Session restart on page request (mouseclick) in iFrame

[avdbrink]

Hey guys,

I'm building an application wich should be used by other websites inside an iFrame. My app stores some sessionvariables, but sometimes in IE (6 and 7) IIS seems to restart the session on each pageload. It does this when I post the page, or request the page, no matter what. My sessionId is changing, wich prevents me from storing for example a shoppingcart in the users session.

Weirdest thing is that it works fine in Firefox (never saw a problem), but in IE it sometimes doesn't work and sometimes it does...

Server is Windows 2003 standard, using IIS
Clients are some different machines running Firefox, IE 6 and IE 7
Applications uses nothing more than ASP, VBScript.

Any ideas?

Thanx in advance!

Arno

[jhardman]

Arno

the session id should be the same in the main page. Have tried checking there? Does the main page have the same session ID?

Jared

[avdbrink]

Jared,

No, the main page, containing the IFrame is running on another website. So the two of them have a seperate SessionId.

Any other suggestions?

Thanx,

Arno

[jhardman]

Jared,

No, the main page, containing the IFrame is running on another website. So the two of them have a seperate SessionId.

Any other suggestions?

Thanx,

Arno

That could be the problem. Have you tried sending a cookie?

Jared

[avdbrink]

Jared,

I've done that and in Firefox the cookie stays put, but in IE it disappears. I even printed the session id in the screen and see it changing (increasing) while browsing through my catalogue when using IE, FireFox uses just one session id.

So, just to be sure there's no mistake about that: I don't want to keep the session from the parent frame to exist inside the iframe, it's just the different pages inside the iframe (that link to eachother) that keep skipping to the next session.

Regards,

Arno

[avdbrink]

Well, thanks for thinking along, but I just found the answer.

It's a IE problem started from IE 6 wich introduced Platform for Privacy Preverences (P3P) Project. This makes my IMframe content "third party content" and sets the privacy setting to Medium, silently rejecting cookies sent from my site.

Adding a custom header to my app telling the brwoser that it's "good" content solved the problem!

More info: http://support.microsoft.com/default...b;en-us;323752

Thanks again!

Arno

[jhardman]

Arno,

I hadn't heard of that problem, but I was thinking it was something along those lines. Anyway, I'm glad you found a solution, and thanks for posting it.

Jared