To enable slidingExpiration look at the following :-

<forms name=".DOTNETNUKE" protection="All" timeout="60" slidingExpiration="true"/>


This means that if you leave the browser alone for 1 hour it will time out but if you refresh the page or do something else on the site then the timeout will be reset back to 1 hour from now.

I hope this makes sense.

Regards

Absolutely correct. If you don't set the sliding expiration then it will timeout in an hour regardless of what you are doing.

Ok, upon further testing, I'm finding the slidingExpiration="true" does have some effect, but it does not "slide" until AFTER the expiry date is reached -- which doesn't make sense to me... but anyway, add this in as true to be on the safe side for now, unless you have specific security requirements.

Edit: I just wanted to stress how important this does work though -- because 6 months from now when cookies expire, you'll have a lot of people who don't remember their password and will end up creating new users since it cannot be retrieved via email. And, since Admins cannot identify users by lastactivedate (doesn't update either), Admins will just have to deal with lots of old/orphan users in their database.

---

Jason Honingford - Web & Software Developer
www.PortVista.com