473,804 Members | 3,638 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Session variables are mixing each other with multiple login....

My development environment is ASP.Net 1.1.

When the user does multiple logins to the system and navigates to different
screens and clicks back button sometimes it reading the session variables
values are mixing each other.

How to avoid this kind of situation? Basically I am looking for the steps to
be taken when we develop web based application using ASP.Net (.Net framework
1.1) for multiple logins.

Shashi
Nov 18 '05 #1
2 2130
i would think this would only happen if you are creating new windows in IE
from an existing one that is open. if so then they would share the same
session id. if you create a new instance of IE for each logon, then this is a
little strange.

what type of logon are you using, your own, or forms? or windows or passport?

"Shashi" wrote:
My development environment is ASP.Net 1.1.

When the user does multiple logins to the system and navigates to different
screens and clicks back button sometimes it reading the session variables
values are mixing each other.

How to avoid this kind of situation? Basically I am looking for the steps to
be taken when we develop web based application using ASP.Net (.Net framework
1.1) for multiple logins.

Shashi

Nov 18 '05 #2
Thanks for your reply.
1. I am using my own login. Checking the user id and password in the
database.
2. Here is the sequence.
* Default.aspx is the default page for the website.
* Load event of this page, I am opening a new page(Login Page) using
the following java script.
Response.Write( "window.ope n('" & URL & "','" & "WindowName "
& Session.Session ID & "','" &
toolbar=no,loca tion=no,titleba r=no,directorie s=no,status=yes ,menubar=no,scr o
llbars=yes,copy history=no,menu bar=no,scrollba rs=1,resizable= 1,height=" &
Chr(34) & " + maxh+" & Chr(34) & ",width=" & Chr(34) & " + maxw+" & Chr(34)
& ",left=0,to p=0" & "');" & vbCrLf))

* In Login page the user(U1) will login to the sytem.
*Enters Customer # and navigates to the customer page.

*Other user(U2) logs in the same way and navigates to the customer
screen.

* User2 through popup menu selects Back and navigates back.

* USer U1 through popup menu selects Back and navigates back
*Instead of displaying the U1 profile system is displaying the U2
profile. That means I have text box with user ID displayed from a session
variable which got wrong data.

Please advice.
Shashi

"chriscollinson " <ch************ @discussions.mi crosoft.com> wrote in message
news:CC******** *************** ***********@mic rosoft.com...
i would think this would only happen if you are creating new windows in IE
from an existing one that is open. if so then they would share the same
session id. if you create a new instance of IE for each logon, then this is a little strange.

what type of logon are you using, your own, or forms? or windows or passport?
"Shashi" wrote:
My development environment is ASP.Net 1.1.

When the user does multiple logins to the system and navigates to different screens and clicks back button sometimes it reading the session variables values are mixing each other.

How to avoid this kind of situation? Basically I am looking for the steps to be taken when we develop web based application using ASP.Net (.Net framework 1.1) for multiple logins.

Shashi

Nov 18 '05 #3

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

6
2886
by: bonehead | last post by:
I'm still a novice when it comes to session security issues. The problems I'm trying to solve may be fairly common, but I haven't seen examples of solutions in any of the books I've looked at. I currently have a page called 'login.php' which requires the user to provide a userid/password combination. If the user logs in successfully (i.e., the supplied userid/password combination is in the mysql database), the user is directed to a page...
30
3991
by: Robert Tweed | last post by:
Does anyone know a good resource discussing the issues involved in session theft? I've read a couple, but none that really address the problem apart from acknowledging that it is a problem; you just don't seem to be able to do much about it. Does anyone have some tried-and-tested measures for preventing session theft, that aren't already built into PHP? For that matter, what measures _are_ already built into PHP? Are there significant...
9
3651
by: Pack Fan | last post by:
I've noticed that session variables will persist on Mac IE even after all browser windows have been closed. One must quit the program to clear the session variables. This presents a security risk for my session variable based security scheme. Basically, the risk is that a user will login to my site, close the window when done and allow someone else to come up to the machine, go back to my site and be logged into the previous user's...
1
2789
by: Scott Lyon | last post by:
I'm maintaining (read: I didn't write it, nor do I have the time to spend to rewrite it) an application that is suddenly giving me grief. The reason I say suddenly, is because we're in the process of transitioning the server on which it runs from Microsoft Windows 2000 Server, to 2003 server (going from IIS 5 to IIS 6). This problem hasn't really occurred on the 2000 server machine, but it's happening MUCH more on the new 2003 box (not...
4
2052
by: Cowboy \(Gregory A. Beamer\) | last post by:
Background: ------------- The idea started as a single sign on type of application. Having tested it before, I knew we could institute single sign on using the same Authentication Cookie name (in this case "AuthenticationCookie" -- yeah, original, I know) and the same machine keys for the applications. <authentication mode="Forms"> <forms name="AuthenticationCookie" path="/" loginUrl="login.aspx" protection="All" timeout="10" />
10
2193
by: Li Pang | last post by:
Hi, I created a html page from which I give a link to another web site. The new site is opened in a new window. When I opened multiple windows, they all have the same SessionID. I want ot know how to open the windows with different sessionID. Thanks
6
18229
by: somaskarthic | last post by:
Hi This is somas here. I asked query about detecting the browser close event using javascript. I want to detect the event only when the X button in the top right corner is clicked and not else where. (like moving to other pages by clicking some links). Can u help me in this case. Cause of this , In my php site, i want to restrict multiple logins with same username and password at a same time from different system. To avoid this , in...
13
8679
by: Samir Chouaieb | last post by:
Hello, I am trying to find a solution to a login mechanism for different domains on different servers with PHP5. I have one main domain with the user data and several other domains that need a login to show data. I want the user to login only once when he visits any of my domains.
8
3027
by: Eddie | last post by:
I am having difficulty in setting variables in a session, and then accessing those variables throughout the web pages that they click on. After having them set a user name and password, successfully authenticating against Active Directory, I send them from the login.php page to the index.php page. But when I get to the index.php page, the session ID is visible, but the session variables and values are not. Can you help me out? Also,...
0
9706
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
10575
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
1
10319
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
10076
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
9144
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
1
7616
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
6851
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
2
3816
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.
3
2990
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.