Session Timeout

[Natty Gur]

Hi,


You can control when the session end by using the Session_onEnd event in
global.asax. But when the session expired the user won’t make any
request from the server so you can’t redirect him to any page. You can
develop data structure to hold the ending sessions with their cookies
values and check every incoming request if its session cookie match the
ending session and then redirect the user.

Natty Gur, CTO
Dao2Com Ltd.
28th Baruch Hirsch st. Bnei-Brak
Israel , 51114

Phone Numbers:
Office: +972-(0)3-5786668
Fax: +972-(0)3-5703475
Mobile: +972-(0)58-888377

Know the overall picture


*** Sent via Developersdex [url]http://www.developersdex.com[/url] ***
Don't just participate in USENET...get rewarded for it!

[alien2_51]

If I have a browser open and an open session on a web server, if I close all
of my browsers do I still have a session_end event that fires on the
server....?

[Seth Willits]

From what I see, the default timeout for a session is 1440 seconds or
24 minutes. I was gone for nearly an hour, came back, and the session
was still valid. Must the value set in the config file be different
than 1440, or am I misunderstanding session.gc_maxlifetime? I'd like
for the user to be required to log in if they've been inactive for 10
minutes, or if they closed the browser window and opened another one.


Sorry for all the basic questions :)


Seth Willits
------------------------------------------------------------------------
---
President and Head Developer of Freak Software - [url]http://www.freaksw.com[/url]
Q&A Columnist for REALbasic Developer Magazine -
[url]http://www.rbdeveloper.com[/url]
Webmaster for REALbasic Game Central - [url]http://www.freaksw.com/rbgames[/url]

"Not everything that can be counted counts, and not everything that
counts
can be counted."
-- Albert Einstein
------------------------------------------------------------------------
---

[ACORDEA]

I was wondering if there is any way to change the session timeout value after a
successful login using the Login behavior in Dreamweaver. Currently, after a
successful login, if the user is idle for a period of few minutes the session
will expire and the user will have to login again. I'm looking to increase that
session timeout value.

[greekchild]

Hi there, This setting has nothing to do with dreamweaver, it's a web server
setting. If you are using IIS, you can do the following Open IIS Right Click on
default web site and click properties. On the website tab, half way down you
will see a connections timeout box, set this to 10000 or something. Hope that
helps

[J.S. \(UltraSuite\)]

<%
' timeout session after 60 minutes
Session.TimeOut = 60
%>


--
__________________________________________________ __________________
UltraSuite Extension Packages: [url]http://www.ultrasuite.com/[/url]
The *most popular* Suites of DMX 2004 and DMX Server Behaviors
for ASP, ASP.Net, ColdFusion, JSP, and PHP_MySQL
__________________________________________________ __________________

[ACORDEA]

I'll have to make it more clear...
I'm using the Login server behavior.
The webserver connection was previously set to 900 seconds and the login
session was timing out after 2-3 minutes, way too early for 900 seconds which
is 15 minutes.
It must me something else.

I set it up for 10000 seconds as a test. I'll see the result.

[ACORDEA]

Originally posted by: Newsgroup User
<%
' timeout session after 60 minutes
Session.TimeOut = 60
%>

Does this portion of code have to be added on every page of the site?
--
__________________________________________________ __________________
UltraSuite Extension Packages: [url]http://www.ultrasuite.com/[/url]
The *most popular* Suites of DMX 2004 and DMX Server Behaviors
for ASP, ASP.Net, ColdFusion, JSP, and PHP_MySQL
__________________________________________________ __________________

[ACORDEA]

Originally posted by: Newsgroup User
<%
' timeout session after 60 minutes
Session.TimeOut = 60
%>


--
__________________________________________________ __________________
UltraSuite Extension Packages: [url]http://www.ultrasuite.com/[/url]
The *most popular* Suites of DMX 2004 and DMX Server Behaviors
for ASP, ASP.Net, ColdFusion, JSP, and PHP_MySQL
__________________________________________________ __________________




Does this portion of code have to be added on every page of the site?

[J.S. \(UltraSuite\)]

The best way is to add this to the global.asa file.

