ASP — Authentication

Basic Authentication

<%
If Session("authenticated") <> True Then
    Response.Redirect("login.asp")
End If
%>

Login Page

<%
If Request.Form("username") = "admin" And Request.Form("password") = "pass" Then
    Session("authenticated") = True
    Session("username") = Request.Form("username")
    Response.Redirect("dashboard.asp")
Else
    Response.Write("Invalid credentials")
End If
%>

Logout

<%
Session.Abandon
Response.Redirect("login.asp")
%>

Check Permissions

<%
If Session("role") = "admin" Then
    Response.Write("Admin panel")
Else
    Response.Write("Access denied")
End If
%>

Mini Practice

1. Create login form
2. Validate credentials
3. Set session variables
4. Check authentication

Up Next

Continue with Security — security best practices.