1、一种做法是利用asp.net的web。conf配置来实现
<
system.web
>
< authentication mode = " Forms " >
< forms name = " .ASPXAUTH " loginUrl = " SysLogin.aspx " defaultUrl = " Index.aspx " protection = " All " timeout = " 30 " path = " / " requireSSL = " false " slidingExpiration = " true " enableCrossAppRedirects = " false " cookieless = " UseDeviceProfile " domain = "" >
</ forms >
</ authentication >
< authorization >
< deny users = " ? " />
</ authorization >
</ system.web >
< location path = " ValidateNumber.aspx " >
< system.web >
< authorization >
< allow users = " ? " />
</ authorization >
</ system.web >
</ location >
< location path = " CheckSysLogin.aspx " >
< system.web >
< authorization >
< allow users = " ? " />
</ authorization >
</ system.web >
</ location >
< authentication mode = " Forms " >
< forms name = " .ASPXAUTH " loginUrl = " SysLogin.aspx " defaultUrl = " Index.aspx " protection = " All " timeout = " 30 " path = " / " requireSSL = " false " slidingExpiration = " true " enableCrossAppRedirects = " false " cookieless = " UseDeviceProfile " domain = "" >
</ forms >
</ authentication >
< authorization >
< deny users = " ? " />
</ authorization >
</ system.web >
< location path = " ValidateNumber.aspx " >
< system.web >
< authorization >
< allow users = " ? " />
</ authorization >
</ system.web >
</ location >
< location path = " CheckSysLogin.aspx " >
< system.web >
< authorization >
< allow users = " ? " />
</ authorization >
</ system.web >
</ location >
2一种是利用通过记录LastLoginTime来实现定时6或者是10分钟的自动过期策略