ASP.NET SessionState TimeOut not working

Question

I want my web page to close when SessionState timeout occures. This is my code in my web config:

<system.web>
<sessionState timeout="1" mode="InProc"/>
</system.web>

I set to 1 minute for testing purposes. The following is my Global.asax code:

protected void Session_End(object sender, EventArgs e)
{
    Response.Redirect("~/LogOut.aspx");
}

I put a label on one of the pages in order to check the session timeout, this is the code in the Page_Load event:

lblSession.Text = "SESSION TIME: " + Session.Timeout.ToString();

When I enter the site and come to this page the label shows SESSION TIME: 1, but after 1 minute I don't get redirected to the LogOut page and the present page is still fully active and working, apparently meaning that the session has not been terminated. I am working in Visual Studio 2008 thru the development server so suggestions I've seen relating to IIS settings don't seem to be relevant at this stage. Please help!

Ondrej Tucny · Accepted Answer · 2011-11-13 10:41:50Z

3

HTTP is a request / response protocol. There is no persistent connection between the browser and the server. The code in Session_End thus effectively does nothing — it can't tell the browser to do anything.

You would need to make a (client-side) JavaScript timer and actively load the logout page right before the session timeout elapses.

answered Nov 13, 2011 at 10:41

Ondrej Tucny

28.2k6 gold badges73 silver badges93 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Hans Keﬆing Over a year ago

The code might even crash because Response is null at that point.

Dov Miller Over a year ago

Could give me some help making a javaScript timer? Thank you.

Dov Miller Over a year ago

I used an AJAX timer. In the page_Load I put the session timeout value in an int variable multiplying by 60000 to get the time out in miliseconds, then I set the interval property of the timer to the timeout minus 2000 miliseconds so that the timer fires a little before session timeout elapses. That fires the Timer_Tick event in which I redirect to the LogOut page. It works nicely. Thank you!

Yahia · Accepted Answer · 2011-11-13 10:53:21Z

1

Session_End in my experience gets called on the first postback (could be implemented via a client-side Timer) after the timeout occurred - whenever that might be... if the user just closes the browser this event may never be called (except for the case you made a specific JS handler unload to do the postback in that situation).

For some information see:

edited Nov 13, 2011 at 10:53

answered Nov 13, 2011 at 10:41

Yahia

70.5k9 gold badges117 silver badges147 bronze badges

2 Comments

Dov Miller Over a year ago

Thank you some of those links are helpful for me.

Yahia Over a year ago

@DovMiller you are welcome :-) please don't forget to upvote/mark as accepted answer that are of help (see meta.stackexchange.com/questions/5234/…).

Rahul Soni · Accepted Answer · 2011-11-13 10:40:45Z

0

This doesn't seem to be the correct way of testing your session timeout. Try putting something in the session variables. Don't touch the page for another couple of minutes, and try reading it back from Session. If your session is alive, you should be able to see the variables, else... you won't.

Learn more about session and troubleshooting session... http://aspalliance.com/1182_Troubleshooting_Session_Related_Issues_in_ASPNET

answered Nov 13, 2011 at 10:40

Rahul Soni

4,9683 gold badges39 silver badges58 bronze badges

2 Comments

Dov Miller Over a year ago

thank you, I saw your link it deals with session loss but my problem seems to be the opposite, that the session doesn't end when it's supposed to, the page continues to react as usual, buttons reacting and causing postbacks as usual etc.

Rahul Soni Over a year ago

@DovMiller, Ondrej has put it aptly. To explain it in simple terms, Session_End will not fire in the "browser" at all. It is an event that would happen at the server whenever the session ends. Since the client may or may not be connected during that time, there is no way AFAIK you can do Response.Redirect in this event. Hence, you won't see the browser react automatically. Did you get a chance to try the session variables approach that I suggested earlier?

Collectives™ on Stack Overflow

ASP.NET SessionState TimeOut not working

3 Answers 3

3 Comments

2 Comments

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

3 Comments

2 Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related