Asp.net general settings on form Authentication

1: Add form authentication in Web. config;
 
<Authentication mode = "forms">
<Forms name = "auth" loginurl = "index. aspx" timeout = "30"> </Forms>
</Authentication>
<Authorization>
<Deny users = "? "/>
</Authorization>
2: If a registration page exists, anonymous users should also be allowed to call the registration page for registration;
The following code should be between <configuration> <system. Web> and not between <system. Web>... </system. Web>;
---------------- Indicates that anonymous users are allowed to access the userreg. ASPX page.
<Location Path = "userreg. aspx">
<System. Web>
<Authorization>
<Allow users = "? "/>
</Authorization>
</System. Web>
</Location>
3. After Successful Logon, you must create an authentication ticket to indicate that the authenticated user has been valid;

If (LOGIN successful)

System. Web. Security. formsauthentication. setauthcookie (user name, false );