--
__________________________________________________ __________________
UltraSuite Extension Packages: [url]http://www.ultrasuite.com/[/url]
The *most popular* Suites of DMX 2004 and DMX Server Behaviors
for ASP, ASP.Net, ColdFusion, JSP, and PHP_MySQL
__________________________________________________ __________________

[ACORDEA]

Originally posted by: greekchild
Hi there, This setting has nothing to do with dreamweaver, it's a web server
setting. If you are using IIS, you can do the following Open IIS Right Click on
default web site and click properties. On the website tab, half way down you
will see a connections timeout box, set this to 10000 or something. Hope that
helps

I'm sorry I have to contradict, but by changing the connection timeout to
10000 seconds in my web server configuration does not change anything for my
users. They still get prompted to log in again after few minutes of inactivity.

[ACORDEA]

Originally posted by: Newsgroup User
The best way is to add this to the global.asa file.

--
__________________________________________________ __________________
UltraSuite Extension Packages: [url]http://www.ultrasuite.com/[/url]
The *most popular* Suites of DMX 2004 and DMX Server Behaviors
for ASP, ASP.Net, ColdFusion, JSP, and PHP_MySQL
__________________________________________________ __________________




I'm not using the global.asa file. I'm using the Server Login behavior from
within Dreamwever.

[btn]

Hi - using ASpAccess/VBscript

[btn]

Hi - Using ASP/Access/Vbscript

What is the default session timeout when I use the Log In behaviour in DW ?
How can I make this time longer?

Thanx.

Bjorn.

[Tine Müller]

"btn" wrote:

> Hi - Using ASP/Access/Vbscript
>
> What is the default session timeout when I use the Log In behaviour in DW

?

> How can I make this time longer?
>
> Thanx.
>
> Bjorn.

You have to ask your host. Try looking at my linkes here:

My own domaine - [url]http://tinemuller.dk/serverinfo/info/[/url] is set to 30 minutter
because I have "Session.Timeout = 30 '## minutes" in my global.asa file.

The host's server is here [url]http://emma.andersenit.dk/serverinfo/info/[/url] and is
default 20 minutter.

/Tine

[david10]

Hi, All -

From time to time, my application gets terminated before it reaches the
session time-out set in application.cfm.

In "application.cfm"

<CFAPPLICATION NAME="Outage"
SESSIONMANAGEMENT="Yes"
SETCLIENTCOOKIES="Yes"
SESSIONTIMEOUT="#CreateTimeSpan(0, 1, 0, 0)#">

<CFIF NOT IsDefined("Session.LoggedIn")>
<CFLOCATION URL="../index.cfm">
</CFIF>


Following code is executed when a user logs in.

<CFLOCK SCOPE="Session" TIMEOUT="2" TYPE="EXCLUSIVE">
<CFSET Session.LoggedIn = "Yes">
</CFLOCK>

By the way, the default session timeout is 60 minutes on the server and I am
using Coldfusion 5.

Thanks.

David

[Smiller]

I need to kick people out of my admin tools if they have been idle to long.

I have no clue how to do thiw. The site is a mix of admin tools and public
information so it needs to be placed in a specific location so it doesn't kick
people out of the public area.

I would like to set it so that if someone is idle for 10 min it kicks them out
automatically back to the admin login page.

Any help would be greatly appreciated.

[SafariTECH]

set the sessiontimeout variable of your CFAPPLICATION tag to 10 minutes

[Smiller]

Oops. Should have pasted the code I used

<cfapplication name="myApp" clientmanagement="Yes" sessionmanagement="Yes"
sessiontimeout="#CreateTimeSpan(0,0,5,0)#" applicationtimeout="10">

It doesn't time out. It doesn't do anything.

[SafariTECH]

The session variables will timeout - if your application always checks for a
login, and they do nothing at the website at all during that period, it will
relocate them to a login form if that is the way you code it.

If you don't check a session variable for a login all the time the site is
accessed, it will simply keep showing pages.

If you post the entire application .cfm code, including the portions where you
are validating the session values etc, we may be able to see where things are
going a bit kaputz :)