473,221 Members | 1,891 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,221 software developers and data experts.

Problem with Session State being shared between users!

I'm having an odd problem. My website's session state is getting shared
between users!
This problem only happens when a user tries to access the site from inside
our corporate LAN. The user, instead of getting a unique session ID, gets
somehow confused as another session and has access to all of the other
session's info!
I tried switching to cookieless sessions but that didn't make any
difference. This is a huge problem for me, since my site stores user's
specific info on session variables, and when a second user logs in, it has
the info of another client.
It also seems to be caching, somehow, the user's authentication ticket. I've
had a couple instances where after a user logs in, the second user can go to
the site, and not even log in. They already show as logged in (as the first
user)

My first thought was that some cache engine was screwing me, so I had IT
disable caching for my IP range.
It didn't help. Clients are still sharing sessions.
Also, all internal addresses are being proxy'd, but from what I understand
that shouldn't affect the session since a cookie (or the URL-based
cookieless version) would basically link a client with a session regardless
of a proxy server.

Its a total mess, and I'm out of ideas on how I can get this working.
Any help would be greatly appreciated!
Philip Tepedino
Siemens Westinghouse Generation Services

Nov 18 '05 #1
3 3605
shared sessions are almost always a coding error, where session data is
stored in static (shared in vb) variable, or a public variable in vb module
which also is a static variable.

-- bruce (sqlwork.com)
"Philip Tepedino" <pt*******@swgs.net> wrote in message
news:%2******************@TK2MSFTNGP09.phx.gbl...
I'm having an odd problem. My website's session state is getting shared
between users!
This problem only happens when a user tries to access the site from inside
our corporate LAN. The user, instead of getting a unique session ID, gets
somehow confused as another session and has access to all of the other
session's info!
I tried switching to cookieless sessions but that didn't make any
difference. This is a huge problem for me, since my site stores user's
specific info on session variables, and when a second user logs in, it has
the info of another client.
It also seems to be caching, somehow, the user's authentication ticket. I've had a couple instances where after a user logs in, the second user can go to the site, and not even log in. They already show as logged in (as the first user)

My first thought was that some cache engine was screwing me, so I had IT
disable caching for my IP range.
It didn't help. Clients are still sharing sessions.
Also, all internal addresses are being proxy'd, but from what I understand
that shouldn't affect the session since a cookie (or the URL-based
cookieless version) would basically link a client with a session regardless of a proxy server.

Its a total mess, and I'm out of ideas on how I can get this working.
Any help would be greatly appreciated!
Philip Tepedino
Siemens Westinghouse Generation Services

Nov 18 '05 #2
You have a really good point. I believe some variables may be set as shared.
I guess I expected share to share only on a certain session, but now that
you mention it, that makes no sense at all. not sure what I was thinking!

I guess a question would be.. whats a good alternative? just using session
variables?

thanks a lot!

"bruce barker" <no***********@safeco.com> wrote in message
news:ej**************@TK2MSFTNGP12.phx.gbl...
shared sessions are almost always a coding error, where session data is
stored in static (shared in vb) variable, or a public variable in vb module which also is a static variable.

-- bruce (sqlwork.com)
"Philip Tepedino" <pt*******@swgs.net> wrote in message
news:%2******************@TK2MSFTNGP09.phx.gbl...
I'm having an odd problem. My website's session state is getting shared
between users!
This problem only happens when a user tries to access the site from inside our corporate LAN. The user, instead of getting a unique session ID, gets somehow confused as another session and has access to all of the other
session's info!
I tried switching to cookieless sessions but that didn't make any
difference. This is a huge problem for me, since my site stores user's
specific info on session variables, and when a second user logs in, it has the info of another client.
It also seems to be caching, somehow, the user's authentication ticket. I've
had a couple instances where after a user logs in, the second user can go to
the site, and not even log in. They already show as logged in (as the

first
user)

My first thought was that some cache engine was screwing me, so I had IT
disable caching for my IP range.
It didn't help. Clients are still sharing sessions.
Also, all internal addresses are being proxy'd, but from what I

understand that shouldn't affect the session since a cookie (or the URL-based
cookieless version) would basically link a client with a session

regardless
of a proxy server.

