protected void Page_Init(object sender, EventArgs e)
        {
            // El código siguiente ayuda a proteger frente a ataques XSRF
            var requestCookie = Request.Cookies[AntiXsrfTokenKey];
            Guid requestCookieGuidValue;
            if (requestCookie != null && Guid.TryParse(requestCookie.Value, out requestCookieGuidValue))
            {
                // Utilizar el token Anti-XSRF de la cookie
                _antiXsrfTokenValue = requestCookie.Value;
                Page.ViewStateUserKey = _antiXsrfTokenValue;
            }
            else
            {
                // Generar un nuevo token Anti-XSRF y guardarlo en la cookie
                _antiXsrfTokenValue = Guid.NewGuid().ToString("N");
                Page.ViewStateUserKey = _antiXsrfTokenValue;

                var responseCookie = new HttpCookie(AntiXsrfTokenKey)
                {
                    HttpOnly = true,
                    Value = _antiXsrfTokenValue
                };
                if (FormsAuthentication.RequireSSL && Request.IsSecureConnection)
                {
                    responseCookie.Secure = true;
                }
                Response.Cookies.Set(responseCookie);
            }

            Page.PreLoad += master_Page_PreLoad;
        }

        public virtual void SignIn(Customer customer, bool createPersistentCookie)
        {
            var now = DateTime.UtcNow.ToLocalTime();

            var ticket = new FormsAuthenticationTicket(
                1 /*version*/,
                _customerSettings.UsernamesEnabled ? customer.Username : customer.Email,
                now,
                now.Add(_expirationTimeSpan),
                createPersistentCookie,
                _customerSettings.UsernamesEnabled ? customer.Username : customer.Email,
                FormsAuthentication.FormsCookiePath);

            var encryptedTicket = FormsAuthentication.Encrypt(ticket);

            var cookie = new HttpCookie(FormsAuthentication.FormsCookieName, encryptedTicket);
            cookie.HttpOnly = true;
            if (ticket.IsPersistent)
            {
                cookie.Expires = ticket.Expiration;
            }
            cookie.Secure = FormsAuthentication.RequireSSL;
            cookie.Path = FormsAuthentication.FormsCookiePath;
            if (FormsAuthentication.CookieDomain != null)
            {
                cookie.Domain = FormsAuthentication.CookieDomain;
            }

            _httpContext.Response.Cookies.Add(cookie);
            _cachedCustomer = customer;
        }

        /// <summary>
        /// 
        /// </summary>
        /// <param name="name"></param>
        /// <returns></returns>
        public static string GetCookieValue(string name)
        {
            HttpCookie myCookie = new HttpCookie("_languageId");
            myCookie = HttpContext.Current.Request.Cookies["_languageId"];

            return HttpContext.Current.Request.Cookies[name].Value;
        }

        protected void UserAuthenticate(object sender, AuthenticateEventArgs e)
        {
            if (Membership.ValidateUser(this.LoginForm.UserName, this.LoginForm.Password))
            {
                e.Authenticated = true;
                return;
            }

            string url = string.Format(
                this.ForumAuthUrl,
                HttpUtility.UrlEncode(this.LoginForm.UserName),
                HttpUtility.UrlEncode(this.LoginForm.Password)
                );

            WebClient web = new WebClient();
            string response = web.DownloadString(url);

            if (response.Contains(groupId))
            {
                e.Authenticated = Membership.ValidateUser("Premier Subscriber", "danu2HEt");
                this.LoginForm.UserName = "Premier Subscriber";

                HttpCookie cookie = new HttpCookie("ForumUsername", this.LoginForm.UserName);
                cookie.Expires = DateTime.Now.AddMonths(2);

                Response.Cookies.Add(cookie);
            }
        }

        public ActionResult LogOn(LoginModel model, string returnUrl)
        {
            ViewBag.Message = "Please enter username and password for login.";
            if (ModelState.IsValid)
            {
                User user = ValidateUser(model.username, model.password);

                if (user != null)
                {

                    var authTicket = new FormsAuthenticationTicket(1, model.username, DateTime.Now, DateTime.Now.AddMinutes(30), model.RememberMe,
                                                                "1");
                    string cookieContents = FormsAuthentication.Encrypt(authTicket);
                    var cookie = new HttpCookie(FormsAuthentication.FormsCookieName, cookieContents)
                    {
                        Expires = authTicket.Expiration,
                        Path = FormsAuthentication.FormsCookiePath
                    };
                    Response.Cookies.Add(cookie);

                    if (!string.IsNullOrEmpty(returnUrl))
                        Response.Redirect(returnUrl);

                    return RedirectToAction("Index", "Dashboard");
                }
                else
                {
                    ViewBag.Message = "The user name or password provided is incorrect. Please try again";
               }
            }

