473,394 Members | 1,878 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,394 software developers and data experts.

New session for every page???

Hey All!

I recently bought a new web server and am in the process of migrating
all of our websites over. We're going from Windows 2000 IIS 5.0 to
Windows 2003 IIS 6.0. I've been able to get everything to work
correctly except for the SessionID's. For some reason I'm getting a
new SessionID on EVERY single page that I visit! Which makes it quite
difficult to login and add items to your cart...hehe.

Everything is running ASP, there is no ASP.NET pages, I don't even have
the 1.0 or the 2.0 Framework installed on the server yet. I verified
that the Globals.asa is on the server on and config'ed correctly.

Any ideas? I'm pulling my hair out on this one.

Thanks for all the help!

Oct 11 '06 #1
6 1656

<ss******@homier.comwrote in message
news:11**********************@i42g2000cwa.googlegr oups.com...
Hey All!

I recently bought a new web server and am in the process of migrating
all of our websites over. We're going from Windows 2000 IIS 5.0 to
Windows 2003 IIS 6.0. I've been able to get everything to work
correctly except for the SessionID's. For some reason I'm getting a
new SessionID on EVERY single page that I visit! Which makes it quite
difficult to login and add items to your cart...hehe.

Everything is running ASP, there is no ASP.NET pages, I don't even have
the 1.0 or the 2.0 Framework installed on the server yet. I verified
that the Globals.asa is on the server on and config'ed correctly.

Any ideas? I'm pulling my hair out on this one.

Thanks for all the help!
Goto the application configuration dialog (Open properties on application in
IIS manager, select home directory tab, click Configuration...) on the
mappings tab ensure Cache ISAPI Extensions is checked.

Oct 12 '06 #2
Thanks for the response Anthony!

I verifed that the ISAP extensions were enable, I verified that the
Enable Session State was enabled. I even went to the extent to make
sure that the McAfee On Acess scan was disabled just thinking that it
may be folling with the Globals.asa file.

I alomst positive that this can not be code related since these
sessions are working flawlessly on our current web server.

The only other thing that I can think to tell you is that we're not
using cookies for sessions, we're using database driven sessions.

I hope this helps, and appreciate all the help!
Anthony Jones wrote:
<ss******@homier.comwrote in message
news:11**********************@i42g2000cwa.googlegr oups.com...
Hey All!

I recently bought a new web server and am in the process of migrating
all of our websites over. We're going from Windows 2000 IIS 5.0 to
Windows 2003 IIS 6.0. I've been able to get everything to work
correctly except for the SessionID's. For some reason I'm getting a
new SessionID on EVERY single page that I visit! Which makes it quite
difficult to login and add items to your cart...hehe.

Everything is running ASP, there is no ASP.NET pages, I don't even have
the 1.0 or the 2.0 Framework installed on the server yet. I verified
that the Globals.asa is on the server on and config'ed correctly.

Any ideas? I'm pulling my hair out on this one.

Thanks for all the help!

Goto the application configuration dialog (Open properties on application in
IIS manager, select home directory tab, click Configuration...) on the
mappings tab ensure Cache ISAPI Extensions is checked.
Oct 12 '06 #3

<ss******@homier.comwrote in message
news:11*********************@e3g2000cwe.googlegrou ps.com...
Thanks for the response Anthony!

I verifed that the ISAP extensions were enable, I verified that the
Enable Session State was enabled. I even went to the extent to make
sure that the McAfee On Acess scan was disabled just thinking that it
may be folling with the Globals.asa file.

I alomst positive that this can not be code related since these
sessions are working flawlessly on our current web server.

The only other thing that I can think to tell you is that we're not
using cookies for sessions, we're using database driven sessions.

I hope this helps, and appreciate all the help!
Sounds like the client isn't accepting the session cookie. This could be
due to the new server being treated as part of a different zone or privacy
data coming from the new server differing from that of the original causing
the client to decline cookies from it.

Note that session doesn't use cookies to store it's data anyway. However
the Identity of the session is a cookie.

>
Anthony Jones wrote:
<ss******@homier.comwrote in message
news:11**********************@i42g2000cwa.googlegr oups.com...
Hey All!
>
I recently bought a new web server and am in the process of migrating
all of our websites over. We're going from Windows 2000 IIS 5.0 to
Windows 2003 IIS 6.0. I've been able to get everything to work
correctly except for the SessionID's. For some reason I'm getting a
new SessionID on EVERY single page that I visit! Which makes it quite
difficult to login and add items to your cart...hehe.
>
Everything is running ASP, there is no ASP.NET pages, I don't even
have
the 1.0 or the 2.0 Framework installed on the server yet. I verified
that the Globals.asa is on the server on and config'ed correctly.
>
Any ideas? I'm pulling my hair out on this one.
>
Thanks for all the help!
>
Goto the application configuration dialog (Open properties on
application in
IIS manager, select home directory tab, click Configuration...) on the
mappings tab ensure Cache ISAPI Extensions is checked.

Oct 12 '06 #4
How would I go about looking at the zoning or privacy data coming off
the server? I'm still somewhat of a newb when it comes to the whole
IIS thing...hehe

Do you have any suggestions on what steps I should take next?