Its a total mess, and I'm out of ideas on how I can get this working.
Any help would be greatly appreciated!
Philip Tepedino
Siemens Westinghouse Generation Services


Nov 18 '05 #3
jcn

I think I have the same problem than you have. Some Session variables
are shared between users. I have this problem only for somme of the
Session variables and only for some of my solution webforms. Users
don't share variable until they navigate to 2 of the webforms of my
application. This application contains 50 webforms.

I have no solution and I hope you solved your problem so you can help
me.

Regards

--
jcn
------------------------------------------------------------------------
Posted via http://www.codecomments.com
------------------------------------------------------------------------

Nov 19 '05 #4

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

4
by: Wayne | last post by:
Hi, I'm new to .NET and have a question about the use of static variables vs. session variables in a web form in C#. Instead of using a session variable to hold a string to persist during...
10
by: Jacob Anderson | last post by:
Hello, I have a web application running in two configurations: 1. On my local machine running in debug and release mode 2. On a shared, hosted, machine in release mode On my local machine,...
3
by: ton | last post by:
Hi, I keep several variables in a statevalue like: Dim session As SessionState.HttpSessionState = System.Web.HttpContext.Current.Session session("connect") = " FKHFSF " I thought that these...
3
by: grooby | last post by:
I would like to develop an asp.net Web application using muliple web projects under one solution file and share the session information between web applications( or projects). Is this possible?
8
by: Anthony P. Mancini | last post by:
I'm working on a proof of concept that will ultimately be deployed on a load balancer. For the sake of a preliminary demonstration I created a C# object and marked it's attributes as Public...
1
by: Johan Nedin | last post by:
Hello! I have a problem with SQLSession state on my ASP.NET pages. SQLSession state behaves very different from InProcess session state, which I think is very bad. I can understand some of...
5
by: Oleg Ogurok | last post by:
Hi all, Is there a way to read other people's session variables? I understand it makes sense that session state is on per-user basis, but still... Is there a way to get a collection of all...
3
by: Grigs | last post by:
Hello, I have a web service that reads its web.config file to connect to an Oracle database. There are a number of methods in this socalled BACKBONE that either send inforomation to or from the...
3
by: jbeteta | last post by:
Hello, I have a problem declaring variables. I need to create an object oRpte as ReportClass on WebForm1.aspx and be able to use its value on WebForm2.aspx. For declaring the property oRpte()...
1
isladogs
by: isladogs | last post by:
The next online meeting of the Access Europe User Group will be on Wednesday 6 Dec 2023 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, Mike...
0
by: veera ravala | last post by:
ServiceNow is a powerful cloud-based platform that offers a wide range of services to help organizations manage their workflows, operations, and IT services more efficiently. At its core, ServiceNow...
0
by: VivesProcSPL | last post by:
Obviously, one of the original purposes of SQL is to make data query processing easy. The language uses many English-like terms and syntax in an effort to make it easy to learn, particularly for...
3
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 3 Jan 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). For other local times, please check World Time Buddy In...
0
by: mar23 | last post by:
Here's the situation. I have a form called frmDiceInventory with subform called subfrmDice. The subform's control source is linked to a query called qryDiceInventory. I've been trying to pick up the...
0
by: abbasky | last post by:
### Vandf component communication method one: data sharing ​ Vandf components can achieve data exchange through data sharing, state sharing, events, and other methods. Vandf's data exchange method...
2
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 7 Feb 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:30 (7.30PM). In this month's session, the creator of the excellent VBE...
0
by: stefan129 | last post by:
Hey forum members, I'm exploring options for SSL certificates for multiple domains. Has anyone had experience with multi-domain SSL certificates? Any recommendations on reliable providers or specific...
1
by: davi5007 | last post by:
Hi, Basically, I am trying to automate a field named TraceabilityNo into a web page from an access form. I've got the serial held in the variable strSearchString. How can I get this into the...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.