Another issue I have is how to invalidate all persistant logins for
the member if the password is updated.
Obviously there is no problem on the computer/browser he is using when
changing the password, I just call FormsAuthentication.SignOut() however if
he also logged in on another computer he will still get in without entering the
new password.
The obvious solution would be to save the date and time the password was changed
and compare it with when the ticket was created however I can't seem to find a
way to get the time of creation ?
PL.
|