Problems with Timeout

[mike55]

I am trying to set the timeout of my site to 20 minutes, however I cannot seem to get it to work. Some pages will timeout after about 5 minutes, others will do so after 60 minutes.

 

Here is what I have done so far:

1. I have set the timeout value in the web.config file:

<authentication mode="Forms">
   <forms name="www.abc.eu" loginUrl="Index.aspx" timeout="20" />
 </authentication>

 

2. I went to IIS, selected Virtual Directory and clicked on the Configuration button. In the Options tab, I set the session timeout value to 20 minutes and left the ASP Script timeout at 90 seconds.

 

3. Still in IIS, I selected the Http Headers tab and have selected the "Expire after:" radio button and I have set that to 1 day (Should I set it to longer).

 

4. Next I went to the ASP.NET tab, and clicked the Edit Configuration button. I selected the Authentication tab, and confirmed that my cookie timeout is set to 20. The tickbox Enable Sliding Expiration is also ticked.

 

5. I then selected the State Management tab. Here I see that the Session State mode is: InProc, the Cookieless mode is: UseCookies and Session timeout is set to: 20 minutes.

 

Can anyone suggest what I have done wrong? or why I cannot control the session timeout.

 

Mike55.

[mike55]

Potential Solution

 

Ok, I am after finding a beautiful little fix. Simply add the following javascript to your pages.

var g_nSessionTimeout  = 20; // time out in minutes
var g_nSessionWarn    = 0; //when to warn ** g_nSessionTimeout - g_nSessionWarn = displayed time when warning is displayed
var g_nStopMinutes    = ( g_nSessionTimeout - 1 );
var g_nStopSeconds    = 59; 


function stop() {
	clearTimeout(tick);
}    
  
function sessionTimer() 
{  
  
	if ( g_nSessionTimeout != 0 )
	{
   	if ( g_nStopSeconds == 0 )
       {
       	g_nStopSeconds = 59;
          	g_nStopMinutes = ( g_nStopMinutes - 1 );
          	if ( g_nStopMinutes == ( ( g_nSessionTimeout - g_nSessionWarn) - 1 ) )
           	window.alert('For security reasons your session will \n time out in ' +  (g_nSessionTimeout - g_nSessionWarn)  + ' minutes if there is no activity.');
      	}
                   
       else
       	g_nStopSeconds = (g_nStopSeconds - 1);
 
      	if (g_nStopSeconds <= 9)
       	g_nStopSeconds = "0" + g_nStopSeconds;
   
      	window.status = ('Your Session Will Time Out In ' + g_nStopMinutes + ':' + g_nStopSeconds);
 
     	if ( ( g_nStopMinutes == 0) && ( g_nStopSeconds == 0) )
     	{
      		window.status = 'Your sesson has been disconnected';
   
         	var url = location.href;
           arg = "";
           arg = arg + "/default2.aspx";
           url1 = url.substring(0,url.lastIndexOf(".asp")+1);
           top.location.href = url1.substring(0,url1.lastIndexOf("/")+1)+arg; 
 		}
 			
 		else
   		setTimeout( "sessionTimer()",1000 ); 
 	}
}

sessionTimer(); 

 

It displays a message at the bottom of your page in the explorers bottom bar, that tells you how long you have left till you are logged out.

 

Mike55.