This web page http://www.w3schools.com/ASP/prop_sessionid.asp states that a session ID is generated on the ServerSide. If this is the case, then how does a server know it's still the same client on the 2nd request response cycle? Surely the SessionId would be generated on the ClientSide so that the client would be sure of passing the ...
In a web-application implemented in java using JSP and Servlets; if I store information in the user session, this information is shared from all the tabs from the same browser. How to differ sessions in browser-tabs? In this example: <%@page language="java"%> <% String user = request.getParameter("user"); user = (user == null ? (Strin...
hello, I am writing an asp.net app that stored an object in cache. When the page loads the first time, it checks the cache for the object, if it is there, it will use the object. if the object does not exist, it will re-build it and store it in cache. since multiple users can use this app at the same time, i was trying to store the obje...
I have as ASP.Net 2.0 website with SQL Server as database and C# 2005 as the programming language. The website is almost complete and all the links are working fine. But I want to prevent normal users from opening a couple of pages. When any user clicks on those specific links, another page opens which contains a ASP Login control. The u...
Hi, We have a service that launches an application that will interact with the logged on user. The application we launch is always run as a specific user for which we have the credentials. We do what is necessary (get active session ID, logonUser, adjust token) and launch the application with CreateProcessAsUser in the winsta0\Default d...
I've got a "works on my machine" situation. I have a website where I'm passing session values from one page to another using Session["foo"] = 'blah'; and on page2 var foo = Session["foo"]; foo doesn't exist on page2. When tracing the page I've found it was using a different sessionid to the original page. When putting a breakp...
I am displaying the session id in the asp page. But it is vulnerable. How can I show the session id by encoding or some other way. I cant avoid displaying session id in web screen ...
Is it 32 bit, or 64 bit or 128 bit or bigger? ...
My asp.net application works fine when launched from its own browser, but when its launched from another web application (sharepoint webpart) using window.open it works until the user clicks and posts back, then the session is lost. I think its related to cookies, because when I set the session state to be cookieless everything works fi...
Can anyone please help me discover the .NET equivalent of the following C++ code: DWORD session_id; ProcessIdToSessionId(GetCurrentProcessId(), &session_id); I'm trying to find the current terminal services session number to uniquely name a named pipe that two programs inside the same session are using to communicate with each other. ...
When a user arrives at my site, a session is started for them. There is a point where a child window is spawned using JavaScript on my sites home page. This child window goes to Twitter site to authenticate the user and it gets redirected back to a script on my site which stores some variables in a SESSION. I have found out that the P...
As a result of a penetration test against some of our products in the pipeline, what looked to be at the time an 'easy' problem to fix is turning out to be a toughy. Not that it should of course, I mean why would just generating a brand new session for the current HTTPContext be so difficult? Bizarre! Anyway- I've written a cheeky litt...
Hello, I want to be able to get the SessionID of the currently authenticated session in a WebMethod function where EnableSession = false. I cannot set EnableSession=true on this request, because another (long running) request on a different page is keeping the SessionState locked (EnableSessionState == "True" not "Readonly"). Is there...
I have a web site in ASP 3.0. This web site initialize authentication by session on the server, and retreive the id of the user in the session. A multiple clients access to the web site with no problem. Some of them lost there session. I think is due to a client configuration with the sessionID token or someting like that. Could some b...
Hi, I have several portlets in my application. If I open a url using window.open() method, the session id changes and causes an error in other portlets. If I don't open this url, everything works fine. But once this new window is opened, the session is cleared and the rest of the portlets throws an exception since some values are missin...
Is it possible to log the session ID in the access log of WebLogic 8.1.6? ...
Hi, we have made an extension to OWA page, connecting to a web application running in Tomcst. The content served by this application is shown in an iframe inside OWA page using isapi. This is working everywhere but in a customer where the session cookies set by OWA (sessionid and cadata ) get deleted as soon as a succesful login is done...
I want to generate a 16 character alphanumeric Session ID string. What is the best way to do this so that it is guaranteed that the string generated will be unique every time? Note: I will be using C++ to generate the session IDs. ...
I am working on a website and this is my first web project. Scenario for Session I have created a database for my project with security level little bit high. I want to manage session for each and every user who is logging in to my website. Session state can be used using Cookie as well as URL, only one at a time. Now I went over wi...
I'm developing a web site which uses wp-cumulus on its home http://www.roytanck.com/2008/03/06/wordpress-plugin-wp-cumulus-flash-based-tag-cloud/ it's a flash component to show a nice cloud tag. in order to use it I issue: <script type="text/javascript"> [...] flashvars.tagcloud = "<tags><a href='/tag.php?tag=Marinetti'>Marinetti</a>...