Forced password change after x days stuck in a loop
<p>I am implementing a forced password change after 90 days for a web application - at the top of an application header file which is called on every page I check the age of the password and if it is over 90 days force the user to a password change page. This all works fine.</p>

<p>The problem is the password change page also calls the header page which does the check so it gets the same look and feel as the rest of the site but, of course, it then sticks in a never ending loop of check and redirect - what is the best way to prevent this? I don't want to have to have the password change page with no formatting, nor as a pop up and I ideally don't want to use a different template header without the password check as I will forget to update the second one when I make changes.</p>

<p>How else can I approach this? I want to make sure that the user cannot do anything other than change their password once they pass the 90 day mark.</p>

<p>Thanks
Jason</p>
