Authenticating user identities in ASP applications (5)

V. End of Session

When the ASP session ends, the Session_OnEnd method in Global.asa is run and can be removed here
A user saved in an array of application ("Users") that was terminated by timeout. Record user is by
It is often useful to terminate a session for any reason (timeout or explicit exit), and the following code updates the users
The TimedOut field for the table implements this feature:
Sub Session_OnEnd
Dim appusers
Dim auser
Dim I
Dim j
Dim conn
Dim supportscookies
Dim founduser
On Error Resume Next
Supportscookies=session ("Supportscookies")
Application.Lock
Appusers = Application ("Users")
Founduser = False
For I = 0 To UBound (appusers)
Set auser = Appusers (I)
If Supportscookies Then
If Auser ("SessionID") = Session.SessionID Then
Founduser = True
End If
ElseIf DateAdd ("n", Session.Timeout, Auser ("LastActivity")) < Now ()
Then
Founduser = True
End If
If Founduser Then
Set conn = Server.CreateObject ("ADODB. Connection ")
Conn. Connectionstring=session ("ConnectionString")
Conn. Connectiontimeout=session ("ConnectionTimeout")
Conn.mode=session ("mode")
Conn.Open
Conn.execute "UPDATE Users SET timedout=1 WHERE users.signon= '" &
Auser ("Signon") & "'"
Conn.close
Set conn=nothing
Set auser=nothing
Set Appusers (I) = Nothing
For j = I To UBound (appusers)-1
Set Appusers (j) = Appusers (j + 1)
Next
If UBound (appusers) > 0 Then
ReDim Preserve Appusers (UBound (appusers)-1)
Else
Appusers = Array ()
End If
Exit For
End If
Next
Application ("Users") = Appusers
Application.UnLock
End Sub