473,320 Members | 1,936 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,320 software developers and data experts.

cookieless session state problem

when i bookmark a page in my app with a session id in the path, that session
id doesn't get reset. It survives timeouts, browser and server restarts. I'm
seeing this behaviour whether I use InProc mode or StateServer. I'm getting
this on a remote server where I'm using InProc cookieless mode and I'm
getting this on my local machine where I've tried that and StateServer. I
don't understand why asp.net won't reset the session code and write the new
one to the url.
Nov 18 '05 #1
2 1340
Most likely not thought of. The cookieless session is a bit of a kludge to
get around an issue with the stateless nature of web communication coupled
with people turning off cookies in their browsers. I would assume that
bookmarking was not considered when setting up the kludge. I would venture
that setting up your own HTTP Handler may be the only way to get around this
(further kludge the kludge), but it may never let you to that point, as the
intercept is probably before your own handler is called.

--
Gregory A. Beamer
MVP; MCP: +I, SE, SD, DBA

************************************************** ********************
Think Outside the Box!
************************************************** ********************
"alex" <al*************@verizon.net> wrote in message
news:%2***************@TK2MSFTNGP09.phx.gbl...
when i bookmark a page in my app with a session id in the path, that session id doesn't get reset. It survives timeouts, browser and server restarts. I'm seeing this behaviour whether I use InProc mode or StateServer. I'm getting this on a remote server where I'm using InProc cookieless mode and I'm
getting this on my local machine where I've tried that and StateServer. I
don't understand why asp.net won't reset the session code and write the new one to the url.

Nov 18 '05 #2
I have read that when a session expires you cannot necessarily expect to see a new Session ID. The same Session can be used to access a session different than the one retired once the 'original' session has expired. The SessionId points to a new session, however. The Session ID value will change for a different instance of the browser

I have also read that a new sessionID is generated for each request in applications that do not store data in the session dictionary

( reading = MSDN article "Underpinnings of the Session State Implementation in ASP.NET"

We are checking that a known Session variable is not Nothing. If it s Nothing, we have started a new session

You could also use the Session_Start event to make distinctions.
Nov 18 '05 #3

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

0
by: Nikander Bruggeman | last post by:
Hi, In a situation where I have 2 servers which are load balanced I keep losing session state, although I store the session state in sql server and use a cookieless session, so that the session...
3
by: Scott | last post by:
Hello, we are having problems displaying non-aspx files (images, style sheets) since we have upgraded to the 1.1 framework when using a cookieless session (sessionID in the url). Check out...
5
by: Grant | last post by:
Can anyone explained to me how the session state - cookieless = true work? Where is the information stored in the URL? I am concern hat some one can use that to the advantage (hacker). I have...
2
by: alex | last post by:
when i bookmark a page in my app with a session id in the path, that session id doesn't get reset. It survives timeouts, browser and server restarts. I'm seeing this behaviour whether I use InProc...
10
by: Anthony Williams | last post by:
Hi gang, This one looks like a bug :o( As you may or may not know, setting session management in web.config to use cookieless sessions causes the ASP.NET runtime to munge a session ID into...
2
by: Daniel Malcolm | last post by:
Hi I just wanted to confirm that the "cookieless" attribute of the session section of the web.config file is an "all or nothing" setting. For some reason I thought that the following was the...
13
by: Water Cooler v2 | last post by:
What do you mean by a cookieless session state? When you set the sessionState section's cookieless attribute to true in the web.config file, what does that mean? I read this...
1
by: Mark Olbert | last post by:
I'm building an ASPNET2 website which uses forms authentication but does not use the Microsoft-supplied membership providers (mostly because I don't want to create my own provider at this point, and...
1
by: fizbang | last post by:
We had a problem where people were getting each other's session variables. I'd set session("id")=502 for user A and then when user B would log on, set their's to session("id")=503. Each time the...
0
by: ryjfgjl | last post by:
ExcelToDatabase: batch import excel into database automatically...
0
by: Vimpel783 | last post by:
Hello! Guys, I found this code on the Internet, but I need to modify it a little. It works well, the problem is this: Data is sent from only one cell, in this case B5, but it is necessary that data...
0
by: jfyes | last post by:
As a hardware engineer, after seeing that CEIWEI recently released a new tool for Modbus RTU Over TCP/UDP filtering and monitoring, I actively went to its official website to take a look. It turned...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
1
by: CloudSolutions | last post by:
Introduction: For many beginners and individual users, requiring a credit card and email registration may pose a barrier when starting to use cloud servers. However, some cloud server providers now...
1
by: Defcon1945 | last post by:
I'm trying to learn Python using Pycharm but import shutil doesn't work
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.