具有身份验证的web.config

<?xml version="1.0"?>
<configuration>
<appSettings>
<add key="ConnectionString" value="server=localhost;Trusted_Connection=true;database=Commerce"/>
</appSettings>
<connectionStrings/>
<system.web>

<compilation debug="true"/>

<authentication mode="Forms">
<forms name="shopDoNetAuth" defaultUrl="Default.aspx" loginUrl="Default.aspx" protection="All" timeout="20" path="/"/>
</authentication>

<authorization>
<allow users="?"/>
</authorization>
</system.web>
<location path="Checkout.aspx">
<system.web>
<authorization>
<deny users="?"/>
</authorization>
</system.web>
</location>
<location path="OrderList.aspx">
<system.web>
<authorization>
<deny users="?"/>
</authorization>
</system.web>
</location>
<location path="OrderDetails.aspx">
<system.web>
<authorization>
<deny users="?"/>
</authorization>
</system.web>
</location>
</configuration>

另外用 User.Identity.Name != "" && User.Identity.Name != null 判断用户是否已登录