Bringing up a new browser instance when using an asp.net application using
forms authentication, of course, initiates a new session with a new
sessionID and requires authentication again.
But, I see that browsing to that same asp.net application using a new tab in
ie7 or firefox uses the same SessionID and does not require separate
authentication. This means that the same session can be on two different
pages at the same time.
Is there any way to prevent this from happening?
--
Regards,
Gary Blakely
4  2669 
Hi Gary,
A browser maintains one session to one website in one process, which means
in the same process you only need to login once and the browser will
automatically send a cookie (if cookie is enabled) to tell the web server
who you are and the web server knows you've already authenticated. Opening
a tab in the browser is just like right-clicking on a hyperlink and select
"Open in New Window" for non-tabbed browser, this is still in the same
browser process and therefore the same session is used.
For the case of "bringing up a new browser instance", it's a new process
and you're required to login again and create a new session.
Therefore the answer to your question is no, it's not possible to create a
new session in a new tab in the browser.
Regards,
Walter Wang (wa****@online. microsoft.com, remove 'online.')
Microsoft Online Community Support
=============== =============== =============== =====
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=============== =============== =============== =====
This posting is provided "AS IS" with no warranties, and confers no rights.
Hi Gary,
Have you seen my previous reply? Please feel free to let me know if you
have any concern. Thanks.
Regards,
Walter Wang (wa****@online. microsoft.com, remove 'online.')
Microsoft Online Community Support
=============== =============== =============== =====
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=============== =============== =============== =====
This posting is provided "AS IS" with no warranties, and confers no rights.
You say that another tab on the browser will be the same sessionID. But if
I set my app to cookieless where the sessionID shows in the URL, another tab
shows a different sessionID. What am I misunderstandin g?
--
Regards,
Gary Blakely
"Walter Wang [MSFT]" <wa****@online. microsoft.comwr ote in message
news:RQ******** ******@TK2MSFTN GHUB02.phx.gbl. ..
Hi Gary,
A browser maintains one session to one website in one process, which means
in the same process you only need to login once and the browser will
automatically send a cookie (if cookie is enabled) to tell the web server
who you are and the web server knows you've already authenticated. Opening
a tab in the browser is just like right-clicking on a hyperlink and select
"Open in New Window" for non-tabbed browser, this is still in the same
browser process and therefore the same session is used.
For the case of "bringing up a new browser instance", it's a new process
and you're required to login again and create a new session.
Therefore the answer to your question is no, it's not possible to create a
new session in a new tab in the browser.
Regards,
Walter Wang (wa****@online. microsoft.com, remove 'online.')
Microsoft Online Community Support
=============== =============== =============== =====
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=============== =============== =============== =====
This posting is provided "AS IS" with no warranties, and confers no
rights.
Hi Gary,
Yes my previous statement is based on cookie-enabled session. In that case,
the cookie will be automatically sent to the server by the browser as long
as it's the same process. However, for cookieless session, when you open a
new window in the same browser process and enter the URL to the web site
(without a session id), a new session will be created.
Regards,
Walter Wang (wa****@online. microsoft.com, remove 'online.')
Microsoft Online Community Support
=============== =============== =============== =====
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=============== =============== =============== =====
This posting is provided "AS IS" with no warranties, and confers no rights.
This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics | |
by: Peter Chant |
last post by:
Am I right in assuming that when I connect from one browser, using several
tabs to a database produced in mysql/php/apache only uses one session for
all tabs? I have been loosing records from my database and my best guess
is that each tab is not a separate session, therefore the session variables
are shared by all tabs and unfortunately this plays havoc when I try to
update my database using the forms I have created.
Is there anyway to...
|
by: Berrucho |
last post by:
Please Help!
I recently posted this same issue but got no answer... please help
Using VB.NET, IIS5, W2K Adv SP3 all patches, .net 1.0, VS.NET 2002
Using forms authentication, persistent cookie = false
Recently my asp.net app is returning wrong data to users. Users frequently
get data that should only be seen by other user.
|
by: Andy Fish |
last post by:
Hi,
I have an asp.net application that is using Forms Authentication and
maintaining http session state using cookies in the normal way.
when the user clicks the logout button I do this:
Session.Clear();
Session.Abandon();
FormsAuthentication.SignOut();
|
by: Ashutosh |
last post by:
Hello,
I want to create a mdi application in vb.net. The user should be able
switch among different child windows like tabbed browsing feature in
firefox.
Can someone point me to the source code or any similar examples.
Regards,
Ashutosh
|
by: XML newbie: Urgent pls help! |
last post by:
If I get SessionID in 1 function how do I carry that SessionID(value of this
SessionID) to another function or another form within the same project
| | |
by: rlueneberg |
last post by:
I am trying to foward the old sessionID using "Session.SessionID" to
an HttpWebRequest CookieContainer so that I can capture the requested
page session variables but it is not working as it is supposed to. The
HttpResponse object always returns a different sessionID from the old
one which I am trying to force. Why is objRequest not carrying over the
old SessionID?
private String ReadHtmlPage(string url)
{
String result = string.Empty;
|
by: kev |
last post by:
Hello,
I posted a question a while ago on tabbed pages, how to set it to
invisible when the text box is empty.It was answered by Rick and the
code ran perfectly. However, i tried using the same code for another
scenario and it gives me compile error:method or data member not found.
My scenario is i have a nested tab page.My main tabbed page has 4 tabs,
About, SafetyLevel1,SafetyLevel2,SafetyLevel3. Inside this main, i
created a...
|
by: NeoPa |
last post by:
Originally posted by Missinglinq:
The first thing to remember is that Tabbed Pages are all part of a single form; think of it as a really long form turned on its side and folded on itself. Because it is all one form, references to contols on any page are done in the same manner as if they were all on one single screen.
Create a form in Design View. Goto the toolbox and click on the Tabbed Control icon; it actually looks like several...
|
by: =?Utf-8?B?Um9ib2NvcA==?= |
last post by:
I am having problems with the tabbed browsing as well. I went into Internet
options>Generaland clicked settings under tabs>and clicked open home page
in new tab, instead of blank page. But, it still will not open my home page
in the new tab! It's just a blank page. Any suggestions? I am running Windows
XP Home Ed. with S.P. 3, and IE7.
|
by: Hystou |
last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it.
First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
|
by: Oralloy |
last post by:
Hello folks,
I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>".
The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed.
This is as boiled down as I can make it.
Here is my compilation command:
g++-12 -std=c++20 -Wnarrowing bit_field.cpp
Here is the code in...
| | |
by: jinu1996 |
last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth.
The Art of Business Website Design
Your website is...
|
by: Hystou |
last post by:
Overview:
Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
|
by: agi2029 |
last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own....
Now, this would greatly impact the work of software developers. The idea...
|
by: conductexam |
last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one.
At the time of converting from word file to html my equations which are in the word document file was convert into image.
Globals.ThisAddIn.Application.ActiveDocument.Select();...
|
by: TSSRALBI |
last post by:
Hello
I'm a network technician in training and I need your help.
I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs.
The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols.
I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
|
by: 6302768590 |
last post by:
Hai team
i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
| | |
by: bsmnconsultancy |
last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...
| |
