Session Hijacking?

[Kevin]

Hello all,

I have written an asp.net application using C# and am having an
issue in multiple-user environments. If one user is logged in (using
Windows authentication), everything is fine. Once another user logs
in, the other user already logged on also becomes that user. I have
code in the Session_Start section of Global.aspx for retrieving user
info from the SQL 2000 database. My assumption is that each new user
would simply have their own Session rather than all users sharing it.
Anyone have any thoughts on a resolution? What are some clarifying
questions I can answer that will help lead to potential solutions?

Thanks much,
Kevin

[Ken Dopierala Jr.]

Hi Kevin,

Be sure you are using the Session() object and not the Cache() or
Application() objects. Is the logic in your Session_Start() doing something
to make all users use the same data? Ken.

--
Ken Dopierala Jr.
For great ASP.Net web hosting try:
http://www.webhost4life.com/default.asp?refid=Spinlight
If you sign up under me and need help, email me.

"Kevin" <ke***@kevinolds.com> wrote in message
news:9a**************************@posting.google.c om...

Hello all,

I have written an asp.net application using C# and am having an
issue in multiple-user environments. If one user is logged in (using
Windows authentication), everything is fine. Once another user logs
in, the other user already logged on also becomes that user. I have
code in the Session_Start section of Global.aspx for retrieving user
info from the SQL 2000 database. My assumption is that each new user
would simply have their own Session rather than all users sharing it.
Anyone have any thoughts on a resolution? What are some clarifying
questions I can answer that will help lead to potential solutions?

Thanks much,
Kevin

[Bill Borg]

Any chance you're using *static* variables to store your user information?
These would be shared across *all* users of that instance of that application.

"Kevin" wrote:

Hello all,

I have written an asp.net application using C# and am having an
issue in multiple-user environments. If one user is logged in (using
Windows authentication), everything is fine. Once another user logs
in, the other user already logged on also becomes that user. I have
code in the Session_Start section of Global.aspx for retrieving user
info from the SQL 2000 database. My assumption is that each new user
would simply have their own Session rather than all users sharing it.
Anyone have any thoughts on a resolution? What are some clarifying
questions I can answer that will help lead to potential solutions?

Thanks much,
Kevin

[Kevin]

Thanks Bill and Ken. I was indeed using static variables!

Bill Borg <Bi******@discussions.microsoft.com> wrote in message news:<AF**********************************@microso ft.com>...

Any chance you're using *static* variables to store your user information?
These would be shared across *all* users of that instance of that application.

"Kevin" wrote:

Hello all,

I have written an asp.net application using C# and am having an
issue in multiple-user environments. If one user is logged in (using
Windows authentication), everything is fine. Once another user logs
in, the other user already logged on also becomes that user. I have
code in the Session_Start section of Global.aspx for retrieving user
info from the SQL 2000 database. My assumption is that each new user
would simply have their own Session rather than all users sharing it.
Anyone have any thoughts on a resolution? What are some clarifying
questions I can answer that will help lead to potential solutions?

Thanks much,
Kevin