473,326 Members | 2,127 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,326 software developers and data experts.

browser session handling

I am experiencing some browser weirdness.

My app uses session state to hide values I prefer to keep out of the
querystring. I am testing to see what happens when cookies are fully
disabled in IE 6 and NS 7. NS behaves as expected: it has no recall of
previous requests. With IE however my app works as normal: I can still store
and retrieve values from session state. Am I imagining this? If not it
suggests to me that IE 6 always includes a session cookie in the http
header.

(I am running a local IIS installation on my XP laptop).

Richard
Aug 26 '05 #1
3 1826
Hi Richard,

We have reviewed this issue and are currently researching on it. We will
update you ASAP. Thanks for your patience!

Kevin Yu
=======
"This posting is provided "AS IS" with no warranties, and confers no
rights."

Aug 27 '05 #2
Hi Richard,

As for the cookies, generally there're two kinds of cookies:
1. Persistent cookie
These cookie will be persisted on the client user's hard disk and can be
used the next time the client user visit the same site(even after closing
the web browser)

2. Session cookie
Only valid during the single browser instance's lifecycle. Cookie for
session are always of this kind and for IE, we can find that when we start
a new IE instance and visit the same site, a new session id(session cookie)
will be generated.

So I'm not sure how does you disable the cookie in IE, if you just add the
site into the restricted site, it'll only disable those persistent cookies
from being use. We can find the complete setting for cookie in IE through :

Internet Options ---> Privacy tab ----> click "Advanced ..." button

In the popup dialog, we can find the "Always allow session cookies" option,
have you try unchecking this to see whether the session cookie be disabled?
Also, remember to add your site(domain name) into the block list.

Please have a try to see whether the above settings help. Thanks,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)

--------------------
| From: "Richard P" <or**@community.nospam>
| Subject: browser session handling
| Date: Fri, 26 Aug 2005 13:37:42 +0100
| Lines: 15
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
| X-RFC2646: Format=Flowed; Original
| Message-ID: <uw**************@TK2MSFTNGP12.phx.gbl>
| Newsgroups: microsoft.public.dotnet.general
| NNTP-Posting-Host: host86-129-133-103.range86-129.btcentralplus.com
86.129.133.103
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGP12.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.dotnet.general:48907
| X-Tomcat-NG: microsoft.public.dotnet.general
|
| I am experiencing some browser weirdness.
|
| My app uses session state to hide values I prefer to keep out of the
| querystring. I am testing to see what happens when cookies are fully
| disabled in IE 6 and NS 7. NS behaves as expected: it has no recall of
| previous requests. With IE however my app works as normal: I can still
store
| and retrieve values from session state. Am I imagining this? If not it
| suggests to me that IE 6 always includes a session cookie in the http
| header.
|
| (I am running a local IIS installation on my XP laptop).
|
| Richard
|
|
|

Aug 29 '05 #3
Hi Richard,

How are you doing on this question, have you had a chance to look at the
suggestions in my last reply? Anway, if there're anything else we can help,
please feel free to post here.

