Solved

session variables timing out

Posted on 2004-04-30
22
913 Views
Last Modified: 2010-04-01

My session variables seem to time out after a certain period of time, is there a way to set the time they can last?
How to redirect a user to jsp page when the session has timed out?
0
Comment
Question by:SuAeE
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 11
  • 11
22 Comments
 
LVL 92

Expert Comment

by:objects
ID: 10965317
your container will probably have an option to set the timeout, check its doco.
0
 

Author Comment

by:SuAeE
ID: 10965340

Im kind of new to this, could you give me instructions to check this plz
0
 
LVL 92

Expert Comment

by:objects
ID: 10965368
what container are you using?
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:SuAeE
ID: 10965397

What is a container? im using tomcat 4.1
0
 
LVL 92

Expert Comment

by:objects
ID: 10965414
tomcat is a container :)

you can set the timeout in tomcats web.xml file:

<session-config>
   <session-timeout>60</session-timeout>
</session-config>
0
 

Author Comment

by:SuAeE
ID: 10965425

Very good, and how about redirecting when to a page when the session times out?
0
 
LVL 92

Expert Comment

by:objects
ID: 10965441
if the session has timed out, then a new empty session will be created so you can test that.
0
 

Author Comment

by:SuAeE
ID: 10965447
What will the name of the session be? I mean something like?:

 if( session.getAttribute( "timmedout" ) == null )
    response.sendRedirect( "notloggedin.jsp" ) ;
0
 
LVL 92

Expert Comment

by:objects
ID: 10965454
no the session will be empty same as when they first load a page, so check for a variable that your code adds to it.
0
 

Author Comment

by:SuAeE
ID: 10965463

Im lost, i dont know what you mean, could you post code to explain it plz?
0
 
LVL 92

Expert Comment

by:objects
ID: 10965466
i don't know how you are using the session so can't help with specific code.
But the redirect will be exactly the same as if the user was trying to load the page for the first time.
Do you currently redirect in this case?
0
 

Author Comment

by:SuAeE
ID: 10965470

>> so check for a variable that your code adds to it.

Could you explain this more clearly plz


0
 
LVL 92

Expert Comment

by:objects
ID: 10965480
what happens when a person currently loads this page for the first time?

what do you currently use the session for?
0
 

Author Comment

by:SuAeE
ID: 10965495

Im setting many session variable throughout the web app. The first session that is set is a "loggedin" session. Is this what you mean?
0
 
LVL 92

Expert Comment

by:objects
ID: 10965509
yes so check if "loggedin" has been set in session.
0
 

Author Comment

by:SuAeE
ID: 10965517

Im checking for that already:

 if( session.getAttribute( "loggedin" ) == null )
    response.sendRedirect( "notloggedin.jsp" ) ;

Is this what you mean by set in session?
0
 

Author Comment

by:SuAeE
ID: 10965537

I want to check if the session timer limit has been reached and redirect aotomatically if it has
0
 
LVL 92

Expert Comment

by:objects
ID: 10965541
yes that is correct, so you don't need to add anything as you are already handling it.
0
 

Author Comment

by:SuAeE
ID: 10965550

Yes but what I ideally want is that if a user leaves his machine and the session variable times out there is automatic redirection to a "notlogged" page.
0
 
LVL 92

Accepted Solution

by:
objects earned 75 total points
ID: 10965563
you can't do that the session time out occurs on the server, the browser know nothing about it.
0
 

Author Comment

by:SuAeE
ID: 10965589

I know sites that do this, they must be running some code that checks the session every so often? Anyway if thats the case I couldnt be bothered doing it, thanks for the help
0
 
LVL 92

Expert Comment

by:objects
ID: 10965612
only way i can think of to achieve it is to run a timer of some description on the client.
I doubt they actually check whether the session has actually timed out or not.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you troubleshoot Outlook for clients, you may want to know a bit more about the OST file before doing your next job. IMAP can cause a lot of drama if removed in the accounts without backing up.
Popular third-party chat platforms like Slack, Discord, and Telegram are just a few of the many new productivity applications that are being hijacked by cybercriminals to create command-and-control (C&C) communications infrastructures for their malw…
In this video, viewers are given an introduction to using the Windows 10 Snipping Tool, how to quickly locate it when it's needed and also how make it always available with a single click of a mouse button, by pinning it to the Desktop Task Bar. Int…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question