Malachi Dec 29 '14 at 17:59

how to really logout in asp.net

5 Answers5