I am displaying the session id in the asp page. But it is vulnerable. How can I show the session id by encoding or some other way.
I cant avoid displaying session id in web screen
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
First why do you think it’s vulnerable other than ‘shoulder surfing’?
Secondly if you want to the such a thing use another cookie and create a random sessionid by yourself use that as a second check (obviously don’t show it).