Is using session state an unsafe way to create user logins and role in asp.net
Consider the setup where a list of ids and passwords are stored in a database on a server and when a user enters his login credentials then the code-behind verifies it against the server and sets values like Session[“id”] Session[“login”] to determine whether user has access to certain page.