When you call Session.Abandon, the Session variables are still available in the current page.
It's usually a good idea to have Session.Abandon followed by a Response.Redirect instruction, for example to a page called Logout.asp (to inform the user they have ended their session) or to the home page or any other page.
This way, you can be sure that the Session variables are no longer accessible.
Cheers,
Imar
---------------------------------------
Imar Spaanjaars
Everyone is unique, except for me.
|