Using Session to handle Membership - Secure enough?

[Cirene]

My membership portion of my website is pretty simple - only Admin and 2
other roles.

I was thinking of using session vars store the login information? Such
as...
If Session("IsAdmin") then.... ' allow access to the page

If they login ok I would just set Session("IsAdmin") = True, etc...

Is using Session vars a secure enough way to do it? I know that I will not
be able to take advantage of the login control, etc...

(I am using MySql and it's been a pain trying to make it the provider to use
the built-in stuff.)

Thanks!

 

[Steve C. Orr [MCSD, MVP, CSM, ASP Insider]]

The short answer to your question is yes.

Of course security is a deep topic...

--
I hope this helps,
Steve C. Orr,
MCSD, MVP, CSM, ASPInsider
http://SteveOrr.net
http://iPhonePlaza.net