473,320 Members | 1,876 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,320 software developers and data experts.

Session Ends with Window.Open() Call

Hi all,
I have a very basic ASP application in which a user is authenticated,
a flag is set in a session variable, and a new window is opened. The
file opened exists in the same application directory as the file which
sets the session flag. After calling the window.open() method in
javascript to open my new file, the session id changes. This is very
very bad. After a week of scouring the groups, I have noticed a ton
of other people having similar problems, seemingly a remnant of the
"Browse in process" errors, however; microsoft says the problem is
resolved by upgrading to IE 5.5. Well, I have IE 6.0.28, and the
problem persists.

Has there been any resolution for this bug in internet explorer? If
there isn't a resolution yet, what types of SECURE workarounds are
available? How am I expected to use the session feature of ASP if it
doesn't work across browser windows?
Jul 19 '05 #1
1 3538
"Justin Beckwith" wrote:

I have a very basic ASP application in which a user is authenticated,
a flag is set in a session variable, and a new window is opened. The
file opened exists in the same application directory as the file which
sets the session flag. After calling the window.open() method in
javascript to open my new file, the session id changes. This is very
very bad. After a week of scouring the groups, I have noticed a ton
of other people having similar problems, seemingly a remnant of the
"Browse in process" errors, however; microsoft says the problem is
resolved by upgrading to IE 5.5. Well, I have IE 6.0.28, and the
problem persists.

Has there been any resolution for this bug in internet explorer? If
there isn't a resolution yet, what types of SECURE workarounds are
available? How am I expected to use the session feature of ASP if it
doesn't work across browser windows?


Justin -

We first observed this problem several months ago, and have not yet found a
solution. FWIW, it seems to be an IE/IIS-only "feature". The session loss
does not occur with other browsers, and as far as I can tell, new sessions
are not spawned on non-IIS web servers.

In the course of my investigation into the problem, I was advised that many
sites resolved the problem by adding P3P policies. As these policies can be
held legally binding, my organization has been slow to move on the issue,
leaving me unable to confirm whether this would resolve the problem for us.

There is a reliable solution -- normal cookies work as suspected. If you
implement your own session management system, you can achieve the kind of
behavior you desire. This is, of course, more work, and more or less limits
you to primitive data types in session variables, but it is considerably
more predictable, compatible, and scalable.
--
Dave Anderson

Unsolicited commercial email will be read at a cost of $500 per message. Use
of this email address implies consent to these terms. Please do not contact
me directly or ask me to contact you directly for assistance. If your
question is worth asking, it's worth posting.
Jul 19 '05 #2

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

9
by: Pack Fan | last post by:
I've noticed that session variables will persist on Mac IE even after all browser windows have been closed. One must quit the program to clear the session variables. This presents a security risk...
1
by: Vetrivel | last post by:
Application architecture : Develop interface between two existing systems, a. Enterprise CRM system b. Web based intranet system. Environment : Intranet Server : IIS and ASP. Script :...
4
by: HolaGoogle | last post by:
hi there, i've 2 questions for you guys.... 1: is there any way to "force" a session_onend(), session timeout or at least call my logout method when a user leaves the application window without...
12
by: ACaunter | last post by:
Hi all, I was wondering how i could write some code which would automatically open the Login Page once the session has expired? -- AdamPC@hotmail.com
5
by: anonmous | last post by:
Hello, I am creating a pdf via some code. Now when the pdf is created, I assign the filename to a session variable and open a new window with the pdf. Now when the user closes the pdf window, I...
10
by: Li Pang | last post by:
Hi, I created a html page from which I give a link to another web site. The new site is opened in a new window. When I opened multiple windows, they all have the same SessionID. I want ot know...
7
by: Bill | last post by:
I've noticed that in my ASP application that session variables are not carried over from one IE6 open browser window to another. Can anyone tell me how IE can do this? It seems like it's a useful...
3
by: dmalhotr | last post by:
Hi, I would like to know if there was a way to trap a session timeout on an asp.net event. What I mean is that I've set a session timeout in the web.config file. What I would like to do is...
4
by: Yonih | last post by:
Hey Yall, I am trying to incorporate a Once Per session Cookie that will expire once the browser is closed so some one who comes to my website will see my popup the first time her visits the...
0
by: DolphinDB | last post by:
Tired of spending countless mintues downsampling your data? Look no further! In this article, you’ll learn how to efficiently downsample 6.48 billion high-frequency records to 61 million...
1
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: Vimpel783 | last post by:
Hello! Guys, I found this code on the Internet, but I need to modify it a little. It works well, the problem is this: Data is sent from only one cell, in this case B5, but it is necessary that data...
0
by: jfyes | last post by:
As a hardware engineer, after seeing that CEIWEI recently released a new tool for Modbus RTU Over TCP/UDP filtering and monitoring, I actively went to its official website to take a look. It turned...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
0
by: CloudSolutions | last post by:
Introduction: For many beginners and individual users, requiring a credit card and email registration may pose a barrier when starting to use cloud servers. However, some cloud server providers now...
0
by: Shællîpôpï 09 | last post by:
If u are using a keypad phone, how do u turn on JavaScript, to access features like WhatsApp, Facebook, Instagram....
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.