Webforms Site Using HTTPCookie With 100 Year Timeout Times Out After 20 Minutes
Jun 11, 2010
I have a site that is using Forms Auth. The client does not want the site session to expire at all for users. In the login page codebehind, the following code is used:
// user passed validation
FormsAuthentication.Initialize();
// grab the user's roles out of the database
String strRole = AssignRoles(UserName.Text);
// creates forms auth ticket with expiration date of 100 years from now and make it persistent
FormsAuthenticationTicket fat = new FormsAuthenticationTicket(1,
UserName.Text, DateTime.Now,
DateTime.Now.AddYears(100), true, strRole,
FormsAuthentication.FormsCookiePath);
// create a cookie and throw the ticket in there, set expiration date to 100 years from now
HttpCookie cookie = new HttpCookie(FormsAuthentication.FormsCookieName,
FormsAuthentication.Encrypt(fat)) { Expires = DateTime.Now.AddYears(100) };
// add the cookie to the response queue
Response.Cookies.Add(cookie);
Response.Redirect(FormsAuthentication.GetRedirectUrl(UserName.Text, false));
The web.config file auth section looks like this:
<authentication mode="Forms">
<forms name="APLOnlineCompliance" loginUrl="~/Login.aspx" defaultUrl="~/Course/CourseViewer.aspx" />
</authentication>
When I log into the site I do see the cookie correctly being sent to the browser and passed back up: However, when I walk away for 20 minutes or so, come back and try to do anything on the site, the login window reappears. This solution was working for a while on our servers - now it's back. The problem doesn't occur on my local dev box running Cassini in VS2008.
View 3 Replies
Similar Messages:
Jan 26, 2011
is it possible to set a user defined timeout value on an asp.net website...i have a table that stores the time out value for each user of my website...i need to set the time out based on who logged in...i know that the default aspnet timeout setting is 20 mins of inactivity...is there any way i can circumvent this...and yes i do need to show a modal when the timeout expires and need to reset the timeout value if the user wants to continue the session or log them out if they choose not to continue...
View 1 Replies
Jun 3, 2010
We have an ASP.Net web service the call to which, due to some bad design, often takes more than 20 minutes to return. We have changed every setting that we can think of, but no matter what we do, we always get a timeout after 20 minutes. It happens that this web service is a BizTalk orchestration exposed as a web service, but I do not think that is relevant -- the error is an ASP.Net error.
There must be some setting we can change to increase the timeout to more than 20 minutes, but we've exhausted our knowledge. What setting are we missing? EDIT: Among other setting, we have tried those detailed here: [URL], which includes httpRuntime executionTimeout, sessionState timeout and app pool idle timeout.
View 2 Replies
Nov 22, 2010
I have a very peculiar problem that I've been wrapping my head around and I just can't figure it out. I have an updatepanel. Inside that I have a TabContainer. And inside that I have three TabPanels, each of which has checkboxes. Sometimes (and it happens often enough that I can easily reproduce it, but strangely may not happen with the same exact steps), when I click on different tabs or click on checkboxes inside the tabpanels (basically when I do an AJAX async postback), the request takes about a few minutes, after which the request just stops. Looking at the Firefox error console, I see this popping up after a few minutes...
Sys.WebForms.PageRequestManagerServerErrorException: An unknown error occurred while processing the request on the server. The status code returned from the server was: 0 Now, the asyncpostbacktimeout property for the ToolkitScriptManager is set at 360000, which is 6000 minutes, so the problem has nothing to do with that setting. In IE, I never have this problem and the AJAX requests are instantaneous and smooth, no delays. So this isn't a network or database lag issue. Something to do with how AJAX is run in Firefox. Why is it that sometimes, an AJAX request in Firefox takes a few minutes and just stops processing the request? And once again, the steps to reproduce this problem may not be the same every time, it seems random - very strange. Google searches have yielded very little help on this. I've tried things like extending the timeout property (which again has nothing to do with this), setting Response.Cache.SetNoStore() everywhere. Is there a crude workaround I can do (at this point, I'm willing to settle for a workaround). I just don't know anymore.
View 1 Replies
Jan 25, 2010
I have implemented the basic forms authentication.In web.config I have set the following, in the authentication tagtimeout = "50000000000" Other than that, I have an out-of the box implementation.I have no custom provider.My clients want to pretty much enter the username once a day.The timeout is in minutes, so I am sure that they are not waiting over 5 million minutes,so something else has to be booting them.
View 7 Replies
Feb 8, 2011
I have been working on a .NET/C# form that contains two time fields that are built out of dropdowns. Time A is made up of two dropdowns for Hours and Minutes and Time B is made up of two drop downs for hours and minutes too. I need to compare the two in order to ensure that Time A is always greater than B. I could just use a CompareValidator to check the hours, that works BUT doesn't take into account the minutes. So lets assume the following scenarios:
A = 11:00 B = 12:15 is fine my validation accepts this as it should do
A = 11:15 B = 11:00 is accepted because the hours are equal but otherwise shouldn't pass as the minutes aren't validated
How would you ensure B is always equal to or greater than A where dropdowns are used? I would if I could change this but not permitted to do so.
