Hello all,
I have a simple ASP.NET 4 application with a few pages with a forms on them where the user can insert some values.
At the bottom of each page there is a button that saves these values and redirect the user to the second page, where he can insert other values, and so on, until he reach the last 4th pages.

I'm using the Session["MyObject"] to save these values from one page to the others.
How can I be secure that, in case my application has 2 (or more) concurrent users, each user can use the correct session object?

I mean, can a second user catch the first user's session, intead of the his?
Thanks in advance.

Luigi

Hi there,

ASP.NET handles this for you. When a session is created, the user gets a cookie with the session ID which is then used to look up the session object at the server. So, each user gets his own session by design.

Cheers,

Imar

__________________
Imar Spaanjaars
http://Imar.Spaanjaars.Com
Follow me on Twitter

Author of Beginning ASP.NET 4.5 : in C# and VB, Beginning ASP.NET Web Pages with WebMatrix
and Beginning ASP.NET 4 : in C# and VB.
Did this post help you? Click the button below this post to show your appreciation!

Thanks you very much Imar, and thanks a lot to be always here :-)

Luigi