Security/Login Question

[Roy]

Hey all,

My boss has recently asked me to take an ASP legacy site in which a user
logs in to view data, etc... and make it interoperable with a newer
ASP.NET site in which a user logs in to view data, etc...

IOW, a user would login once (and only once) and be able to access both
pages at whim without having to login separately.

I'm sure that some of you have encountered this situation before...is it
even convenient/worth it to try to merge the two logins in this manner?
And if it is, does anyone have any links on how to pass data between the
two sites? They both operate off the same webserver, btw.

Thanks much.

 

[sreejith.ram]

One method to handle this is by using custom session management using
database (to keep user information). A single cookie will identify the
user from both .NET and ASP pages.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnaspp/html/converttoaspnet.asp

Google for "Session sharing between asp and asp.net"

HTH

 

[Roy]

Thanks for the help.