blocks|key|1490570|text|如果要将超时设置为20分钟，请使用类似以下内容：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1490571|++++<configuration>
++++++<system.web>
+++++++++<sessionState+timeout="20"></sessionState>
++++++</system.web>
++++</configuration>|code-block|syntax|javascript|1490572|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

If you want to set the timeout to 20 minutes, use something like this:

<pre class="lang-xml prettyprint-override"><code> &lt;configuration&gt;
 &lt;system.web&gt;
 &lt;sessionState timeout="20"&gt;&lt;/sessionState&gt;
 &lt;/system.web&gt;
 &lt;/configuration&gt;
</code></pre>

blocks|key|1490634|text|您在timeout属性中设置的值是设置会话超时值的正确方法之一。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1490635|timeout属性指定会话在被放弃之前可以空闲的分钟数。此属性的默认值为20。|1490636|通过为该属性赋值1，您已经将会话设置为在空闲后1分钟内放弃。|1490637|要测试这一点，请创建一个简单的aspx页面，并在Page_Load事件中编写以下代码，|1490638|Response.Write(Session.SessionID);|code-block|syntax|javascript|1490639|打开浏览器并转到此页面。将打印会话id。等待一分钟，然后点击刷新。会话id将更改。|1490640|现在，如果我的猜测是正确的，那么您希望在会话超时后立即让用户注销。为此，您可以构建一个登录页面来验证用户凭据，并创建一个会话变量，如下所示-|1490641|Session["UserId"]+=+1;|1490642|现在，您必须在每个页面上检查此变量，如下所示-|1490643|if(Session["UserId"]+==+null)
++++Response.Redirect("login.aspx");|1490644|这是一个简单的例子，说明了它是如何工作的。|1490645|但是，为了让你的产品质量安全，可以使用ASP.NET提供的Roles+&+Membership类。它们提供了基于表单的身份验证，比你正在尝试使用的普通的基于会话的身份验证可靠得多。|1490646|entityMap|0|LINK|mutability|MUTABLE|url|http://www.4guysfromrolla.com/articles/120705-1.aspx^0|2|7|0|0|7|0|0|0|0|0|0|0|0|0|0|T|I|0|0^^$0|@$1|2|3|4|5|6|7|1C|8|@$9|1D|A|1E|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|1F|8|@$9|1G|A|1H|B|C]]|D|@]|E|$]]|$1|H|3|I|5|6|7|1I|8|@]|D|@]|E|$]]|$1|J|3|K|5|6|7|1J|8|@]|D|@]|E|$]]|$1|L|3|M|5|N|7|1K|8|@]|D|@]|E|$O|P]]|$1|Q|3|R|5|6|7|1L|8|@]|D|@]|E|$]]|$1|S|3|T|5|6|7|1M|8|@]|D|@]|E|$]]|$1|U|3|V|5|N|7|1N|8|@]|D|@]|E|$O|P]]|$1|W|3|X|5|6|7|1O|8|@]|D|@]|E|$]]|$1|Y|3|Z|5|N|7|1P|8|@]|D|@]|E|$O|P]]|$1|10|3|11|5|6|7|1Q|8|@]|D|@]|E|$]]|$1|12|3|13|5|6|7|1R|8|@]|D|@$9|1S|A|1T|1|1U]]|E|$]]|$1|14|3|-4|5|6|7|1V|8|@]|D|@]|E|$]]]|15|$16|$5|17|18|19|E|$1A|1B]]]]

The value you are setting in the <code>timeout</code> attribute is the one of the correct ways to set the session timeout value.

The <code>timeout</code> attribute specifies the number of minutes a session can be idle before it is abandoned. The default value for this attribute is 20.

By assigning a value of 1 to this attribute, you've set the session to be abandoned in 1 minute after its idle.

To test this, create a simple aspx page, and write this code in the Page_Load event,

<pre><code>Response.Write(Session.SessionID);
</code></pre>

Open a browser and go to this page. A session id will be printed. Wait for a minute to pass, then hit refresh. The session id will change.

Now, if my guess is correct, you want to make your users log out as soon as the session times out. For doing this, you can rig up a login page which will verify the user credentials, and create a session variable like this -

<pre><code>Session["UserId"] = 1;
</code></pre>

Now, you will have to perform a check on every page for this variable like this - 

<pre><code>if(Session["UserId"] == null)
 Response.Redirect("login.aspx");
</code></pre>

This is a bare-bones example of how this will work.

