Question

I have a weird issue with session variables. I’m storing some credentials in sessions variables like this:

Session["login"] = "foo";
Session["password"] = "oof";

The page is deployed on a certain server. After I logged in on the page, I noticed that other users (who are in the same network area) calling the page were logged in as well! I thought those data would be stored only for me (I suppose the server sends me back some cookies to ensure that) but that’s not the case?

I certainly have a lack of knowledge somewhere. What’s going on?

Thanks

Answer 1

I wouldn’t recommend storing a password in a session variable for security purposes. If you must use a session variable, do not store the password in clear text. Use some encryption method instead.