An Overview of Forms Authenticationhttp://www.asp.netWed, 27 Mar 2013 20:46:19 GMTumbracoComments for An Overview of Forms AuthenticationenComment Posted by ali.m.habibhttp://www.asp.net/web-forms/tutorials/security/introduction/an-overview-of-forms-authentication-vbWed, 10 Nov 2010 01:41:06 GMT00000000-0000-0000-0000000010898but After log out Is till can access the default web page any suggestion to prevent that

]]>Comment Posted by duttavrhttp://www.asp.net/web-forms/tutorials/security/introduction/an-overview-of-forms-authentication-vbThu, 07 Apr 2011 15:39:45 GMT00000000-0000-0000-0000000012734Excellent one for beginer who want to start with Forms authentication.

even other can brushup the concept quickly.

Thanks for the article.

]]>Comment Posted by Anshul Khandelwalhttp://www.asp.net/web-forms/tutorials/security/introduction/an-overview-of-forms-authentication-vbSat, 14 May 2011 02:35:42 GMT00000000-0000-0000-0000000013156Perfect...!!!

]]>Comment Posted by jkjeromehttp://www.asp.net/web-forms/tutorials/security/introduction/an-overview-of-forms-authentication-vbWed, 09 Jan 2013 00:20:45 GMT00000000-0000-0000-0000000017142I hit a big problem here. I had created my logout page in Accounts/Logout.aspx as I wanted to keep the authentication stuff separate from the root stuff.

When I tested the logout button(displayed from the loginstatus control), it took me to the login page instead, even though I'd set it all correctly:

<asp:LoginStatus ID="LoginStatus1" runat="server" LogoutAction="Redirect" LogoutPageUrl="~/Account/Logout.aspx" />

After ***much*** renaming, fruitless googling, red herring "Eureka" moments about permissions on subfolders, and intense rage, it finally occurred to me that the user is unauthenticated at the point they get to logout.aspx, and maybe anonymous users aren't allowed there by default.

Sure enough that was the problem and after a little more googling I found that the solution was to place this in the web config:

<configuration>

.

.

.

<location path="Account/logout.aspx">

<system.web>

<authorization>

<allow users="?" />

</authorization>

</system.web>

</location>

.

.

.

</configuration>

That just allows anonymous users to see that particular page, leaving the rest of the default authorisation settings intact.

So the very thing I was trying to learn stung me in the arse while I was learning it. Seems blindingly obvious now, but obviously not at the time.

I dearly hope this saves someone else the pain I went through.

Good luck folks.

]]>Comment Posted by ricka6http://www.asp.net/web-forms/tutorials/security/introduction/an-overview-of-forms-authentication-vbWed, 27 Mar 2013 20:46:19 GMT00000000-0000-0000-0000000018785@jkjerome - thanks for posting

]]>