Problem with Sessions in ASP .NET

Question

I have a weird issue with session variables. I'm storing some credentials in sessions variables like this:

Session["login"] = "foo";
Session["password"] = "oof";

The page is deployed on a certain server. After I logged in on the page, I noticed that other users (who are in the same network area) calling the page were logged in as well! I thought those data would be stored only for me (I suppose the server sends me back some cookies to ensure that) but that's not the case?

I certainly have a lack of knowledge somewhere. What's going on?

Thanks

Anything that is in your session certainly shouldn't be visible to others so I'd look outside of this for a problem. If needs be write simple web pages that store a session value unique to a user (eg IP address assuming you're not goign through a proxy) and another that displays it. This should allow you to prove whether or not session is being shared as you describe. I think its more likely that your code is doing something wrong somewhere else though (eg storing something in application state or on a static variable somewhere). — Chris
– Chris, Commented Aug 4, 2010 at 10:06
Found it. The origin of this problem was a global variable in the code behind :/ — Amokrane Chentir
– Amokrane Chentir, Commented Aug 4, 2010 at 10:26

shamazing · Accepted Answer · 2010-11-25 01:32:34Z

1

I wouldn't recommend storing a password in a session variable for security purposes. If you must use a session variable, do not store the password in clear text. Use some encryption method instead.

answered Nov 25, 2010 at 1:32

shamazing

7304 silver badges9 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Sid C · Accepted Answer · 2010-11-29 20:37:08Z

0

Check your web.config

http://msdn.microsoft.com/en-us/library/h6bb9cz9.aspx

answered Nov 29, 2010 at 20:37

Sid C

672 bronze badges

Collectives™ on Stack Overflow

Problem with Sessions in ASP .NET

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related