hello
put this code in every page load event
if(session("loggedIn") != null)
{
//here put ur page load code
}
else
{
Response.Redirect("LoginPage.aspx");
}
u have to put this code in all pages page_load event those pages u can only access after loging only...
coz some information need to removed from memory so that session expires will occur for 20 min defalut u can chage that in web.config file..