View 2 Replies
Jul 28, 2010
In my webconfig i put
<system.web>
<sessionState timeout="60"/> doesn't work for me
Also i changed in IIS configration Manager as well from 20 minutes to 60 minutes, but still it expire after 20 minutes of no actiuvity.
View 8 Replies
Mar 3, 2011
I'm facing a great problem in session. My session expires after every 4-5 minutes. Firstly I checked my web hosting settings. I increased session timeout to 50000. In my web.config I wrote :
[Code]....
Also Locally it expires withing 5 minutes. Secondly can I also increase idle timeout.
View 2 Replies
Jul 25, 2013
sessionTimeout = sessionTimeout - 10;
I Set session timeout I wnt to show the remaining session timeout on the page and show in the format seconds i.e. 7.45min remaining
View 1 Replies
Sep 20, 2010
I have an ASP.NET WebForms page with forms authentication. When users create a login, I use 'remember me' to create the authentication cookie.
What I now want to do is check the time of their last access. But LastLogin time is updated only when the user uses the login control (which they don't need to use when they have the authentication cookie on their machine), and LastActivity control is updated before any of my code runs.
It looks like the only way I can do this is to hook into the application event Application_AuthenticateRequest - right? Or is there some better way to do this?
View 2 Replies
Feb 2, 2010
I am having a little difficulty trying to wrap my head around site structures. I have quite a large asp.net site, for which: Admins can see a user list, Each user can have many accounts, and for each account can have many items. I can picture this as a breadcrumb trail of editing a particular item. User List > Mr Bob > Accounts > BOB77 > Items > Item32 > Edit
User List = All the users Mr Bob = A user the administrator has selected from the User List Accounts = A list of the user's accounts 12BOB = The administrator has selected the account named 12BOB Items = A list of the items an account contains Item32 = The item that the administrator selected Edit = The action that the administrator wants to do. I can picture how this would look like if it was using ASP.NET MVC with the URL, but I am unsure how to map this out using Webforms, and in the physical filesystem.
This is what I have thought up about how I am guessing the physical structure would look like. Will this have to use session variables to achieve what I am trying to do?
/Users/User/Edit.aspx <- for editing a user
/Users/User/View.aspx <- for viewing a user
/Users/User/Accounts/Default.aspx <- for viewing all accounts
/Users/User/Accounts/Account/View.aspx <- for viewing an account
/Users/User/Accounts/Account/Edit.aspx <- for editing an account
/Users/User/Accounts/Account/Items/Default.aspx <- for viewing all items in an account
/Users/User/Accounts/Account/Items/Item/Edit.aspx <- for editing an item
Where can I read more about this kind of setup in a web application? Or, can someone point me in the direction of an available project that has this kind of layout?
View 1 Replies
Dec 16, 2010
I am looking at how best to prevent a single user account logging on multiple times in a webforms application. I know that MembershipUser.IsOnline exists, but I've read a few forum and blog entries suggesting that this can be unreliable, particularly in scenarios where a user closes a browser (without logging out) and attempts to logon with a different machine or browser.I looked at implementing a last past the post type system; when a user logs on older users are simply kicked off. It seems that FormsAuthentication.Signout() only works for the current user.
View 2 Replies
Dec 19, 2013
I have a web application which has rather a lot of controls. I also have several buttons (add, edit, save, cancel). Most of my content page is in an update panel so it does not process the whole page. On form submit I have some javascript code which shows a div 50% opacity and an animated gif to prevent users clicking on the buttons more than once whilst it is processing the data to the server. Here is the javascript / call:
Code:
onsubmit="overlay();"
function overlay() {
el = document.getElementById('overlay');
el.style.display = "inline";
document.getElementById('Image2').src = "../Images/loader.gif";
}
function removeoverlay() {
el = document.getElementById('overlay');
el.style.display = "none";
}
The problem is it the form disables like I want it and the giff animates for about 1.5 seconds but it does not enable the form for a further 4 seconds.
Is there anyway to see what it happpening at this point. If I put some watches in my code behind it runs through less than a second so what else can it be doing.
Also on some laptops the form does not fit vertically so there is a scroll bar. When the div is shown on a submit it does not do the full screen including the scroll area.
View 10 Replies
Jan 29, 2011
I need to save how many times (seconds / minutes) each user spend in my site from his enterance to my site till exit it. How can I do this?
