ASP.NET

<br />
Response.Clear()<br />
        Response.AddHeader("Content-Disposition", "attachment; filename=" & fileName)<br />
        Response.ContentType = "application/octet-stream"<br />
        Response.TransmitFile(FullFilePath)<br />
        Response.End()<br />

private void cmdLogin_ServerClick(object sender, System.EventArgs e)
{
  UserDetails oUserDetails = validateUser(txtAssocNum.Value, txtUserName.Value, txtUserPass.Value);
  if (oUserDetails != null) 
  {
    //UserDetails oUserDetails = new UserDetails();
    
    Response.Cookies["UserID"].Path = "/";
    Response.Cookies["UserID"].Value = oUserDetails.UserID.ToString();
    FormsAuthentication.RedirectFromLoginPage(txtUserName.Value, chkPersistCookie.Checked);

    //oUserDetails = null;
  } 
  else {
    lblMsg.Text = "The information you provided does not match our database.";
  }
}

protected System.Web.UI.WebControls.Panel PanelMain;

private void Page_Load(object sender, System.EventArgs e)
{
  Response.Cache.SetCacheability(HttpCacheability.NoCache);

  if (!User.Identity.IsAuthenticated) 
  {
    Response.Redirect("~/Login.aspx");
  }

  UserDetails oUserDetails = new UserDetails();
  //UserDetails oUserDetails = UserDetails();

  PanelMain.Controls.Add(new LiteralControl("<table>"));
  PanelMain.Controls.Add(new LiteralControl("<tr><td>First Name : </td><td>" + oUserDetails.FirstName + "</td></tr>"));
  PanelMain.Controls.Add(new LiteralControl("<tr><td>Last Name : </td><td>" + oUserDetails.LastName + "</td></tr>"));
  PanelMain.Controls.Add(new LiteralControl("</table>"));

  oUserDetails = null;
}