smoksmanh
Posts: 9
|
| Posted: 12/08/2014, 1:28 AM |
|
I develop the web base that requires a user to login. If the page is idle for more than 20 minutes, it requires the user to re-enter their username and password. Is there a way to change the time out to 120 minutes in Code or in web.config?
|
 |
 |
Dreamcatchers
Posts: 120
|
| Posted: 02/21/2015, 3:11 PM |
|
Timeout is a function of your server settings (IIS). One way I have worked around this is to modify the login page to store my login information (userid, username, goupid) as a cookie. THen on initialize check if the cookie exists and the session variables are empty. If session variables are empty then reset them from your cookies.
_________________
Training and LMS Developer |
|
|
|
cvboucher
Posts: 191
|
| Posted: 02/23/2015, 8:50 AM |
|
Dreamcatchers,
That sure sounds like a big security hole unless you are encrypting and signing the cookie content. If it's plain text then someone could take a cookie editor and change their userid, username and/or groupid.
Craig
|
|
|
|
ainwee
Posts: 1
|
| Posted: 03/26/2015, 4:59 AM |
|
THen on initialize check if the cookie exists and the session variables are empty. If session variables are empty then reset them from your cookies. ????
___________________________________________________________
[url=http://www.test-king.com/learn-language/IELTS.htm]http://www.test-king.com/learn-language/IELTS.htm[/url]
[url=http://www.test-king.com/learn-language/TOEFL.htm]http://www.test-king.com/learn-language/TOEFL.htm[/url]
[url=http://www.goucher.edu/]http://www.goucher.edu/[/url]
_________________
GuL |
|
|
|
