smart way to set "timeout" security

[anudu]

hi all,

I am developing a system using asp.net(c#). I am using "left" "top" & "Middle" design in my system. I want to set a time out mechanism. when the user has expired the configured time the user is derected to a tomeout mesassage page.

at the moment i am using fillowing code in page load metod in all middle pages.

if (Session["UserId"] != null)
{
if (!IsPostBack)
{
////
//// necessry methods
////
}
}

else
{
Server.Transfer("TimeOutMessage.aspx");

}


can anyone propose another smart way to do this?

Thanx

Anushka

[Shashi Sadasivan]

Hi,
Your code is almost pretty much necessary for each page that you create (except the login screen ofcourse)
You dont want people to bookmark pages and think that they can just get in without logging in later on.

To expire a session you can set its properties during the time you create the session. So the moment the session expires it would become null and then any postback even being triggered would transfer the user to the login page