displaying Username using session (ASP.NET)

Question

I am using Visual Studio 2010 as my IDE and creating a simple website using Visual Basic I dunno if it's possible but can I display the Username that has just logged into my LoginForm to the other forms using sessions?

I'm not that good enough to understand it but can anyone tell me, is this the right way to contain the value in a session?, how can I display it to the other form?

Protected Sub ImageButton1_Click(ByVal sender As Object, ByVal e As System.Web.UI.ImageClickEventArgs) Handles ImageButton1.Click
        Dim connect As String = "Provider=Microsoft.ACE.OleDb.12.0;" & _
        "Data Source=C:\Users\cleanfuel\Documents\Visual Studio 2010\Projects\FinalProject4a2p\FinalProject4a2p\bin\DBFinalProject.accdb"
        Dim query As String
        query = "Select Count(*) From tblAccount Where Username = ? And UserPass = ?"
        Dim result As Integer = 0
        Using conn As New OleDbConnection(connect)
            Using cmd As New OleDbCommand(query, conn)
                cmd.Parameters.AddWithValue("", TxtUser.Text)
                cmd.Parameters.AddWithValue("", txtPass.Text)
                conn.Open()
                result = DirectCast(cmd.ExecuteScalar(), Integer)
            End Using
        End Using

        If result > 0 Then
            Response.Redirect("Menus.aspx")
            Session("User") = TxtUser.Text
            Session("Pass") = txtPass.Text
        Else
            Response.Write("<td>")
            Response.Write("<div align=""center"">")
            Response.Write("<font color='white'>")
            Response.Write("Unable to Login, Invalid Username or Password! </font>")
            Response.Write("</div>")
            Response.Write("</td>")
        End If
    End Sub

I think that you should first store the user name in the session and only then redirect him to menus.aspx — AMember
– AMember, Commented Feb 18, 2013 at 7:46
I did that and this is the error that I got : "Object reference not set to an instance of an object." — Danjor
– Danjor, Commented Feb 18, 2013 at 8:00

Habib · Accepted Answer · 2013-02-18 07:47:19Z

3

Setup a label in your Master Page (if you have one), assign the user name from your session to the label and it will appear in all the pages. If you don't have Master page then can setup a label in the page (you want username to appear) and then set the label Text property to value from the session.

The way you are storing the values in the session is correct, you should redirect to Menu.aspx once the values are stored in the session like:

If result > 0 Then
            Session("User") = TxtUser.Text
            Session("Pass") = txtPass.Text
            Response.Redirect("Menus.aspx")

....

And to access them you can do :

labelUserName.Text = Session("User").ToString()

answered Feb 18, 2013 at 7:47

Habib

224k30 gold badges420 silver badges446 bronze badges

Sign up to request clarification or add additional context in comments.

5 Comments

Danjor Over a year ago

sir Habib I don't have Master Page, should I do the same process?

Habib Over a year ago

@Danjor, if you don't have a master page, you can put the label in any of the page you want to show the user name and show it like above

Danjor Over a year ago

I have an error "Object reference not set to an instance of an object." what does it mean?

Habib Over a year ago

That means your session is not being setted up before you are accessing it.

Danjor Over a year ago

huh? does it mean it didn't get some value from LoginForm?

to StackOverflow · Accepted Answer · 2013-02-18 08:02:37Z

2

Use FormsAuthentication, then you can simply put a LoginName control on your form, or get the UserName from HttpContext.Current.User.Identity.Name

answered Feb 18, 2013 at 8:02

to StackOverflow

125k34 gold badges212 silver badges345 bronze badges

4 Comments

Danjor Over a year ago

I'm newbie, I can't understand the term that you have used. it's like an professional way...

to StackOverflow Over a year ago

What don't you understand? Use google to find a tutorial on Forms Authentication.

Danjor Over a year ago

but I only need to used sessions , is this easier to used than sessions?

to StackOverflow Over a year ago

Yes, it's easier to use the built-in authentication functionality rather than rolling your own.

Danjor · Accepted Answer · 2013-02-19 06:53:04Z

The answers that the other users provide can be used also, but I find this one and successfully got the result that I want to have.

here are my codes:

Protected Sub ImageButton1_Click(ByVal sender As Object, ByVal e As System.Web.UI.ImageClickEventArgs) Handles ImageButton1.Click
        Dim connect As String = "Provider=Microsoft.ACE.OleDb.12.0;" & _
        "Data Source=C:\Users\cleanfuel\Documents\Visual Studio 2010\Projects\FinalProject4a2p\FinalProject4a2p\bin\DBFinalProject.accdb"
        Dim query As String
        query = "Select Count(*) From tblAccount Where Username = ? And UserPass = ?"
        Dim result As Integer = 0
        Using conn As New OleDbConnection(connect)
            Using cmd As New OleDbCommand(query, conn)
                cmd.Parameters.AddWithValue("", TxtUser.Text)
                cmd.Parameters.AddWithValue("", txtPass.Text)
                conn.Open()
                result = DirectCast(cmd.ExecuteScalar(), Integer)
            End Using
        End Using

        If result > 0 Then
            Dim myCookie As HttpCookie = New HttpCookie("USER")
            myCookie.Value = TxtUser.Text
            Response.Cookies.Add(myCookie)

            Response.Redirect("Menus.aspx")
        Else
            Response.Write("<td>")
            Response.Write("<div align=""center"">")
            Response.Write("<font color='white'>")
            Response.Write("Unable to Login, Invalid Username or Password! </font>")
            Response.Write("</div>")
            Response.Write("</td>")
        End If

    End Sub

I used HTTPcookie instead of session because I can't satisfy myself because it didn't displayed the value that I want to display and it always shows me the same ERROR over and over again.

here are the codes to display:

Protected Sub Page_Load(ByVal sender As Object, ByVal e As EventArgs) Handles Me.Load
        If Request.Cookies("USER") Is Nothing Then
            Label7.Text = "No Account Logged In"
        Else
            Dim aCookie As HttpCookie = Request.Cookies("USER")
            Label7.Text = Convert.ToString(Server.HtmlEncode(aCookie.Value))
        End If
    End Sub

You should be aware that a client can easily spoof your cookie.
what do you mean by spoof? is there a problem if I used cookie instead of other alternative codes?

Collectives™ on Stack Overflow

displaying Username using session (ASP.NET)

3 Answers 3

5 Comments

4 Comments

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

5 Comments

4 Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related