Thanks & Regards,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)
--------------------
| X-Tomcat-ID: 44783191
| References: <uw**************@TK2MSFTNGP12.phx.gbl>
| MIME-Version: 1.0
| Content-Type: text/plain
| Content-Transfer-Encoding: 7bit
| From: st*****@online.microsoft.com (Steven Cheng[MSFT])
| Organization: Microsoft
| Date: Mon, 29 Aug 2005 02:58:12 GMT
| Subject: RE: browser session handling
| X-Tomcat-NG: microsoft.public.dotnet.general
| Message-ID: <T4*************@TK2MSFTNGXA01.phx.gbl>
| Newsgroups: microsoft.public.dotnet.general
| Lines: 67
| Path: TK2MSFTNGXA01.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.dotnet.general:48993
| NNTP-Posting-Host: TOMCATIMPORT1 10.201.218.122
|
| Hi Richard,
|
| As for the cookies, generally there're two kinds of cookies:
| 1. Persistent cookie
| These cookie will be persisted on the client user's hard disk and can be
| used the next time the client user visit the same site(even after closing
| the web browser)
|
| 2. Session cookie
| Only valid during the single browser instance's lifecycle. Cookie for
| session are always of this kind and for IE, we can find that when we
start
| a new IE instance and visit the same site, a new session id(session
cookie)
| will be generated.
|
| So I'm not sure how does you disable the cookie in IE, if you just add
the
| site into the restricted site, it'll only disable those persistent
cookies
| from being use. We can find the complete setting for cookie in IE
through :
|
| Internet Options ---> Privacy tab ----> click "Advanced ..." button
|
| In the popup dialog, we can find the "Always allow session cookies"
option,
| have you try unchecking this to see whether the session cookie be
disabled?
| Also, remember to add your site(domain name) into the block list.
|
| Please have a try to see whether the above settings help. Thanks,
|
| Steven Cheng
| Microsoft Online Support
|
| Get Secure! www.microsoft.com/security
| (This posting is provided "AS IS", with no warranties, and confers no
| rights.)
|
|
|
|
|
| --------------------
| | From: "Richard P" <or**@community.nospam>
| | Subject: browser session handling
| | Date: Fri, 26 Aug 2005 13:37:42 +0100
| | Lines: 15
| | X-Priority: 3
| | X-MSMail-Priority: Normal
| | X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
| | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
| | X-RFC2646: Format=Flowed; Original
| | Message-ID: <uw**************@TK2MSFTNGP12.phx.gbl>
| | Newsgroups: microsoft.public.dotnet.general
| | NNTP-Posting-Host: host86-129-133-103.range86-129.btcentralplus.com
| 86.129.133.103
| | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGP12.phx.gbl
| | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.dotnet.general:48907
| | X-Tomcat-NG: microsoft.public.dotnet.general
| |
| | I am experiencing some browser weirdness.
| |
| | My app uses session state to hide values I prefer to keep out of the
| | querystring. I am testing to see what happens when cookies are fully
| | disabled in IE 6 and NS 7. NS behaves as expected: it has no recall of
| | previous requests. With IE however my app works as normal: I can still
| store
| | and retrieve values from session state. Am I imagining this? If not it
| | suggests to me that IE 6 always includes a session cookie in the http
| | header.
| |
| | (I am running a local IIS installation on my XP laptop).
| |
| | Richard
| |
| |
| |
|
|

Aug 31 '05 #4

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

17
by: lawrence | last post by:
How is it possible that the question "How do I detect which browser the user has" is missing from this FAQ: http://www.faqts.com/knowledge_base/index.phtml/fid/125 and is only here on this...
5
by: David Baker | last post by:
Hi all I am very new to ASP.Net. I am trying to create a sniffer for our program. We want our users to click our sniffer and hopefully the sniffer will check their computer against our...
10
by: DotNetGruven | last post by:
How are people handling the browser back button on database driven web apps built using ASP.NET?? We keep state in Session and the back button is causing us lots of head aches! Is this just a...
1
by: Oscar Thornell | last post by:
Hi, I have an ASP.NET page that generates an Exception... The Exception is not caught in the executing method...so it propagates to..the Page_Error event handling method.. In that method the...
3
by: Richard P | last post by:
I am experiencing some browser weirdness. My app uses session state to hide values I prefer to keep out of the querystring. I am testing to see what happens when cookies are fully disabled in IE...
4
by: John Allberg | last post by:
Hi! We have a problem which is correlated to web farms and session handling and are thinking of what solution to choose. Our setup is with a web farm, one ldap server and a database cluster. ...
3
by: tshad | last post by:
I have noticed that if I open an IE session and log onto my site. I can open another browser session and that browser will have same session variables as the first. This causes problems for my...
15
by: tshad | last post by:
I was looking for a way to handle refreshes (user pressed refresh button) and found a piece of code to check if a Web page was refreshed but I can't get it to work. The code is:...
4
by: =?Utf-8?B?RGVhbiBHYXJyZXR0?= | last post by:
I'm writing a .NET 2.0 app that needs to manage user sessions. We're using SQL Server 2005 tables to hold sessions status fields in a table. The problem is how to handle the situation where a user...
0
by: DolphinDB | last post by:
Tired of spending countless mintues downsampling your data? Look no further! In this article, you’ll learn how to efficiently downsample 6.48 billion high-frequency records to 61 million...
0
by: ryjfgjl | last post by:
ExcelToDatabase: batch import excel into database automatically...
0
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: Vimpel783 | last post by:
Hello! Guys, I found this code on the Internet, but I need to modify it a little. It works well, the problem is this: Data is sent from only one cell, in this case B5, but it is necessary that data...
0
by: jfyes | last post by:
As a hardware engineer, after seeing that CEIWEI recently released a new tool for Modbus RTU Over TCP/UDP filtering and monitoring, I actively went to its official website to take a look. It turned...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
1
by: CloudSolutions | last post by:
Introduction: For many beginners and individual users, requiring a credit card and email registration may pose a barrier when starting to use cloud servers. However, some cloud server providers now...
1
by: Defcon1945 | last post by:
I'm trying to learn Python using Pycharm but import shutil doesn't work
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.