Thanks a million for all your help!
Anthony Jones wrote:
<ss******@homier.comwrote in message
news:11*********************@e3g2000cwe.googlegrou ps.com...
Thanks for the response Anthony!

I verifed that the ISAP extensions were enable, I verified that the
Enable Session State was enabled. I even went to the extent to make
sure that the McAfee On Acess scan was disabled just thinking that it
may be folling with the Globals.asa file.

I alomst positive that this can not be code related since these
sessions are working flawlessly on our current web server.

The only other thing that I can think to tell you is that we're not
using cookies for sessions, we're using database driven sessions.

I hope this helps, and appreciate all the help!

Sounds like the client isn't accepting the session cookie. This could be
due to the new server being treated as part of a different zone or privacy
data coming from the new server differing from that of the original causing
the client to decline cookies from it.

Note that session doesn't use cookies to store it's data anyway. However
the Identity of the session is a cookie.


Anthony Jones wrote:
<ss******@homier.comwrote in message
news:11**********************@i42g2000cwa.googlegr oups.com...
Hey All!

I recently bought a new web server and am in the process of migrating
all of our websites over. We're going from Windows 2000 IIS 5.0 to
Windows 2003 IIS 6.0. I've been able to get everything to work
correctly except for the SessionID's. For some reason I'm getting a
new SessionID on EVERY single page that I visit! Which makes it quite
difficult to login and add items to your cart...hehe.

Everything is running ASP, there is no ASP.NET pages, I don't even
have
the 1.0 or the 2.0 Framework installed on the server yet. I verified
that the Globals.asa is on the server on and config'ed correctly.

Any ideas? I'm pulling my hair out on this one.

Thanks for all the help!

>
Goto the application configuration dialog (Open properties on
application in
IIS manager, select home directory tab, click Configuration...) on the
mappings tab ensure Cache ISAPI Extensions is checked.
Oct 12 '06 #5
On Wed, 11 Oct 2006 12:34:41 -0500, <ss******@homier.comwrote:
For some reason I'm getting a new SessionID on EVERY single page that
I visit!
Have you checked the recycling settings for the application pool? I have
seen the behavior you report when it is configured to recycle after each
request.

--
Justin Piper
Bizco Technologies
http://www.bizco.com/
Oct 12 '06 #6
I just did...the only one that is checked is the "Recycle worker
processes" I un-checked it and still the same thing...

This issue is going make me bald...hehe

Justin Piper wrote:
On Wed, 11 Oct 2006 12:34:41 -0500, <ss******@homier.comwrote:
For some reason I'm getting a new SessionID on EVERY single page that
I visit!

Have you checked the recycling settings for the application pool? I have
seen the behavior you report when it is configured to recycle after each
request.

--
Justin Piper
Bizco Technologies
http://www.bizco.com/
Oct 12 '06 #7

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

27
by: mrbog | last post by:
Tell me if my assertion is wrong here: The only way to prevent session hijacking is to NEVER store authentication information (such as name/password) in the session. Well, to never authenticate...
30
by: Robert Tweed | last post by:
Does anyone know a good resource discussing the issues involved in session theft? I've read a couple, but none that really address the problem apart from acknowledging that it is a problem; you...
9
by: William LaMartin | last post by:
I have a problem, mentioned here before, of Session and Application variables disappearing at one site but not at others or on my development computer. The problem is illustrated by an example...
3
by: Jeff Smythe | last post by:
I simply want to execute some code once when a new session of my ASP.NET application is started (I'm not using session state for anything else - just writing some data to a database). I thought...
5
by: ASP.Confused | last post by:
As you can tell from my previous posts on this issue...I'm really confused :-/ I have a few ASP.NET web applications on my web host's "https" server. Our web host has a single "bin" folder for...
6
by: Jon | last post by:
If a session times out, but the forms auth is still logged in it's possible for users to go to pages on the site that need those session variables. I was under the impression that using forms auth...
9
by: McGeeky | last post by:
Is there a way to get a user control to remember its state across pages? I have a standard page layout I use with a header and footer as user controls. Each page uses the same layout by means of...
7
by: Mr Newbie | last post by:
I have written a Custom Control Menu. Its fairly simple but it works well enough. In order to simplify things I decided to store the Menu1 custom control in Session. In the page load event below,...
14
by: Coleen | last post by:
Hi All :-) We have an APSX application using VB.net as the code behind, which uses one or two session variables per page. These Session variables are passed to the final page and calculations...
2
by: Gordon Burditt | last post by:
I had this idea about preventing session fixation, and I'm wondering what anyone else thinks about it. The idea is, essentially, don't allow session ids that YOUR PHP didn't generate (and aren't...
0
by: ryjfgjl | last post by:
If we have dozens or hundreds of excel to import into the database, if we use the excel import function provided by database editors such as navicat, it will be extremely tedious and time-consuming...
0
by: emmanuelkatto | last post by:
Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud. Please let me know. Thanks! Emmanuel
1
by: nemocccc | last post by:
hello, everyone, I want to develop a software for my android phone for daily needs, any suggestions?
0
by: Hystou | last post by:
There are some requirements for setting up RAID: 1. The motherboard and BIOS support RAID configuration. 2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...
0
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However,...
0
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can...
0
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers,...
0
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven...
0
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.