But, for making your production quality secure apps, use <a href="http://www.4guysfromrolla.com/articles/120705-1.aspx" rel="noreferrer">Roles &amp; Membership</a> classes provided by ASP.NET. They provide Forms-based authentication which is much more reliabletha the normal Session-based authentication you are trying to use.

blocks|key|1490652|text|在web.config中使用它|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1490653|<sessionState+

++timeout="20"+
/>|code-block|syntax|javascript|1490654|entityMap^0|1|A|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@$9|N|A|O|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|P|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|Q|8|@]|D|@]|E|$]]]|L|$]]

Use this in <code>web.config</code>:

<pre><code>&lt;sessionState 

 timeout="20" 
/&gt;
</code></pre>

blocks|key|1275820|text|如果它不能在web.config中工作，你需要在IIS中设置它。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1275821|entityMap^0|6|A|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|K|8|@]|D|@]|E|$]]]|G|$]]

If it's not working from <code>web.config</code>, you need to set it from IIS.

blocks|key|1490782|text|如果您使用的是MVC，请将其放入web应用程序根目录下的web.config文件中，而不是视图目录中的web.config中。它也需要在system.web节点中，而不是像George2在他的问题中所说的那样：“我在web.config中的system.web部分下写”|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1490783|超时参数值表示分钟数。|1490784|还可以在sessionState元素中设置其他属性。你可以在这里找到信息：docs.microsoft.com+sessionState|offset|length|1490785|<configuration>
+++<system.web>
++++++<sessionState+timeout="20"></sessionState>
+++</system.web>
</configuration>|code-block|syntax|javascript|1490786|然后，您可以通过添加以下方法在Global.asax文件中捕获新会话的开始：|1490787|void+Session_Start(object+sender,+EventArgs+e)
{
++++if+(Session.IsNewSession)
++++{
++++++++//do+things+that+need+to+happen
++++++++//when+a+new+session+starts.
++++}
}|1490788|entityMap|0|LINK|mutability|MUTABLE|url|https://docs.microsoft.com/en-us/previous-versions/dotnet/netframework-3.0/h6bb9cz9(v=vs.85)?redirectedfrom=MSDN^0|0|0|11|V|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Y|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Z|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|10|8|@]|9|@$F|11|G|12|1|13]]|A|$]]|$1|H|3|I|5|J|7|14|8|@]|9|@]|A|$K|L]]|$1|M|3|N|5|6|7|15|8|@]|9|@]|A|$]]|$1|O|3|P|5|J|7|16|8|@]|9|@]|A|$K|L]]|$1|Q|3|-4|5|6|7|17|8|@]|9|@]|A|$]]]|R|$S|$5|T|U|V|A|$W|X]]]]

If you are using MVC, you put this in the web.config file in the Root directory of the web application, not the web.config in the Views directory. It also needs to be IN the system.web node, not under like George2 stated in his question: "I wrote under system.web section in the web.config"

The timeout parameter value represents minutes. 

There are other attributes that can be set in the sessionState element. You can find information here: <a href="https://docs.microsoft.com/en-us/previous-versions/dotnet/netframework-3.0/h6bb9cz9(v=vs.85)?redirectedfrom=MSDN" rel="nofollow noreferrer">docs.microsoft.com sessionState</a>

<pre><code>&lt;configuration&gt;
 &lt;system.web&gt;
 &lt;sessionState timeout="20"&gt;&lt;/sessionState&gt;
 &lt;/system.web&gt;
&lt;/configuration&gt;
</code></pre>

You can then catch the begining of a new session in the Global.asax file by adding the following method:

<pre><code>void Session_Start(object sender, EventArgs e)
{
 if (Session.IsNewSession)
 {
 //do things that need to happen
 //when a new session starts.
 }
}
</code></pre>

I have tried very hard but cannot find a solution on how to set session timeout value for in-process session for an ASP.Net web application.

I am using VSTS 2008 + .Net 3.5 + C#. Here is what I wrote by myself to set timeout to be 1 minute, is it correct?

I wrote under system.web section in the <code>web.config</code>

<pre><code>&lt;sessionState timeout="1" mode="InProc" /&gt;
</code></pre>

How to set session timeout in web.config

身份验证

我已经非常努力地尝试了，但找不到如何为ASP.Net web应用程序的进程中会话设置会话超时值的解决方案。我使用的是VSTS2008+ .Net 3.5 + C#。这是我自己写的，将超时设置为1分钟，对吗？我在web.config中的system.web部分下写的<sessionState timeout="1" mo...

问如何在web.config中设置会话超时
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在web.config中设置会话超时EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在web.config中设置会话超时
EN