Hi, In your control logic you can call: request.getSession(false); this will return null if no session is associated with the request and depending on the result of this you can redirect the user to a session timeout page. Thanks, Steve
and remember, HTML is stateless, so there's no way to contact the client WHEN their session times out. You can only notify them the next time they make a request to the application with the method Steve Granton mentioned. Also, check out the HttpSessionBindingListener -- it allows you to do things on the server side when the session expires.
The Servlet 2.3 API makes it easier. Here's an older thread talking about it some - but it has links to dead threads there. JavaPro has information on session listeners, among other cool additions in 2.3 API. Of course, you'd have to move to a compliant app server. --- [ April 19, 2002: Message edited by: Toby Davis ]