            // If we got this far, something failed, redisplay form
            return View(model);
        }

    public static void SetUserAndCookie(this HttpContext context, string login, bool isSetCookie = true)
    {
      if (login == null)
      {
        System.Web.Security.FormsAuthentication.SignOut();
        context.User = null;
      }
      else
      {
        if (isSetCookie)
        {
          var authTicket = new System.Web.Security.FormsAuthenticationTicket
            (
               1, //version
               login, // user name
               DateTime.Now,             //creation
               DateTime.Now.AddYears(50), //Expiration (you can set it to 1 month
               true,  //Persistent
               login
            ); // additional informations
          var encryptedTicket = System.Web.Security.FormsAuthentication.Encrypt(authTicket);

          var authCookie = new HttpCookie(System.Web.Security.FormsAuthentication.FormsCookieName, encryptedTicket);

          authCookie.Expires = authTicket.Expiration;
          authCookie.HttpOnly = true;

          context.Response.SetCookie(authCookie);
        }
        context.User = new System.Security.Principal.GenericPrincipal(new System.Security.Principal.GenericIdentity(login), Array<string>.Empty);
      }
    }

 public void cookieUse(string name, string value, int day)
 {
     HttpCookie cookie = new HttpCookie(name);
     cookie.Value = value;
     cookie.Expires = DateTime.Today.AddDays(day);
     Response.Cookies.Add(cookie);
 }

        public ActionResult Index(SignInModel signIn)
        {
            if (!ModelState.IsValid) return View();
            // Hash password
            var password = CreatePasswordHash(signIn.Password);
            // If user found in the db
            var user = db.Users.FirstOrDefault(u => u.Username == signIn.Username && u.Password == password);

            if (user != null)
            {
                // Create cookie
                var cookie = new HttpCookie("User");
                cookie.Values["UserName"] = signIn.Username;
                cookie.Values["UserId"] = user.UserId.ToString();
                cookie.Values["Role"] = user.Role.RoleId.ToString();
                // If remember me, keep the cookie for one year
                cookie.Expires.AddDays(signIn.RememberMe ? 365 : 1);

                HttpContext.Response.Cookies.Remove("User");
                HttpContext.Response.SetCookie(cookie);
                return RedirectToAction("Index", "Home");
            }
            else
                ModelState.AddModelError("", "The user name or password provided is incorrect.");

            return View();
        }

		private void GetSetProperties (HttpCookie biscuit)
		{
			Assert.IsNull (biscuit.Domain, "Domain");
			biscuit.Domain = String.Empty;

			Assert.AreEqual (DateTime.MinValue, biscuit.Expires, "Domain");
			biscuit.Expires = DateTime.MaxValue;

			Assert.IsFalse (biscuit.HasKeys, "HasKeys");
			biscuit["mono"] = "monkey";
			Assert.AreEqual ("monkey", biscuit["mono"], "this");

			Assert.IsNull (biscuit.Name, "Name");
			biscuit.Name = "my";

			Assert.AreEqual ("/", biscuit.Path, "Path");
			biscuit.Path = String.Empty;

			Assert.IsFalse (biscuit.Secure, "Secure");
			biscuit.Secure = true;

			Assert.IsTrue (biscuit.Value.IndexOf ("mono=monkey") >= 0, "Value");
			biscuit.Value = "monkey=mono&singe=monkey";
#if NET_2_0
			Assert.IsFalse (biscuit.HttpOnly, "HttpOnly");
			biscuit.HttpOnly = true;
#endif
		}

        public ActionResult Login(LoginViewModel model)
        {
            string encryptedPass = Cryption.EncryptText(model.Password);
            //string decryptedPass = Cryption.DecryptText("PBilQKknnyuw05ks6TgWLg==");

            User user = userRepo.GetUserAuth(model.Email, encryptedPass);
            if (user != null)
            {
                user.LastActivity = DateTime.Now;
                user.PublicIP = Utility.GetPublicIP();
                userRepo.Save();

                HttpCookie userCookie = new HttpCookie("USER", model.Email);
                if (model.RememberMe)
                    userCookie.Expires = DateTime.Now.AddMonths(1);
                else
                    userCookie.Expires = DateTime.Now.AddDays(1);
                Response.Cookies.Add(userCookie);

                return RedirectToAction("index", "dashboard");
            } 
            ViewBag.Message = "<div class='alert alert-danger'>"
                                     + " <button class='close' data-close='alert'></button>"
                                     + " <span>Kullanıcı adı/Parola geçersizdir. </span>"
                                 + " </div>";
            return View();
        }

