Session.Abandon problem

r_ganesh76 · September 18th, 2004, 12:57 AM

Hi All,

In my web application I have a user login. When the user loggs in I enter some information in a database table with SessionID as the Primary Key. After the user loggs in he can log out using a log out button in which I have written the following code

Session.Abandon();

Now the user can again log in by clicking on the login button.

However, I find that both the old session id and the new session ID's are the same. So I get a primary key violation.

Can anybody tell me why I get the same session ID even after I do "Session.Abandon();" ?

Or is there any better way of doing the same??

Regards
Ganesh

planoie · September 19th, 2004, 02:59 PM

Session.Abandon basically resets the session. It clears out all session data, but it doesn't drop the session completely. Can you add code next to the call to Session.Abandon that clears the row(s) from the database with the session key? This would make sense cause your old session data isn't of much use any more. Unless you are storing for some historical reason.

r_ganesh76 · September 19th, 2004, 11:25 PM

Can you please explain more. How can we clear the session row srom the database? I am using iis session.

Thanks in advance
Ganesh

VIshwastrivedi · September 21st, 2004, 06:55 AM

Try This

Session.Contents.RemoveAll();

DARSIN · September 22nd, 2004, 12:18 AM

session id will remain the same if u will use the same ie window... on logout close the current window and open a new window showing ur loging page...

r_ganesh76 · September 23rd, 2004, 01:37 AM

Thanks Darsin for your suggestion.

But what to do in case the session is automatically timed out??

Ganesh

planoie · September 27th, 2004, 11:55 AM

Quote:

quote:Originally posted by DARSIN
session id will remain the same if u will use the same ie window... on logout close the current window and open a new window showing ur loging page...

This will not work in some cases. With I.E. any window that is opened by script is in the same session, so you can't drop the session.

planoie · September 27th, 2004, 11:56 AM

Quote:

quote:Originally posted by r_ganesh76
Can you please explain more. How can we clear the session row srom the database? I am using iis session.

How about:

"DELETE FROM sessiontable WHERE sessionid='......'"

planoie · September 27th, 2004, 11:58 AM

Of course, I just realized something. Based on what I beleive to be a "session", you shouldn't remove it because of a logout. Perhaps you need to add something to the data you store that tells you whether the current user is actually logged in or not. This is what I have done. The session data is good for the life of a user's session, whether or not they are logged in.

r_ganesh76 · September 27th, 2004, 11:08 PM

Thanx planoie for your suggestions.

Can you tell me where I can find this sessiontable? I mean in which database??

Regards
Ganesh