Forms Authentication Ticket isn't destroyed when logging out

[Ethan Chan]

I am using forms authentication on my web application which requires users
to log in to add content on their website.

Upon loggin out, i used the log out method in the Forms Authentication
Ticket. However when i have hijacked the cookie, i am still able to access
the protected pages.

Tel : [65] 6225 1308 Fax : [65] 6225 1931 www.active8.com.sg

 

[Gabriel Lozano-Morán]

And in the page load of your logout page you call the following lines?

Session.Abandon();
System.Web.Security.FormsAuthentication.SignOut();

Gabriel Lozano-Morán
Software Engineer
Sogeti