security timeout question

[inutelinside]

Where is the security timeout being set? Can it be
overridden by ASP classic code?

The following displays after 45 minutes of leaving the
application idle:

"Your session has been timed out for security
purposes.
Please close the browser and re-open to access resources.

 

[Chopstik]

Not to sound foolish, but what is the security timeout? Or is this related to your post (thread117-1089849) from yesterday? If so, did not the answer posted help and, if it did not, can you provide more details to the problem you are encountering?

------------------------------------------------------------------------------------------------------------------------
"I am not young enough to know everything."
Oscar Wilde (1854-1900)

 

[inutelinside]

I don't know if you have experienced this in your application but my understanding of security timeout is when you leave your application idle for quite sometime the connection will be automatically close i.e. when you click a hyperlink you will not be redirected to that page but rather a message is displayed that asks you to close your browser and relogin again.

 

[Chopstik]

I am unfamiliar with a security timeout, per se. However, I have configured the pages in a web application to produce an error message similar to what you have received in the case that the user's session times out. But that was done by coding. You may also be able to configure it using IIS, but I am not entirely certain about that.

For additional help with this, you might also try forum333.

------------------------------------------------------------------------------------------------------------------------
"I am not young enough to know everything."
Oscar Wilde (1854-1900)

 

[inutelinside]

can you show me how?

 

[Chopstik]

Let's say you set a session variable in your Page1 (or a login page):

Session("ID") = "myUserID"

Then, you go to Page2 and leave it there for an hour because you had to go to lunch (and we'll assume that the session timeout is left at the default 20 minutes). After you get back, you realise you forgot to do something on Page3, so when you click to Page3, the first thing that Page3 (and all other pages, but we're using this as an example) will check for is that the ID is still valid. You would put this near the top of your page:

if len(Session("ID")) then
  [COLOR=green]'do something[/color]
else
  [COLOR=green]'redirect back to your login page as their session has timed out.  You can also put a specific error message here or whatever else you want to do.[/color]
end if

Does this help?

------------------------------------------------------------------------------------------------------------------------
"I am not young enough to know everything."
Oscar Wilde (1854-1900)