I didn't find anywhere in the code where the session was abandoned...what's the default timeout for a session variable? 10 or 20 minutes? Would it be a bad idea to put a Session.Abandon in the ClearCookies() method? I don't really understand why we'd keep the session alive since it only stores the last date the user was here (in the DB) and the approval code for the secure admin section. (at least I think those are the only sessions alive)
Would dropping the session completely be useful (or good practice)?
Topic Locked
Posted - 05 August 2002 : 04:57:39
