Bringing up a new browser instance when using an asp.net application using
forms authentication, of course, initiates a new session with a new
sessionID and requires authentication again.
But, I see that browsing to that same asp.net application using a new tab in
ie7 or firefox uses the same SessionID and does not require separate
authentication. This means that the same session can be on two different
pages at the same time.
Is there any way to prevent this from happening?
--
Regards,
Gary Blakely 4 2651
Hi Gary,
A browser maintains one session to one website in one process, which means
in the same process you only need to login once and the browser will
automatically send a cookie (if cookie is enabled) to tell the web server
who you are and the web server knows you've already authenticated. Opening
a tab in the browser is just like right-clicking on a hyperlink and select
"Open in New Window" for non-tabbed browser, this is still in the same
browser process and therefore the same session is used.
For the case of "bringing up a new browser instance", it's a new process
and you're required to login again and create a new session.
Therefore the answer to your question is no, it's not possible to create a
new session in a new tab in the browser.
Regards,
Walter Wang (wa****@online.microsoft.com, remove 'online.')
Microsoft Online Community Support
==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
Hi Gary,
Have you seen my previous reply? Please feel free to let me know if you
have any concern. Thanks.
Regards,
Walter Wang (wa****@online.microsoft.com, remove 'online.')
Microsoft Online Community Support
==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
You say that another tab on the browser will be the same sessionID. But if
I set my app to cookieless where the sessionID shows in the URL, another tab
shows a different sessionID. What am I misunderstanding?
--
Regards,
Gary Blakely
"Walter Wang [MSFT]" <wa****@online.microsoft.comwrote in message
news:RQ**************@TK2MSFTNGHUB02.phx.gbl...
Hi Gary,
A browser maintains one session to one website in one process, which means
in the same process you only need to login once and the browser will
automatically send a cookie (if cookie is enabled) to tell the web server
who you are and the web server knows you've already authenticated. Opening
a tab in the browser is just like right-clicking on a hyperlink and select
"Open in New Window" for non-tabbed browser, this is still in the same
browser process and therefore the same session is used.
For the case of "bringing up a new browser instance", it's a new process
and you're required to login again and create a new session.
Therefore the answer to your question is no, it's not possible to create a
new session in a new tab in the browser.
Regards,
Walter Wang (wa****@online.microsoft.com, remove 'online.')
Microsoft Online Community Support
==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.
Hi Gary,
Yes my previous statement is based on cookie-enabled session. In that case,
the cookie will be automatically sent to the server by the browser as long
as it's the same process. However, for cookieless session, when you open a
new window in the same browser process and enter the URL to the web site
(without a session id), a new session will be created.
Regards,
Walter Wang (wa****@online.microsoft.com, remove 'online.')
Microsoft Online Community Support
==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights. This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics
by: Peter Chant |
last post by:
Am I right in assuming that when I connect from one browser, using several
tabs to a database produced in mysql/php/apache only uses one session for
all tabs? I have been loosing records from my...
|
by: Berrucho |
last post by:
Please Help!
I recently posted this same issue but got no answer... please help
Using VB.NET, IIS5, W2K Adv SP3 all patches, .net 1.0, VS.NET 2002
Using forms authentication, persistent cookie...
|
by: Andy Fish |
last post by:
Hi,
I have an asp.net application that is using Forms Authentication and
maintaining http session state using cookies in the normal way.
when the user clicks the logout button I do this:
...
|
by: Ashutosh |
last post by:
Hello,
I want to create a mdi application in vb.net. The user should be able
switch among different child windows like tabbed browsing feature in
firefox.
Can someone point me to the source code...
|
by: XML newbie: Urgent pls help! |
last post by:
If I get SessionID in 1 function how do I carry that SessionID(value of this
SessionID) to another function or another form within the same project
|
by: rlueneberg |
last post by:
I am trying to foward the old sessionID using "Session.SessionID" to
an HttpWebRequest CookieContainer so that I can capture the requested
page session variables but it is not working as it is...
|
by: kev |
last post by:
Hello,
I posted a question a while ago on tabbed pages, how to set it to
invisible when the text box is empty.It was answered by Rick and the
code ran perfectly. However, i tried using the same...
|
by: NeoPa |
last post by:
Originally posted by Missinglinq:
The first thing to remember is that Tabbed Pages are all part of a single form; think of it as a really long form turned on its side and folded on itself. Because...
|
by: =?Utf-8?B?Um9ib2NvcA==?= |
last post by:
I am having problems with the tabbed browsing as well. I went into Internet
options>Generaland clicked settings under tabs>and clicked open home page
in new tab, instead of blank page. But, it...
|
by: aa123db |
last post by:
Variable and constants
Use var or let for variables and const fror constants.
Var foo ='bar';
Let foo ='bar';const baz ='bar';
Functions
function $name$ ($parameters$) {
}
...
|
by: ryjfgjl |
last post by:
If we have dozens or hundreds of excel to import into the database, if we use the excel import function provided by database editors such as navicat, it will be extremely tedious and time-consuming...
|
by: ryjfgjl |
last post by:
In our work, we often receive Excel tables with data in the same format. If we want to analyze these data, it can be difficult to analyze them because the data is spread across multiple Excel files...
|
by: emmanuelkatto |
last post by:
Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud.
Please let me know.
Thanks!
Emmanuel
|
by: nemocccc |
last post by:
hello, everyone, I want to develop a software for my android phone for daily needs, any suggestions?
|
by: Hystou |
last post by:
There are some requirements for setting up RAID:
1. The motherboard and BIOS support RAID configuration.
2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...
|
by: marktang |
last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However,...
|
by: Oralloy |
last post by:
Hello folks,
I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>".
The problem is that using the GNU compilers,...
|
by: jinu1996 |
last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven...
| |