Maintaining Login State
Written by Eric Smith, Northstar Computer Systems LLC
In certain applications, it's important to determine whether the user is logged into the application. This is especially important on financial and other sensitive applications that, if left open and active, could allow unauthorized users access to the system by using someone else's terminal.
The easiest way to make this work is to create a Session variable. You don't have to get fancy with the name or value of the variable…just pick one and in each page that deals with the application, check to make sure the expected value is in that Session variable. The reason you use the Session object is that after a designated time (20 minutes is the default), the session expires and all the variables in the Session object go away. Using this technique will prevent users from viewing any more pages in a site once the session has timed out.
Keywords: [
Uncategorized ASP Tips
]
Publication Date: 9/1/1999
|