session

Closing the browser should actually clear the session variables an ASP.net session id.

I have an ASP.net page. When I am closing the webpage I need to clear the session variables. How to to handle this I need to maintain the timeout to 20 minutes. If he closes and login for any number of times in the 20 minutes timed out time Is there any possiblity for clearing the ASP.net session id ...

Avoid losing PostBack user input after Auth Session has timed out in ASP.NET

I have a form that sits behind ASP.NET forms authentication. So far, the implementation follows a typical "out of the box" type configuration. One page allows users to post messages. If the user sits on that page for a long time to compose the message, it may run past the auth session expiration. In that case, the post does not get r...

Asp.net System.Web.HttpContext.Current.Session null in global.asax

I have a custom security principal object which I set in the global.asax for the current thread and all is well, no problems normally. However, I'm just adding a dynamic image feature by having a page serve up the image and whenever that dynamic image page is loaded the System.Web.HttpContext.Current.Session is null in global.asax which...

What are the common issues and best practices when using ASP.NET session state?

For example, I make extensive use of the session in my ASP.NET application but have heard somewhere that objects stored in session can be removed by the system where server memory runs low. Is this true? Is there any session 'callback' functionality to allow you to re-populate scavenged objects? More generally, what other potential pro...

Reach Session in a UserControl loaded in a WebPart

I have a WebPart in MOSS 2007 that sets a variable in Session. Later, when loading a Webpart that loads a UserControl, the Session is NULL (not just the variable) The Webpart that loads the UserControl have access to Session properly. The Webpart "lives" within a ClassLibrary DLL, the UserControl are part of a WebApplication. It seems...

Storing shopping cart in session

I know the general consensus for information like shopping cart items is to store them in session. But what about objects that belong to a user that can be altered by other users? Say, for instance, an eBay-like site. If you store a user's "items" in session, which contain the current bid amount, and another user comes in and places a...

ASP.NET Stress Testing

Is there a way to test an application where you simulate a hundred different clients connecting to a IIS server and asking the same data? At the customer where our project is running they have 400 computers and they often do stress tests with all computers. I on the other hand have only got my laptop... (and a development server). (In m...

Separate Applications Sharing the Same ASP.Net Session Cookie

I've got two ASP.Net applications residing in two different folders on my server: /Foo <-- this is the standard unsecure application /Secure <-- this is a separate application that requires SSL by IIS The problem is that by default, the ASP.NET_SessionId cookie is specified on the domain and is shared between the two applications in ...

ASP.NET and Sessions - New Browser Instance versus New Browser Window

I'm hoping someone can clarify this behavior for me, and explain how ASP.NET is deciding when to treat something like a new Session. A) In Internet Explorer I load the ASP.NET site in question. It starts a new Session. B) If I go to menu File - New Window... it stays within the same Session. C) If I launch a new instance of Internet Exp...

How best to pass a message for the user between pages

So the chain of events is: The user submits a form. During the processing of the submission, there is a message generated, such as "Your record was saved." The user is redirected to a new page, say the search results. The new page needs to display the message. So, the question is how to get the message from step 2 to step 3? This is ...

How Does ASP.NET associate a request with a session?

Is there a cookie automatically placed on the user's machine? Or is it somehow associated with the requester's IP address? Or maybe in the ViewState? Elementary question, I know, but I've had a hard time finding an answer. ...

PHP session problem *only in IE* *(??? really strange problem)

I have a site made with php which uses server side sessions throughout the site. In fact, it's a site with a user login which depends on session variables and if there were a problem with all session variables, no pages would load at all. On the site, there's an iframe that holds a feed of little messages from other users. Those lit...

in IIS, what's the difference between "application" and "session" ?

A Session is per browser (determined via cookies), but when does an "Application" start, and end, and how does IIS know know when a request is a part of the same same "Application" instance (if not done via cookies the same way that sessions are)? ...

Session not saving when moving from ssl to non-ssl

I have a login screen that I force to be ssl, so like this: https://www.foobar.com/login then after they login, they get moved to the homepage: https://www.foobar.com/dashbaord However, I want to move people off of SSL once logged in (to save CPU), so just after checking that they are in fact logged in on https://www.foobar.com/dashbaor...

Forms Authentication timing out when it shouldn't?

I have a problem with an ASP.NET application that is driving me nuts. When a user leaves a page inactive for a period of time the session was timing out and error were being thrown due to session variables not being resolvable (I will error trap this anyway but this is not the problem). I coded a 'defribulator' which will perform an inv...

Re-attatching an X server view of a lost process.

Hello. I'm running Xorg and my (Qt) program daemonises itself. Now I log out and restart the X server. When I log in again my process is still running fine, but I can't see it. Is there a way of attatching the new incarnation of the X server to the old process? If I don't restart the whole server, but log out and in again, is there a wa...

asp.net, stateserver, NLB, session lost.

Hello everyone, 1st post on stackoverflow, hope to have great feedback :) I'm currently trying to load balance our web site. We have set up a 2 cluster NLB on windows server 2003 with IIS 6. While testing the setup, I found that sometimes, our session is lost. A day and a half later, here's the result: Yes, our machine.config both ha...

How to re-initialize a session in PHP?

Hi everyone, I am attempting to integrate an existing payment platform into my webshop. After making a succesful transaction, the payment platform sends a request to an URL in my application with the transaction ID included in the query parameters. However, I need to do some post-processing like sending an order confirmation, etc. In o...

enforcing at most one user in a JSP application

I'm developing a web tool using JSP, where there are many users of multiple kind (i.e. administrators, guest, write-enabled users, ...). Since this will be a subscription based system (i.e. user pay for a 3/6/12 month subscription), I need to enforce at most 1 login per user at the same time. For example, say Mr. John Smith subscribes to...

What is really stored in Session in ASP.NET?

We are trying to decide how to handle object persistence accross postbacks, to avoid getting the data from the database in every request, and I'm leaning towards using Session (it's an intranet application, there won't be thousands of users), but this is due to the fact that I suspect that only the reference to the real object is stored ...