If you change the email address and try and navigate to the home page, an error is thrown

Yes, this is a nasty one. You must delete the site's cookie to recover from this error.

To prevent the error in the future, you have to add some code to update the authcookie with the new email address when you update the email address on the MyAccount page.

The exception is thrown because the email address in the db doesn't match the email address in the authcookie. The class that does the user lookup by email address doesn't gracefully handle non-existent email addresses passed to it.

Another way to fix this is to catch this exception and delete the authcookie so the user must login again and get a new authcookie with the new email address. However, this solution is not as user friendly. However, it should be added anyway to clean up users that already have bad authcookies.

There are other nasty bugs in ThePhile code. For example, try to logout when you are on the MyAccount page.

In general, I'd have to rate the quality of "ThePhile" portal as poor. Also I don't think some of the features are well implemented -- especially the admin tools.

As for changing the email address, I just reassign a new cookie in MyAccount.aspx (below in bold). You suggest to delete the cookie it, while the only way I found to do this is SignOut method (is SignOut called a method?) which is not what we want to do, obviously.

...
Un.WebModules.Accounts.Business.User currentUser =
new Un.WebModules.Accounts.Business.User(
(Un.WebModules.Accounts.Business.MonucPrincipal)Co ntext.User);

if (currentUser.EmailAddress != EmailAddress.Text)
{
FormsAuthentication.SetAuthCookie( EmailAddress.Text, true );
}...



What do you propose for the logout when you are on the MyAccount page? I tried to search deja.com for Validation/SignOut issues but to no avail. I instead created a LogOut.aspx page, and converted the SignOut button to a HyperLink control.

Cheers,

If I find something I will let you know, cheers from the DR Congo,

Kim Gjerstad

After logout, I redirect to the home page or the login page.