asp.net 中的 Cookie 和会话如何在用户单击注销按钮后将其删除

Question

我正在创建一个 cookie 和一个会话，

if (ValidateUser(txtUserName.Value,txtUserPass.Value) )
        {
            //string useremail = Convert.ToString(txtUserName.Value);
            Session.Add("useremail", txtUserName.Value);
            FormsAuthenticationTicket tkt;
            string cookiestr;
            HttpCookie ck;
            tkt = new FormsAuthenticationTicket(1, txtUserName.Value, DateTime.Now, 
            DateTime.Now.AddMinutes(30), chkPersistCookie.Checked, "your custom data");
            cookiestr = FormsAuthentication.Encrypt(tkt);
            ck = new HttpCookie(FormsAuthentication.FormsCookieName, cookiestr);
            if (chkPersistCookie.Checked)
            ck.Expires=tkt.Expiration;  
            ck.Path = FormsAuthentication.FormsCookiePath; 
            Response.Cookies.Add(ck);
        }

我正在使用此代码删除 cookie

 protected void SignOut_Click(object sender, EventArgs e)
    {
if (Request.Cookies[FormsAuthentication.FormsCookieName] != null)
        {
            HttpCookie myCookie = new HttpCookie(FormsAuthentication.FormsCookieName);
            myCookie.Expires = DateTime.Now.AddDays(-1d);
            Response.Cookies.Add(myCookie);
            Response.Redirect("Home.aspx");   
        }

   }     

，但 cookie 仍然存在，并且在我注销后我能够看到 user.aspx 页面。如何注销，如果是的话，我是否还应该删除会话中的值，该怎么做，

谢谢

Answer 1

试试这个

    HttpContext.Current.Session.Remove("useremail");
    HttpContext.Current.Session.Abandon();

Answer 2

当您执行注销时，最好使用 Session.Abandon() 结束当前会话。这将确保没有会话信息可能被泄露。