View 9 Replies
Mar 4, 2011
What I'm looking for is a good sample of an open source WebForms site which contains demonstrations of some best practices, design patterns etc. Just want too look how experienced people apply their knowledge to build websites which can be shown to everybody without shame :)It would be good if the samples show these technologies: IoC, Entity Framework, Unit testing (with mocks), jQuery. The small samples which demonstrate the particular technology are useless as I've already examined many of them.My goal it to improve the existing huge WinForms application, so I'm not interested in ASP.NET MVC for the time being
View 1 Replies
Dec 1, 2010
I'm used to public facing websites that use ASP.net membership - and when the SESSION vbl's timeout we re-direct to the login page like this
Code:
If Session("Yr") Is Nothing Then
Page.Response.Redirect("~Login.aspx?reason=timeout")
End If
And on the login page we check for that reason and put up a label on the screen saying that things timed out to protect sensitive data. This works fine. Now I'm doing a web site that's in house - and when the users connect they get a BROWSER POP-UP to login with the DOMAIN UN/PW - and once they get past that my default page redirects them to a home portal page. What do I do when my session vbl's expire now? I can't redirect to a login page - there is not one. How do I cause the re-authentication to happen more naturally?
View 14 Replies
Apr 20, 2010
VWD 2008 Express. IIS 6.0. Forms Authentication.My web site uses forms authentication (in case that makes a difference). Folks who are using the site indicate that it is timing out on them (logging them out) before they can finish some entries. How can I increase the timeout period? The following is my web.config file in my root directory:
[Code]....
Here is the web.config in the subdirectory to which all users are directed at login:
[Code]....
View 9 Replies
Feb 13, 2011
I want to redirect the user after 2 mins if there is inactivity for 2 mins. I am not using ASP.NEt membership. And I dont want to use Sessiontimeout for this. Session timeout will logout the user even if he is working on the system. My objective is like screensaver process.
If there is no action for the specified time, the screensaver runs. Similarly, I want to redirect the user to login page.
note that i have already handled it with the following javascript:
[Code]....
Here what my problem is,
the user is working on the site...ok.. he want to see someother site.he browse someother site and works on....or even he can do some other work in his system...but he is active in his system... What this script does is, it automatically logout the user and redirect him to login page. But it should not do while he is active...IT SHOULD REDIRECT IF HE IS NOT ACTIVE REALLY (Similar to Screensaver process)
Is it possible ?
View 1 Replies
Jun 25, 2010
Working on an ecommerce site which will be integrated with a 3rd party vendor--that vendor uses different identifiers for stores than we use internally (i.e. their store ABC123 is our 001-321). I'm researching the best approach to inspect incoming requests for reserved query-string parameters that indicate the request is using their identifiers and map the identifiers back to our identifiers (so if the request is example.com/&theirId=ABC123 I want to transform the request to example.com/&ourId=001-321). To do this mapping I need to inspect the provided ID, execute a lookup against the database or cache, and forward the request to the specified page--limiting the modifications to just the query-string parameters (other parameters will need to be maintained, as with the details of the HTTPHeader, etc). So far I'm researching a few different approaches: Implementing it in a base Page (which already does too much, but has the benefit of our Logging infrastructure and some other injected dependencies) Implementing it in an IHttpModule Using URL RewritingUsing URL Routing (looks like routing isn't what I want, feel free to offer insight if you think it still fits) Performance cost is a consideration: the actual number of times this translation will occur will be very small compared to the number of requests not requiring it--perhaps 1%. However for another integrated site we will perform this mapping on nearly every request--would a different approach be better suited to this scenario from the previous?
View 3 Replies
Jan 27, 2011
We have the timeout value set to 120 in our <form> tag within the web.config. We do not have a session timeout set.. and we have various connection strings.
We are having a problem where a session variable will disappear (become NULL) .. but, the form evidently remains 'open'.. or no re-login is required..... so, my question(s):
1. what is the relationship between form timeout and session timeout
2. how do I set session timeout
View 1 Replies
Jan 24, 2011
I have an asp.net2 WebForms project which worked fine, including referencing a dll compiled for .Net2.
Problem is that I have now recompiled the dll for .Net4 and have also 'upgraded' the VS2010 asp.net WebForms project to .Net4 and the asp.net WebForms application won't access the dll.
The first time the dll is called I get System.NullReferenceException: Object reference not set to an instance of an object.
The new dll is accessed by other WinForms applications OK.
Whatever the problem is, VS2010 freezes and I need to use Task Manager to close it down.
View 1 Replies
Jan 2, 2011
I got a a problem when using ToolkitScriptManager on masterPage with other webForm in SUbDirectory. Everytime I run other webform in the SubDirectory there was an Error "The ScriptManager must appear before any controls that need it". Then I added ToolkitScriptManager to that page I got another Error "Only one instance of a ScriptManager can be added to the page". hmmmm then I removed the ToolkitScriptManager from the MasterPage, It's worked for that page.
on that SubDirectory I had a webConfig file.
<?xml version="1.0"?>
<configuration>
<location path="MyPage.aspx">
<system.web>
[Code]....
View 2 Replies
Jan 28, 2010
I develop a asp.net web application with mysql database. Our monthy data entry records will be over 700. Here I would like to know : could mysql safely handle this monthly records year by year?to handle these records, should I need to make any registration to mysql for any services?is mysql a totally free database?
View 3 Replies
Feb 25, 2016
In an Textbox to accept the year before the current year how will validate.
View 1 Replies
Jun 1, 2010
I have a cookie which my controller uses.
How should i mock the cookie?
View 3 Replies