preventing login hack!!

[dualshock03]

can you give us a solution for avoiding login hack...PROBLEM:a certain user just copy the exact url after loging in the system and paste it in a blank address bar for another browser to log in with out using the log in form...HOW CAN WE AVOID THIS....PLEASE SEND SOME SOLUTION FOR THIS..THANK YOU

 

[wizzardmr42]

You shouldn't have enough information in the URL in the address bar to allow someone to login/use the session...

Make sure your login form is using POST and not GET (you don't need to worry about this with ASP.NET if you are using a form runat="server").

Store information in session variables about the login, not in URLs.