I'm trying to find info on how much a long session time out hits performance. The client I work with wants the session variable to last about 4 hours. The site is currently set for 20 minutes and has maybe 10 users at a time on the site. There are about 3 session variables that get called. I told them that the longer the session variable the more work the server will have to do. But I really don't know how much that would affect the performance. A code rework is in progress to eliminate the session variables entirerly. But I can't find anything that says how it'll effect the performance with a 4 hour session. I guess it'll all depend on how many people keep logging in and out of the site to how it affects it. Any thoughts?