Re: session data lost

Haven't used cookieless sessions myself.

In order to see if the problem is in the passing of the session id back to
the Web server, can you try changing to use cookies and see if the problem
goes away? At least that will point us at the actual problem (or eliminate
one variable from the mix).


Peter

"luke" <talktomyfriend@xxxxxxxxxxx> wrote in message
news:O3yA4mYgHHA.284@xxxxxxxxxxxxxxxxxxxxxxx
Hi Peter,

It is
a.. InProc - session kept as live objects in web server (aspnet_wp.exe).
Use "cookieless" configuration in web.config to "munge" the sessionId onto
the URL

thanks,

Luke

"Peter Bradley" <pbradley@xxxxxxxxxx> wrote in message
news:uIuUldYgHHA.284@xxxxxxxxxxxxxxxxxxxxxxx
I interpret what you say as meaning that when your application is accessed
from the internet, session data is not stored; but when it is accessed
over the internal LAN, session data is stored OK.

I'm also assuming that the same Web server is being used in both
scenarios, and that you are maintaining your sessions by using cookies.

If these assumptions are correct, perhaps the external client does not
have cookies enabled? Can you check that?



Peter


"luke" <talktomyfriend@xxxxxxxxxxx> wrote in message
news:%23hH4wyXgHHA.208@xxxxxxxxxxxxxxxxxxxxxxx
Hi
I got the problem of lost session data when it operates in external
network (via internet), but it has not problem within the internal
network.

Any helps will be appreciated.

Thanks,

Luke







.

Relevant Pages

  • Re: IAuthenticate problem
    ... I was looking at this function 1-2 years ago when I needed to clear session ... cookies. ... Should I call it to NULL internet handle? ... login information. ...
    (microsoft.public.inetsdk.programming.webbrowser_ctl)
  • Re: No Cookie: how to implement session?
    ... without using tricks like hidden field and cookies in CGI script? ... so the "session" can time-out... ... Isn't redirect normally the responsibility of the web server ...
    (comp.lang.python)
  • Re: Hiding variables passed via URL
    ... well you can view cookies as well. ... What else constitutes a 'session variable' apart from POST or GET data ... But then you don't understand that session variables aren't POST or GET ... You could coordinate PHP with Javascript. ...
    (comp.lang.php)
  • Re: Hiding variables passed via URL
    ... well you can view cookies as well. ... What else constitutes a 'session variable' apart from POST or GET data ... But then you don't understand that session variables aren't POST or GET ... You could coordinate PHP with Javascript. ...
    (comp.lang.php)
  • Re: [Full-disclosure] Google Re-authentication Bypass with SID and LSID cookies
    ... ideally the session should be disabled and should be enabled only after ... SID and LSID cookies remain alive at the server side. ... would require a user to provide his/her password to re-authenticate. ...
    (Full-Disclosure)