Login Security ASP.Net

<%@ Page Language="C#" AutoEventWireup="true" CodeFile="Default.aspx.cs" Inherits="Welcome_aspx" %>



    Untitled Page


    
    

        
        
            
                Welcome
                
                
                                    ID="hlChangePW" 
                    NavigateUrl="ChangePW.aspx" 
                    runat="server">Change Password
                 
                  
                                     ID="hlCreateUser" 
                    NavigateUrl="CreateAccount.aspx" 
                    runat="server">Create User
                 
                
                                    ID="hlManageRoles" 
                    NavigateUrl="ManageRoles.aspx" 
                    runat="server">Manage Roles
                 
            

            
                You are not logged in. 
            

         
                    ID="hlProfile" 
            NavigateUrl="ProfileInfo.aspx" 
            runat="server">Profile Information
        
        
        
         
           
           
           
         
    

    


File: Default.aspx.cs
using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
public partial class Welcome_aspx : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {
    if ( ! Profile.IsAnonymous )
    {
      this.pnlInfo.Visible = true;
      this.lblFullName.Text = Profile.firstName + " " + Profile.lastName;
      this.lblPhone.Text = Profile.phoneNumber;
      this.lblBirthDate.Text = Profile.birthDate.ToShortDateString();
      this.lbBooks.Items.Clear();
    }
    else
    {
      this.pnlInfo.Visible = false;
    }
    if (Profile.MyFlag != null)
    {
      foreach (string bookName in Profile.MyFlag)
      {
        this.lbBooks.Items.Add(bookName);
      }
    }
  }
}
File: Web.Config


  
    
    
  

  
    
    
    
    
    
    
      
        
        
        
        
                 type="System.Collections.Specialized.StringCollection"  />