Question

i have a Question on session in asp.net, I am making an asp.Net application and i am using session for storing user_id and password. And i learnt that session is the particular time for which an user can interact with the application. I also learnt that i can use in precess, out process like state server and sql server for storing session. And when first time user hits the server then a uniqeId or token is stored on the user side in cookies form or if cookies are not enabled then munched URL is used for further communication with the server so i am confuse on pint that in my application i am taking userName in one session and password in one session and one more session for storing some value so i want to know that for each session i am using in application a unique id (token) is generated or one single token is generated corresponding to each user for that application even we are using any No. of session in that.

i want to ask something like this

session["userNme"]=userName;
session["password"]=password;

so i want to know when a user login then its user id and password is saved in session and on each page both user id and password is checked if session is expire then sent to login page, so i want to know when user login does two tokens are generated one for userId and one for password is it true

Answer 1

Your confusion comes from mixing up sessions and session variables.

What you are using is session variables, not sessions. There is only one session object for each user, and that object can contain several session variables.

As there is only one session object per user, there is only one session id per user.

The session objects are stored on the server (or on a state server) and the session id connects one user with one session object.

The session object has an Items collection that contains the session variables, and it’s the variables in this collection that you are accessing when you put brackets after the session object.

So, your code is a shortcut for this:

Session.Items["userNme"] = userName;
Session.Items["password"] = password;