All,

I have just started developing a new web site using ASP.

The question is:

How to maintain the users information using Session variables after
he has logged in?

I know the simplest (and I guess the most vulnerable way) to store
in the information in 2 session variables:

Session("Login")
Session("Password")

Someone has already mentioned and even I think this is not a good way.
I want to know the best way to do it. Please provide the code if you
can to create the session variables for the user after he enters his
login and password and we verify it in the database + code that goes
in the other pages as he browses through the web site.

I will really appreciate your help.

Thanks,
Kunal Parekh.