
Session Variable Time-outs
In all honesty, unless you are specifically NEEDING the security of a
Session Variable and even the timeout feature, try to consider other ways of
maintaining state and values: the query string, post methods and - of
course - cookies.
Session variables require that cookies be enabled and they can be a resource
hog. Each time a browser is opened into your site, there's a session ...
there could be hunbdreds of sessions going at anyone time. When someone
leaves, the session continues for the length of its life. Sara suggested 40
or 60 minutes, this is BAD, because your visitor would leave but his session
would still be running for an hour afterwards. Meanwhile a flood of visitors
come in and the resource requirements start to climb.
Are Session Variables Really Evil?
http://www.4guysfromrolla.com/webtech/faq/Advanced/faq4.shtml
A Scalable alternative to session variables
http://www.4guysfromrolla.com/webtech/041600-2.shtml
Pros and Cons of Session Variables
http://www.aspfaqs.com/webtech/092098-2.shtml
Quote:
> I use a session variable on my site, but if a user logs in and doesn't use
> the site for more than 10 minutes it times out and they have to log in
> again. Is there something I can do to stop the session variable from
timing
> out?
> Charles