Session Hijacking?

  • Thread starter Thread starter Kevin
  • Start date Start date
K

Kevin

Hello all,

I have written an asp.net application using C# and am having an
issue in multiple-user environments. If one user is logged in (using
Windows authentication), everything is fine. Once another user logs
in, the other user already logged on also becomes that user. I have
code in the Session_Start section of Global.aspx for retrieving user
info from the SQL 2000 database. My assumption is that each new user
would simply have their own Session rather than all users sharing it.
Anyone have any thoughts on a resolution? What are some clarifying
questions I can answer that will help lead to potential solutions?

Thanks much,
Kevin
 
Any chance you're using *static* variables to store your user information?
These would be shared across *all* users of that instance of that application.
 
Hi Kevin,

Be sure you are using the Session() object and not the Cache() or
Application() objects. Is the logic in your Session_Start() doing something
to make all users use the same data? Ken.
 
Back
Top