else

{

Label3.Text = "you are not authorized to view the page";

}

}

We simply used the FormsAuthentication.Authenticate() method and supplied it with the username and password. These username and password will be checked against the web.config file. If the username and password are present inside the web.config file than the user will be authorized and will be taken to the originally requested Url. If the person is not authorized than a message will be printed that "You are not authorized to view the page".

You can also expire the cookies that you make in your application. Setting the time for the cookie expiration is not difficult at all. Lets see the following code and see what it does:

Lets first make a simple cookie that will hold the user's username and than set its expiration time in days:

HttpCookie myCookie = new HttpCookie("UserName");

myCookie.Value("UserName") = txtName.Text;

myCookie.Expires = DateTime.Now.AddDays(1);

Response.Cookies.Add(myCookie);

As we can see in the code sample above that making and setting the expiration time for the cookie is not difficult at all. You can also use FormsAuthentication Ticket to assign the expiration time of the cookie.

// Attach the parameters, should also have output parameters to return a value

// set up the Sql Server Stored procedure

/*

*

* CREATE PROC [GetUserID]

* @PersonID int OUTPUT,

* @UserName nvarchar(50),

* @Password nvarchar(50)

*

* AS

*

* SELECT @PersonID = PersonID WHERE UserName = @UserName AND Password = @Password;

*

*/

// exeucte the command

// if(personID > 0 )

// return true;

// else

// return false;