Session Expired. Force User to Log On again 1

[Creeder]

Hi All,

I have the following problem with a few ASP pages. Upon loging on, a new session variable is created. Let's say the user access certain pages and then leave it idle for more than 20 minutes (or more than the session.timeout property).

The user than reaccess the web page and i would like to redirect the user to another page, ie, the login page because the session has timeout. What would be the best approach to do this? Do i have an Include file that has a code in all of the web page that checks whether the session variable has been destroyed and then redirect the user to that page or is there another method?

Thanks for any advice.

 

[ToddWW]

That's the method that I use. When a user successfully logs into my application, I create a Session Variable like this.


Session("userid&quot = userid


That happens to be a session variable that I use throughout the application.

In my general.inc include file, which is inserted into every ASP page, I have the following code.


IF Session("userid&quot = "" THEN
Response.Redirect "login.asp?expired=yes"
END IF


Then on my login page I have a little chunk of code like this.


IF Request.QueryString("expired&quot = "yes" THEN
'Show a message telling the user that the session has expired.
END IF


You can do it a little differently. I've seen developers redirect expired sessions to a page that explains the session timeout with a link back to the login page. Whatever suits you the best should work.

Remember, you'll need <% Response.Buffer = True %> on any page that you want to issue a Response.Redirect on.

Hope this helps

ToddWW

 

[Creeder]

Thanks for the fast reply ToddWW.