Re: FormsAuthentication.SignOut() what to do after

By using the back button?

SignOut does indeed clear the cooie - which doesn't mean that this cookie would not be valid if re-send.

Try closing the browser - can you still navigate to the secured area after opening a new browser?

-----
Dominick Baier (http://www.leastprivilege.com)

Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)

Hi,

I am still able to navigate back to secure area even after calling
FormsAuthentication.SignOut() on the
logoff.aspx
I read some place that I need to clear the cookie, expire it etc..

But I am not getting it right. Need examples tutorials etc.. please

help.



.