how to persist login

[Rotsey]

Hi,

I have a web site dev with VS2003, .NET 1.1.

I am persisting the login with the statement below
When I login and then close the browser repoen it
works fine. But when I leave the session to timeout
it wants me to login again.

Anyone no why????

rotsey


FormsAuthentication.SetAuthCookie(usr, True)

 

[Peter Bradley]

Because the session has timed out.

Secure programs don't leave people logged in indefinitely - otherwise anyone
could hijack the session. The default timeout is 20 minutes and it's set in
Web.config. We reduce this to 10 minutes for security reasons on our
applicaitons.

The default timeout for the cookie is one hour. It seems nonsense to have
these at different values, so we set them both to 10 minutes.

YMMV.


Peter