Now, I will note, with all this argument, that there is, at least in vB4, a control panel option for the session timeout. The default appears to be 15 minutes.
I've never administered vB3, but wonder if the option's not there as well. So, they might be able to change it easily enough. I suppose then the question is, "is 15 minutes of inactivity really what we want to enforce?"
As I said, I've been bugged by this on occasion as well. I'm not sure what value I would propose. It can take hours to write a script, depending on its functionality and intended use. I do tend to think that if it's a long one like that, you should probably have it saved someplace besides a text input on a forum site somewhere ;-)