Simple Forms Authentication Question

In this web.config:

<authentication mode="Forms" >
<forms name=".COOKIEDEMO"
loginUrl="login.aspx"
protection="All"
timeout="30"
path="/"/>
</authentication>
<authorization>
<allow users="?" />
</authorization
When the user is authenticated on login.aspx, the user is directed to
default.aspx.

Okay, does this mean that if I have default.aspx on the screen and walk
away for 31 minutes, and then come back and hit refresh, that I will be
directed back to login.aspx becaues my cookie has expired?

What if I delete my cookie during the 30 minutes? Or is the value held
on the server?

I ask because I deleted the cookie and refreshed the default.aspx page.
I was not redirected to login.aspx.

Thank you for helping me.john_20_28_2000@.yahoo.com wrote:
> <authorization>
> <allow users="?" />
> </authorization
Could it be because you are allowing anonymous users? Shouldn't that line be
<deny users="?" /
--
Software is like sex: it's better when it's free -- [Linus Torvalds]

Fabio Marini - A+, RHCT, MCDBA, MCAD.NET
To reply: news [at] mamakin1976 [dot] plus [dot] com