how to disable timout in asp.net?

[johnix]

i'm working for an existing website right now and the program doesn’t have timeout in web.config file, but after 30min the site goes back to the log-in form. i want to disable that timeout. how would i do that?

[chazzy]

not listing the timeout makes it the default value.

as far as disabling it, I can't think of anything. from a performance standpoint i think that would be a bad idea - your server would quickly run out of memory.

[johnix]

thanks for response. i already got the answer. i just put
inside a web.config

sessionState="350"

and this will extend the session timeout for your application.

[debiguana]

Extending the timeout is fine; disabling it is a very bad idea.

Having unlimited sessions combined with authentication is a hacker's dream come true...

-Doug