Losing session state in ASP

 

I am running Web Wiz forums under ASP with my own existing user database (not Webwizforums new user registration).

So say a user named "BillA" logs into my site, upon his first visit to WebWizforums an account will be created for him automatically with the same username. This WebWizforum (WWF) feature is described here:

http://www.webwiz.net/web-wiz-forums/kb/existing-members-api.htm - http://www.webwiz.net/web-wiz-forums/kb/existing-members-api.htm

 

Here is the code I use to login to the forums:

 

mypass = objrs("password")
myemail = objrs("email")

(username is defined already)

Session("USER") = Username
Session("PASSWORD") = mypass
Session("EMAIL") = myemail

response.redirect("default.asp")

The first two lines of code get the password and email address of the user from the SQL database. Session variables are set (as per WWF documentation) and the user is redirected to the default page of WWF.

 

The problem is that randomly access is lost. I have only 3 levels of access for the forum: basic, advanced and administrator. Sometimes advanced as well as administrator accounts default to basic access levels. That is, you can only see and access the first access level forums. I can't even login to the Admin features as the Admin menu disappears (obviously).

 

The only remedy for users and myself is to logout of my site, close the browser and log back in and try the forums again.

 

What is going on here?

edit: I just tried my forum now and initially it let me in with admin access (all forums visible) but when I clicked on a single forum it gave me an error message about not having access. The [login] box then appears at the top of the forum page leading me to believe that it isn't so much a loss of access but it's not maintaining the login state. Even if I go back to the forum via the same page that sets the session variables, it fails.

 

 

This is occuring multiple times a day often within 2-3 minutes apart. I don't think it's anything to do with session variables not to mention that when I go back to the forum via my "autologin.asp" page it sets the session variables. So recycled or not they should be brought back to life and allow me into the forum.

 

I could write a test script and put it in the forum to display the session vars, just to eliminate the possibility it is a session issue - but I'm 99% certain it's not.

As I've mentioned though, when I go to click on the forum link it sets the session variables that instant and redirects to the forum default.asp page. The sessions would not be lost. Just to test this, I added some code to the default.asp page to display my session variables.

 

They displayed my username, password and email. I kept visiting various pages on my site and returning to the forum. Eventually it defaulted back to the public forums and not the second access level forums while the session variables were still intact.

 

For some reason the forum is losing the logged in user and it's NOT the session variables.

I have just changed the "Store Session Data in Database" option to yes and we'll see if it helps.

 

Another bug... while logged in, I may attempt to login to Admin controls by clicking on the Admin option. When I enter my password it says it is incorrect (yet it is not). I close the browser and try again and then it works.

 

It was always disabled until last night. It seemed to work for a while but today it's back to losing the user data. If I go to the forum, higher level access forums are not there and the basic access ones don't let me post because I'm not logged in.