session

PHP session_start()

What is this really? It starts a current session based on cookies? Got that from the PHP Website. How does like...PHP control the session. If I start a session when a user opens up my login page, what do I even use that session for. What does closing a session actually do. Can I use the current session to get info about the logged in use...

Is HTTPS the only defense against Session Hijacking in an open network?

So with Firesheep, everyone in a public Wi-Fi now has a one-click session hijack tool. The way it works - to my understanding - is that it simply captures all traffic and grabs the session cookie (so it doesn't steal passwords). From my understanding, this also means that a HTTPS secured login does not solve this alone, as further HTTP...

ASP.Net String Split not working

Here's my code Dim RefsUpdate As String() = Session("Refs").Split("-"C) Dim PaymentsPassedUpdate As String() = Session("PaymentsPassed").Split("-"C) Dim x as Integer For x = 1 to RefsUpdate.Length - 1 Dim LogData2 As sterm.markdata = New sterm.markdata() Dim queryUpdatePaymentFlags as String = ("UPDATE OPENQUERY (db,'SELECT * FROM...

PHP $_SESSION not avaliable until the page is relaoded. Why?

I'm creating a graph that does some database queries then builds the graph using GD functions then also puts the info from the database into an array that is stored in $_SESSION['my_data']. This graph is displayed on the web page using img tags. <img src="my_graph.php?time=$time"> <? print_r($_SESSION['my_data']); ?> The problem ...

SugarCRM: Adding a variable to the session on user login

Hi, I need to add some information to the session upon user login. Where is the best place to do this in SugarCRM? Thanks. ...

Where are all those SQL Server sessions from?

After launching SSMS (2008 R2) on my dev machine, which I launch with "D:\Program Files\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\Ssms.exe" -nosplash -S localhost -d testdata without doing anything, in Activity Monitor I observe some sessions (TestData is my default database) Details of session 51: select @@...

HttpContext.Current.Session null on page rendering when im adding CustomUrlAuthorizationModule tag to web.config

Dear, I'm facing a problem with HttpContext.Current.Session when I'm adding CustomUrlAuthorizationModule tag to web.config. Every time i'm adding the above tag to my web.config, HttpContext.Current.Session is null every time the page is rendered. PS: i'm using HttpContext.Current.Session from SQLSiteMapProvider class from BuiltSiteMap...

Why session.invalidate doesn't work in IE browser ?

I implemented a sevlet filter in my application, and within the filter, if I find some specific url pattern, I will use request.getSession().invalidate() to logout and clear the session, then redirect to a login page. session.invalidate(); session.setAttribute("hi", true); response.sendRedirect("login.jsp"); but I found, after that I ...

Blackberry Creating New Session On Every Page

I have created a mobile version of a site. It uses the CodeIgniter session to store some data. This seemed okay on Blackberry a few weeks ago but now it is making multiple sessions on every page and therefore it can't access the session where the data is saved. This works fine on the desktop and iPhone. The cookies are being saved to the...

Seam & multiple wars: Contexts.getSessionContext() is null in other war

Hey all, I am using Seam 2.2.1.CR1 on Weblogic 10.3.2 and JSF 1.2. I have an ear application with 2 war files. The first war is a JSF / Seam application, the second one does have JSF / Seam, but also has some Servlets pages as well. When I set things in the Session context in the first web application: Contexts.getSessionContext().se...

Is a Session-Less Design feasible?

Just brainstorming some ideas for a Web App I'm building soon. One of the cornerstones of the Web is Session Handling: Have the user log in, send a cookie with magic binary encoded pixie dust, trust the user blindly afterwards. I just wonder if it's feasible to completely eliminate 'traditional' sessions for a web app that would normal...

JSP - Not able to maintain session between http page and https page

I can't seem to find the one right answer to my problem. I'm being overwhelmed with information I'm finding on the internet, and I have no idea what I should do. My setup is as follows : Apache server (front end), Tomcat 6.0 (back end), RapidSSL certificate is on the Apache server, my site is made up of Java Server Pages. The problem ...

Does sensitive ASP.NET Session data need to be encrypted?

Do ASP.NET Session[string key] data need to be encrypted to be secure? If such data always stays on the server, doesn't that make it safe to store credit card information, passwords, etc. there, as long as the data were sent via SSL from the client? ...

Store Session Data in a Web App

I would like to identify in my website whether the request is coming from a MOBILE or PC. and then store this information "somehow" - so that I dont have to bother about MOBILE OR PC for the ENTIRE SESSION of that user. I am able to identify whether request is from Mobile or PC, but do not know how to store this information and...

php session not saving after $_post

Hi I am experiencing issues with session where if i put the following code on a page the counter will increment by one every time i reload the page. session_start(); if(isset($_SESSION['views'])) $_SESSION['views'] = $_SESSION['views']+ 1; else $_SESSION['views'] = 1; if i put the above code in an if statement where it on...

DAO and Service Layer with hibernate

Hi all, im in trouble with implemenetation of a service layer, i think i did not understand this concept very well. In a DAO implementation i can write all CRUD logic for a specific technology and entity (for example hibernate and User table), and in a service layer we use a DAO for all data operation for the entity in DAO (like getUser...

Session in ASP.NET routing vs MVC

I was rewriting my routing handlers, and now I found a need to access session in the handler, which I previously thought, was not possible. However a quick search turned up with this question, answer for which is accepted, so I'm assuming it did work. Session is still null when I try to do the same thing. Am I missing something or is th...

ASP.NET How to dynamically change session time for current logged user?

Hi, I'm wondering if it is possible to change dynamically the session time for currently logged user. I'm communicating with a WebService which does a long-running task, and while the it sends the final response, I don't want the user to be logged out. Is it possible ? ...

Web-service authentication management

Hello, I'll have to develop some private web-services, so I need a way to authenticate the users in order for each service to be able to know if a request is valid and to maintain some session states. I'd like to have a central authentication service with some simple operations like "logIn(login, password)" (that uses a directory like ...

PHP Session in Kohana 3

Hey! So I'm basically unable to use any kind of session in my Kohana 3 project. A few example of the issue : $session = Session::instance(); $session->set('customer_id', $customer->id); $this->request->redirect('controller/action'); //At the start of the redirected action $session = Session::instance(); $customer_id = $session->get('c...