Hi,
refering to http://www.collagenrx.co.uk/Student%20Space/home.asp

I set 2 session variables on the above login screen.

After you log in (username steve password admin) you can see to the left above the navigation that the session variable is shown. (steve)
My problem is that it resets after a very short period of time.
Each page I call beyon login checks the value of session variable and if not exist then redirects to the home page.

 if Session("loggedIn") = "no" OR Session("loggedIn") = "" then
	response.redirect "home.asp"
 end if

If you messa round looking at stats etc and going through pages, all works fine and then suddenly, the session variable is reset and i am redirected to home.asp only after a minute or so if that.


Is there a logical reason why I am not able to hold the session variable.

Steve

If you have access to your servers session timeout value - that could be the problem. The other thing is that if you are logged in and click on Home - it automatically logs you out - do you clear the session at the home.asp page?

No, The session is not cleared in home.asp. The code related to the session variable is below :

if request.form("submit") <> "" then 
  if request.form("submit") = "login" then
  
	username = request.form("username")
	password = request.form("password") 
	
	
	
	SQL = "SELECT * FROM users WHERE username = '"&username&"' and password='"&password& "'"
	Set RS = Conn.Execute(SQL)
	
	  if not (RS.EOF and RS.BOF) then
		' User Login Success
		Session("loggedIn")  = "yes"
		Session("User") = RS("fullname")
		Response.redirect("statistics.asp")
		
	  else
		' Login Fail
		response.write ("<script>alert('Invalid username or password. Please try again!');window.history.back();</script>")
	  end if
end if
end if

Everything is correct. Maybe problem from the server. Session time out is too short ??

why don't you just declare the timeout in the code or better yet use cookies. In order to use session variables you need to have cookies activated anyways so why not use something that isn't going to timeout on you.

Do you have a global.asa for the application? If so you can adjust your default session time out in the Session_OnStart() there, just add a line that says:
Session.Timeout = 30 '(that'd be for 30 minutes)

If you don't have the global.asa set up then just set it on your login page where you set your session variable to begin with. Cookies are also a good idea if you want to carry the information over many days, but usually login stuff is just for the current session for security reasons so a session variable like you are using is probably the better idea.

If the Session.TimeOut line doesn't help then you must have something in another page that is resetting your variable to log you back out.

Good luck!