In the previous chapter, you learned how you can use ASP.NET forms authentication as the cornerstone of your website security. With forms authentication, you can identify users and restrict them from pages they shouldn’t access. Best of all, ASP.NET manages the whole process for you by creating and checking the forms authentication cookie.
As convenient as forms authentication is, it isn’t a complete solution. It’s still up to you to take care of a variety of related tasks. For example, you need to maintain a user list and check it during the authentication process. You also need to create the login page, decide how to separate ...