Can you explain the business rule here?
If you wish to insure that an employee has logged out after a specific
period of time, then you also have to decide if the page should be cleared.
In other words: if an employee logs in to a particularly sensitive data
screen, and then leaves their desk for lunch, should the browser
automatically redirect to a more generic page before logging the user out?
Automatic redirection can happen with standard HTML redirection.
Autologout is also pretty simple. You take a timestamp when the page is
sent to the browser and send it in a cookie. The next request to the site
will include the cookie. Check it to see if a particularly long period of
time has passed. If it has, reject the request, and/or redirect the request
to a login page, and clear any other cookies that manage the session. Note
that .Net session management will do most of this for you.
--
--- Nick Malik [Microsoft]
MCSD, CFPS, Certified Scrummaster
http://blogs.msdn.com/nickmalik
Disclaimer: Opinions expressed in this forum are my own, and not
representative of my employer.
I do not answer questions on behalf of my employer. I'm just a
programmer helping programmers.
