Question

Can anyone tell me how to detect when a users session has exipred in asp?

I want to redirect users to a logged out page once the session has expired

Thanks
Sp

Answer 1

Use the Session_End() function in your global.asax file. Please see here for more info

SO – Session End

EDIT: Nope, that probably won’t do it. See comments below.

If you must redirect on a session expiration, would something like this do the trick for you?

private void Page_Load(object sender, System.EventArgs e)
{ 

Response.AddHeader(“Refresh”,Convert.ToString((Session.Timeout * 60) + 5)); 
if(Session[“IsUserValid”].ToString()==””) 
Server.Transfer(“Relogin.aspx”);

}

EDIT 2: Caveat, this can get tricky if you have AJAX stuff going on.

I have seen examples where people will put this in the page_load of a base page and inheirit all of your .aspx pages from this base page. This prevents you from having to add this code for every single page that you have.

Why won’t the first method work (Session_End)? This is a function called internally on the server when a session ends. As such, there is no associated request/response to redirect or transfer. I.e., this function could be called by the server 20 minutes after you close the browswer.