Try adding a property to hold the timeout value to the user's session, and
have all ASP pages changes check whether this property has expired. Or,
make ASP expire sessions for you (use ASP Session, and define a Session
Timeout for the Application in IIS Manager UI), and have all ASP pages check
whether the session is old or new.
I've seen some banks be even more aggressive and even have client-side
scripting to time out sessions (in addition to server-side session-based
timeout) -- you can easily see those examples in HTML Source from the
browser.
--
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"REX" <anonymous.DeleteThis@discussions.microsoft.com> wrote in message
news:073901c3ab75$bfe27ac0$a401280a@phx.gbl...
I have an ASP page that builds a table of related data
after a user logs in. However, I want the page to expire
after the user has finished, and I don't want anyone else
to be able to use the 'Back' button on th IE toolbar to
access this personal data. How do I do this? I have tried
using the Window_OnUnload, but I do not know what object
to use.
Please help.
P.S. I have seen this used on many e-commerce sites where
you get a message stating that the page has expired.
>> Stay informed about: Timeout user navigation