Hi
Lets say hypothetically a user's session timeout was a lot longer than the FormsAuthentication login timeout. If the user's login timed out and the user was redirected to the login page then the session information would still be intact. I am presuming the forms auth module would not do anything to reset the session behaviour as this could be unwanted behaviour.
In this scenario when a user has been redirected to the login page you need to manually set up a new session for the user. How and where would you do this? Lets say you store information about the user in the session state such as their name. I am presuming then that after the user has logged in you would call session.abandon and start a new session for the user and store their personal details in the new session. Is this right or would you do something else?
many thanks
andrea
...
Go to the complete details ...