Question

Implementing the SQL Server Session Provider by using aspnet_regsql.

In Web Config

<sessionState mode ="SQLServer" cookieless="false" timeout="1" allowCustomSqlDatabase="true" sqlConnectionString="Password=ads;Persist Security Info=True;User ID=sa;Initial Catalog=ASPState;Data Source=DF" />

When Session is created the new row is added for that session in database, but when session expires it is not deleting the row. whether we manually need to customize the method for deleting the expired session? If yes, explian the methods we need to override.

Thanks,
Pravin

Answer 1

Go through the Implementing a Session-State Store Provider ‘s Deleting Expired Session-Store Data section.

When the Abandon method is called for a session, the data for
that session is deleted from the data store using the RemoveItem
method. Otherwise, the data remains in the session data store to serve
future requests for the session

The mechanism for deleting expired session data depends on the
capabilities of your data source. If your data source can be
configured to delete expired session data according to the session
Timeout property, you can use the SetItemExpireCallback method to
reference the delegate for the Session_OnEnd event and raise it
when deleting expired session data.

Ref: Delete session from database after it expired?