Re: Checking for state's existence
Efran Cobisi <[email protected]> Mon, 21 Apr 2008 17:44:52 +0200
| Newsgroups | gmane.comp.windows.devel.dotnet.web |
|---|---|
| Organization | cobisi.com |
| Message-ID | <[email protected]> |
> > You rarely need to check > explicitly for the "existence of a session" - if the session has expired, > the user will no longer be able to access restricted pages, for example. This is not correct, since the ASP.NET forms authentication ticket does not depend upon the session cookie and vice versa. It is not so uncommon to see web sites configurations where the former is allowed to span for many days while the latter is restricted to 20 minutes at most. HTH -- Efran Cobisi http://www.cobisi.com =================================== This list is hosted by DevelopMentor® http://www.develop.com View archives and manage your subscription(s) at http://discuss.develop.com