c# - 单击退出时删除 cookie

Question

我正在使用下面的代码创建 cookie，如何读取另一个页面中的 txtusername 值以及如何在单击注销时删除 cookie(注销代码)。我是编程新手，请帮忙。

  string cookiestr;
            HttpCookie ck;
            tkt = new FormsAuthenticationTicket(1, txtUserName.Value, DateTime.Now,
            DateTime.Now.AddMinutes(30), chkPersistCookie.Checked, "your custom data");
            cookiestr = FormsAuthentication.Encrypt(tkt);

            ck = new HttpCookie(FormsAuthentication.FormsCookieName, cookiestr);
            if (chkPersistCookie.Checked)
                ck.Expires = tkt.Expiration;
            ck.Path = FormsAuthentication.FormsCookiePath;
            Response.Cookies.Add(ck);

Answer 1

您永远不应将密码存储为cookie。这是一个非常大的安全威胁。要删除 cookie，您实际上只需要修改它并使其过期即可。你不能真正删除它，即将它从用户的磁盘中删除。看看这个 documentation .

这是一个示例:

 HttpCookie aCookie;
    string cookieName;
    int limit = Request.Cookies.Count;
    for (int i=0; i<limit; i++)
    {
        cookieName = Request.Cookies[i].Name;
        aCookie = new HttpCookie(cookieName);
        aCookie.Expires = DateTime.Now.AddDays(-1); // make it expire yesterday
        Response.Cookies.Add(aCookie); // overwrite it
    }