Forms auth: User has been changed during session RRS feed

  • Pergunta

  • We are having a strange case.

    User "A" logged into our web-system (ASP.NET MVC, Forms Auth), was working for some time, then his user name changed to "B" after "B" logged into the system.

    That case is very critical — user can't see data of others.

    Does anyone have any ideas? Please!

    We've decided it is a bug somewhere in ASP.NET, IIS or wherever more.

    segunda-feira, 16 de abril de 2012 19:11

Todas as Respostas

  • As you're pulling data from the User in the application?

    If you are using a static variable to display the data of the User remove this variable as it is static because it is available to any User that accesses the webapp because it is stored on the server that the application

    "Faça as coisas da forma mais simples possível. Mas não mais simples do que isto" - Albert Einstein

    segunda-feira, 16 de abril de 2012 20:03