Clare Strickson wrote on 05 dec 2005 in
microsoft.public.inetserver.asp.general:
Is it possible to redirect the user to a login page when the session has
timed out?
No,
At session-timeout there usually is no connection with the server,
and more often than not there is not even an active page of the session on
the browser.
You could set a clientside timeout, that redirects after say 20 minutes if
not reset by a page change, but that suffers from the above too.
A proper login procedure is redirecting any page request to a login page if
not in logged in or no more in session:
<%
if session("loginAccepted")<>"sure" then response.redirect "/login.asp"
%>
