Redirect to login page when the Session is Expired.

Question

0.00/5 (No votes)

See more:

Creating Session in login page.

MIDL

Session["Id"] = txtid.Text;
                 Session["User_type"] = ddlutype.Text;  //drop down of User type
                 Session["Password"] = txtpassword.Text;

On Button SignOut

Option 1:

Session.clear();
if (!IsPostBack)
    {
           if (Session["Id"] == null)
          {
              Response.Redirect("login.aspx");
          }
    }

Option 2:

MIDL

Session.Clear();
Session.Abandon();
Response.Redirect("login.aspx");

Either of them is Not Working...
Help !!!!!!!

Posted 20-Jun-11 21:41pm

lovejeet0707

Updated 20-Jun-11 21:53pm

ambarishtv

v6

Add a Solution

Comments

Uday P.Singh 21-Jun-11 3:46am

are you getting any error message?

lovejeet0707 21-Jun-11 3:52am

No Error Message.........
Just Session is not Expiring......

5 solutions

Solution 3

This will surely work

use

Session.Abandon();

to expire the session

and

Wite your redirection code in global.asax.cs.
somethink like :

protected void Session_End(Object sender, EventArgs e) { Response.Redirect("redirect.aspx"); }

hope this helps :)

Posted 20-Jun-11 22:06pm

Uday P.Singh

Comments

Christian Graus 21-Jun-11 4:07am

Why add another useless suggestion, instead of editing the last one ? He wants to catch when the session expires on it's own, not log the user out.

Uday P.Singh 21-Jun-11 4:21am

But he has mention something called On Button SignOut what is that?

lovejeet0707 21-Jun-11 4:29am

Christian can u help me ...........
plzzzz......

lovejeet0707 21-Jun-11 4:29am

I want when person sign out he should not return to previous screen just by pressing "Back" or typing its "url address".......

lovejeet0707 21-Jun-11 4:26am

Christian what do uou Say ??????

lovejeet0707 21-Jun-11 4:28am

I want when person sign out he should not return to previous screen just by pressing "Back" or typing its "url address".......

Christian Graus 21-Jun-11 6:42am

OK, well, you never said that. What you need then, is to mark your pages to not be cachable. Typing in the URL should not work, but, abandoning the session will not help if your pages don't check the session to make sure the user is logged in.

lovejeet0707 23-Jun-11 6:29am

All are learners Christian.......
You should always have helping hands towards others......
Atleast not criticising them......
thxxx

Solution 1

What does 'not working' mean ? Your redirect won't magically happen, because your code does not run until you ask it to. Your best bet there, is a js timer that runs when you know your session would time out, but you'd want to back that up with back end code, you have no way to synch it exactly. Your code is really poor, you should never use session keys in a free form manner, what if you typed Id on one end and ID on the other ? Use a static class to define these strings, so they are strongly typed.

Posted 20-Jun-11 21:47pm

Christian Graus

Comments

lovejeet0707 21-Jun-11 3:49am

No Session is just not Clearing.
It is Not Expiring........

Christian Graus 21-Jun-11 3:56am

Well, you should load your page, go to lunch, then test it. If you've not waited long enough for it to expire, then it won't expire. And, if it has not expired, then there's no need for this code, right ?

#realJSOP 21-Jun-11 8:10am

Or he could set the timeout for a ridiculously short period of time, like 30 seconds. :)

Solution 2

I think you need to first expire the session i.e

try this On Button SignOut:

Session["Id"] == null;

if (!IsPostBack)
    {
           if (Session["Id"] == null)
          {
              Response.Redirect("login.aspx");
          }
    }

hope this helps :)

Posted 20-Jun-11 21:49pm

Uday P.Singh

Comments

Christian Graus 21-Jun-11 3:55am

Um... that's totally stupid. If he sets it to null, then it's always null, therefore, he's just throwing away the session, and his if statement is not needed.

Uday P.Singh 21-Jun-11 4:00am

it will be set null only if Button SignOut is clicked

Christian Graus 21-Jun-11 4:07am

But that is not what he wants. He wants the user to be redirected if the session expires by itself.

Uday P.Singh 21-Jun-11 5:32am

But OP has mention something called On Button SignOut what is that?

Solution 4

Use just this code:

           if (Session["Id"] == "")
          {
              Response.Redirect("login.aspx");
}

Posted 21-Jun-11 1:22am

JustWorking

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Dylan Morley · Accepted Answer · 2011-06-21T01:34:00

Have a look at Sandeeps' article which describes the browser issue

Browser back button issue after logout[^]

As Christian has said, you need to set the pages you don't want the user to be able to navigate to after the session has expired to not be cacheable

Imagine the scenario - you're on a page that requires a session. You go to lunch and the session expires. When you come back, the page is still visible but when you try to do anything you will be directed to the authentication page with a 'return URL' that is the page you were redirected from. You authenticate again, acquire a new session and are redirected to the 'return URL'

If you tried to click back in this scenario, by marking pages as not cacheable you would still be directed to the authentication page. Again, as Christian has said - code will only run when you instruct it to by having the page make an HTTP request (e.g. a postback). You could have fancy javascript running that polls for a valid session and redirects you when it can't find one, but I don't see the point in this. The above scenario is 'expected behaviour' for me

Redirect to login page when the Session is Expired.

5 solutions

Solution 5

Solution 3

Solution 1

Solution 2

Solution 4

Add your solution here

Preview 0

Existing Members

...or Join us