http://www.10notes.com/blog/create-a-stateful-timer-control-with-ajaxnet A new Creative + Web company Tue, 06 Jan 2009 03:33:54 +0000 http://wordpress.org/?v=2.5.1 http://www.10notes.com/blog/create-a-stateful-timer-control-with-ajaxnet#comment-5 Andre P. Mon, 28 Jan 2008 19:44:34 +0000 http://www.10notes.com/blog/20#comment-5 I think your approach is overly complicated, and doesn't allow for "true time". If you store the time/date that a session was started/reset, then you'd simply have to calculate the elapsed time as a difference instead of a sum. A clever user could easily discern your timeout mechanism in page source, and use that knowledge to prolong the timeout indefinitely. Storing the absolute start of session in a global location would also allow you to determine when a session has timed out, independent of the other sessions returning data or not. I think your approach is overly complicated, and doesn’t allow for “true time”. If you store the time/date that a session was started/reset, then you’d simply have to calculate the elapsed time as a difference instead of a sum. A clever user could easily discern your timeout mechanism in page source, and use that knowledge to prolong the timeout indefinitely. Storing the absolute start of session in a global location would also allow you to determine when a session has timed out, independent of the other sessions returning data or not.

]]>