session problem

MunishBhatia · October 4th, 2007, 02:21 AM

my problem is:

i installed payment gateway in my application which in return do not pass me any values - just if it deduct money send user back to welcome page otherwise at unsuccess page.

when user comes back in welcome or unsucess page, i want to retain his member id ot username so that i can activate that user or deactivate user. when i put it in session, the sessoin value lost as my application is redirected to payment gateway web site and when it return to my application session values lost.

Please guide how to retain the values.

thanks......

Imar · October 4th, 2007, 02:27 AM

Quote:

quote:the sessoin value lost as my application is redirected to payment gateway web site and when it return to my application session values lost.

Is that an assumption? Or a test outcome?

AFAIK, if you're using cookies based sessions, you can safely go to another site, return to the initial page and still have a valid session.

If you are using session identifiers in the querystirng, then you're out of luck with that solution.

However, you can often instruct payment gateways to send some identifier, like an order number in the query string. You can then look up that number in your database and find the associated user again.

Finally, you can store data in a cookie. Not secure, but it might work for you.

Cheers,

Imar

---------------------------------------
Imar Spaanjaars
http://Imar.Spaanjaars.Com
Everyone is unique, except for me.
Author of ASP.NET 2.0 Instant Results and Beginning Dreamweaver MX / MX 2004

MunishBhatia · October 4th, 2007, 11:47 AM

well as username is unique in my application can i pass username in cookies and based on that username i will activate user account.
i will try to look in msdn to for coding as i have not used it so far. if you know link please tell me.

thanks......

Imar · October 4th, 2007, 11:50 AM

You could store the username in a cookie, but as I said, this may be a security risk as others could potentially see and use the user name.

But have you confirmed sessions don't work for you? I am pretty sure they will....

And a "link to what" are you referring to?

Imar

---------------------------------------
Imar Spaanjaars
http://Imar.Spaanjaars.Com
Everyone is unique, except for me.
Author of ASP.NET 2.0 Instant Results and Beginning Dreamweaver MX / MX 2004

MunishBhatia · October 5th, 2007, 04:15 AM

well i am not sure i am asking if i will store username only in cookie but in web site user have to provide password also with that username so i am thinking that if i store username only in cookie an dif any person read it then he may not be able to use web site as he donot have password. am i right?

yes i am sure sessions are not working. you said right.

link refer to a help page from where i can get code how to store values in cookies and read them.

thanks......

Imar · October 5th, 2007, 05:04 AM

Quote:

quote:well i am not sure i am asking if i will store username only in cookie but in web site user have to provide password also with that username so i am thinking that if i store username only in cookie an dif any person read it then he may not be able to use web site as he donot have password. am i right?

Yes, true. ALthough IMO it's still a security risk. Up to you though....

Quote:

quote:yes i am sure sessions are not working. you said right.

I don't believe that. Try this:

1. Create an ASPX page with this markup:

Code:

<asp:Label ID="Label1" runat="server" Text="Label"></asp:Label>
<a href="http://www.google.com/">Go to Google</a>

2. In Code Behind add this:

Code:

Session["Test"] = "Something";
Label1.Text = Session.SessionID;

(Notice it's important to assign something to Session state first.
3. Run the page. Note the Session ID
4. Click the link to go to Google
5. Click the back button
6. Press Ctrl+F5 to refresh the page a couple of times.

The ID will be the same as in step 3.

Quote:

quote:link refer to a help page from where i can get code how to store values in cookies and read them.

The best link is www.google.com Searching for Cookies ASP.NET should give you plenty results to work with.

Imar

---------------------------------------
Imar Spaanjaars
http://Imar.Spaanjaars.Com
Everyone is unique, except for me.
Author of ASP.NET 2.0 Instant Results and Beginning Dreamweaver MX / MX 2004

MunishBhatia · October 5th, 2007, 05:42 AM

well Imar
i am going to try in my application again.
and let you know.

thanks......

MunishBhatia · October 5th, 2007, 06:56 AM

well imar i am sorry Man
you were confident but right. after deducting money from payment gateway web site , when it comes to my web site-session retains
Thanks to all help.

thanks......

Imar · October 5th, 2007, 12:47 PM

Quote:

quote:you were confident but right

It's easy to be confident if you're right.... ;)

Glad it's working now.

Imar

---------------------------------------
Imar Spaanjaars
http://Imar.Spaanjaars.Com
Everyone is unique, except for me.
Author of ASP.NET 2.0 Instant Results and Beginning Dreamweaver MX / MX 2004

MunishBhatia · October 6th, 2007, 04:06 AM

You are Right :)

thanks......