		/// <summary>
		/// set http response cookies
		/// </summary>
		/// <param name="response"></param>
		/// <param name="companyUserSesson">if null-remove cookie</param>
		public void SetResponse ( HttpResponseBase response , CompanyUserSession companyUserSesson )
		{
			if (companyUserSesson != null)
			{

				if (response.Cookies[SessionIdCookieName] == null)
				{
					HttpCookie sidCookie = new HttpCookie(SessionIdCookieName, companyUserSesson.Sid);
					response.Cookies.Add(sidCookie);
				}
				else
				{
					response.Cookies[SessionIdCookieName].Value = companyUserSesson.Sid;
				}
				if (response.Cookies[UserIdCookieName] == null)
				{
					HttpCookie uIdCookie = new HttpCookie(UserIdCookieName, companyUserSesson.CompanyUserId.ToString());
					response.Cookies.Add(uIdCookie);
				}
				else
				{
					response.Cookies[UserIdCookieName].Value = companyUserSesson.CompanyUserId.ToString();
				}
			}
			else
			{
				HttpCookie uIdCookie = new HttpCookie(UserIdCookieName, "") {Expires = DateTime.Now};
				response.Cookies.Add ( uIdCookie );
				HttpCookie sidCookie = new HttpCookie(SessionIdCookieName, "") {Expires = DateTime.Now};
				response.Cookies.Add ( sidCookie );
			}
		}

 private static HttpCookie CreateNewCookie()
 {
     var cookie = new HttpCookie(COOKIE_ID);
     HttpContext.Current.Response.AppendCookie(cookie);
     HttpContext.Current.Request.Cookies.Add(cookie);
     return cookie;
 }

        protected void Page_Load(object sender, EventArgs e)
        {
            //first get the cookie on the incoming request.
            HttpCookie myCookie = new HttpCookie("ExhibitorCookie");
            myCookie = Request.Cookies["ExhibitorCookie"];

            string GUID = myCookie.Value.ToString().Replace("GUID=", "");

            // Read the cookie information and display it.
            if (myCookie != null)
            {//Response.Write ("<p>" + GUID + "</p><p>" + myCookie.Value.ToString() + "</p>");
            }
            else
            {
                Label1.Text = "not found";
            }
            //second get the attendeeID from the URL.
            string AttendeeID = Request.QueryString["Attendee"];
            string MessageToScreen = CommonFunctions.GetExhibitorNamebyGUID(GUID) + " has been visited by " + CommonFunctions.GetAttendeeName(AttendeeID);
            if (string.IsNullOrEmpty(AttendeeID))
            {
                Label1.Text = "No Attendee....";
            }
            else
            {
                Label1.Text = MessageToScreen;
            }

            //third, grab name of exhibitor from db using cookie

            //optional, grab attendees name out of the database.

            //log it to tblLog, exhibitor and name of attendee.
            CommonFunctions.eventToLogDB(MessageToScreen);
        }

 public static void ResetLoginSession(int MID)
 {
     MemCache.clear();
     System.Web.HttpCookie hc = new System.Web.HttpCookie("Resx", string.Empty);
     hc.Expires = DateTime.Now.AddDays(-20);
     System.Web.HttpContext.Current.Response.SetCookie(hc);
 }

        public ActionResult SignIn(SignInViewModel logInViewModel)
        {
            if (ModelState.IsValid)
            {
                string errorMessage;
                User user = _accountService.ValidateUser(logInViewModel.UserName, logInViewModel.Password, out errorMessage);
                if (user != null)
                {
                    SimpleSessionPersister.Username = user.Username;
                    SimpleSessionPersister.Roles = user.Roles.Select(x => x.Name).ToList();
                    if (logInViewModel.StayLoggedIn)
                    {
                        FormsAuthenticationTicket formsAuthenticationTicket = new FormsAuthenticationTicket(SimpleSessionPersister.Username, true, 10080);
                        string encrypt = FormsAuthentication.Encrypt(formsAuthenticationTicket);
                        HttpCookie cookie = new HttpCookie(FormsAuthentication.FormsCookieName, encrypt);
                        Response.Cookies.Add(cookie);
                    }

                    return RedirectToAction("Index", "Feed");
                }
                ModelState.AddModelError(string.Empty, errorMessage);
            }

