I use authentication and authorization for website, and I set the session to expire in 20 minutes.
the users will be recircted to login page if they input a url or click refresh button after session expired, it works fine
but my problem is that, if a user open a page, come back after the session expired, he still can click on a button and invoke server side event.
is there anyways to stop this please?
Thanks
...
Go to the complete details ...