DeveloperBarn

As most of you know, I've setup my app to use forms authentication and have been having a few "issues".

I've been playing around with code to prevent multiple logins and had something kind of working. But it seemed if you didn't log off and just shut down all instances of the browser, when opening a new instance, you could navigate straight to the site without authenticating.

So, I think I've set everything back as it was, but this is still happening. I can't remember if I ever tried this before I started playing with the code so don't know if this always happens when using forms authentication.

I presume the user's session is remaining open and therefore they don't have to re-authenticate, but I would have thought closing the browser down completely should remove the session.

Any ideas if this is right or not?

It's OK. I sorted it.

I hadn't noticed before but I was creating a persistent cookie when logging the user on using forms authentication.

What an idiot!!!

Sorry everyone....