Trouble with session states

wigmo · October 27th, 2003, 02:54 PM

I'm trying to go beyond what the book covers with session states but am not getting very far. I am setting the session state on one page, then checking to see if it exists on another. However, it's not working. Below is the code that I am using the check to see if the session state is present, and then what conditions to take based on that. The only condition that will take place is the very last one, which should be the result if the session hasn't been set. Any help would be appreciated.

<script language="vb" runat="server">
Sub Page_Load(ByVal Sender as Object, ByVal E as EventArgs)

Dim SessionId As Long
Dim userClass

'Determine if User is logged in

Try
SessionId = Session.SessionID

If SessionId <> "" then

  userClass = Session("class").ToString()
  company.text = Session("company").ToString()
  expirationDate.text = Session("expiration").ToString()

    If userClass <> "Client" OR userClass <> "Administrator" then
     Response.Redirect("/debug/notaccepted.html")
    End If

Else

  Response.Redirect("/debug/accepted.html")

End If

Catch excp as Exception

  Response.Redirect("/debug/notset.html")

End Try

End Sub
</script>

Imar · October 27th, 2003, 03:29 PM

Hi there,

It looks like you have an OR Vs AND problem:

Code:

If userClass <> "Client" OR userClass <> "Administrator" then
  Response.Redirect("/debug/notaccepted.html")
End If

Imagine a user with a userClass of Client. The first statement will then return false (userClass *is* Client) but the second statement will return true (Client <> Administrator)

I think it should be like this:

Code:

If userClass <> "Client" And userClass <> "Administrator" then
  Response.Redirect("/debug/notaccepted.html")
End If

This way, if a user is not a Client and not an Administrator, he or she gets redirected away.

Does that make sense?

Imar

---------------------------------------
Imar Spaanjaars
Everyone is unique, except for me.

wigmo · October 28th, 2003, 09:46 AM

Imar,

Thank you for pointing that out. Unfortunatly I am still having the same problem. I know the session variables are being accepted because I can comment most of that code and assign them to a label. I'll keep playing with it and see what I can come up with. Thanks.