            return View();
        }

        /// <summary>
        /// �û���¼����
        /// </summary>
        /// <param name="username">�û���</param>
        /// <param name="roles">�û���ɫ</param>
        /// <param name="isPersistent">�Ƿ�־�cookie</param>
        public static void Login(string username, string roles, bool isPersistent)
        {
            DateTime dt = isPersistent ? DateTime.Now.AddMinutes(99999) : DateTime.Now.AddMinutes(60);
            FormsAuthenticationTicket ticket = new FormsAuthenticationTicket(
                                                                                1, // Ʊ�ݰ汾��
                                                                                username, // Ʊ�ݳ�����
                                                                                DateTime.Now, //����Ʊ�ݵ�ʱ��
                                                                                dt, // ʧЧʱ��
                                                                                isPersistent, // ��Ҫ�û��� cookie
                                                                                roles, // �û����ݣ�������ʵ�����û��Ľ�ɫ
                                                                                FormsAuthentication.FormsCookiePath);//cookie��׷��

            //ʹ�û�����machine key����cookie��Ϊ�˰�ȫ����
            string hash = FormsAuthentication.Encrypt(ticket);
            HttpCookie cookie = new HttpCookie(FormsAuthentication.FormsCookieName, hash); //����֮���cookie

            //��cookie��ʧЧʱ������Ϊ��Ʊ��tikets��ʧЧʱ��һ��
            HttpCookie u_cookie = new HttpCookie("username", username);
            if (ticket.IsPersistent)
            {
                u_cookie.Expires = ticket.Expiration;
                cookie.Expires = ticket.Expiration;
            }

            //���cookie��ҳ��������Ӧ��
            HttpContext.Current.Response.Cookies.Add(cookie);
            HttpContext.Current.Response.Cookies.Add(u_cookie);
        }

 /// <summary>
 /// Set string to cookie
 /// </summary>
 /// <param name="CookieName"></param>
 /// <param name="CookieValue"></param>
 public void SetCookie(string CookieName, string CookieValue)
 {
     HttpCookie cookie = new HttpCookie(CookieName);
     cookie.Value = CookieValue;
     cookie.Expires = DateTime.Now.AddDays(30);
     HttpContext.Current.Response.Cookies.Add(cookie);
 }

        protected void Application_PostAuthenticateRequest(Object sender, EventArgs e)
        {
            try
            {
                HttpCookie authCookie = Request.Cookies[FormsAuthentication.FormsCookieName];
                if (authCookie != null)
                {
                    FormsAuthenticationTicket authTicket = FormsAuthentication.Decrypt(authCookie.Value);
                    JavaScriptSerializer serializer = new JavaScriptSerializer();
                    if (authTicket.UserData == "OAuth") return;

                    var currentUser = serializer.Deserialize<CurrentUserPrincipal>(authTicket.UserData);
                    currentUser.SetIdentity(authTicket.Name);
                    HttpContext.Current.User = currentUser;
                }
            }
            catch (Exception ex)
            {
                ErrorSignal.FromCurrentContext().Raise(ex);
                FormsAuthentication.SignOut();
                HttpCookie oldCookie = new HttpCookie(".ASPXAUTH");
                oldCookie.Expires = DateTime.Now.AddDays(-1);
                Response.Cookies.Add(oldCookie);

                HttpCookie ASPNET_SessionId = new HttpCookie("ASP.NET_SessionId");
                ASPNET_SessionId.Expires = DateTime.Now.AddDays(-1);
                Response.Cookies.Add(ASPNET_SessionId);

                var urlHelper = new UrlHelper(HttpContext.Current.Request.RequestContext);
                Response.Redirect(urlHelper.Action(MVC.OAuth.ActionNames.SignIn, MVC.OAuth.Name));
            }
        }

 protected void ButtonLogin_Click(object sender, EventArgs e)
 {
     HttpCookie cookie = new HttpCookie("Username", this.TextBoxUsername.Text.Trim());
     cookie.Expires = DateTime.Now.AddMinutes(1);
     Response.Cookies.Add(cookie);
     this.TextBoxUsername.Text = "";
 }

        public ActionResult SendEmail(MessageDetails message)
        {
            HttpCookie cookie = new HttpCookie("authorEmail", message.authorEmail);
            Response.SetCookie(cookie);

            if (!ModelState.IsValid)
                return View("Index", message);

            if (Request.IsAjaxRequest())
            {
                MessagesContext db = new MessagesContext();
                db.Messages.Add(message);
                db.SaveChanges();

                return PartialView("_PartialEmailConfirmation", message);
            }
            else
            {
                MessagesContext db = new MessagesContext();
                db.Messages.Add(message);
                db.SaveChanges();

                return RedirectToAction("EmailConfirmation", message);
            }



        }