Question

I’m using VS2010,C# to develop an automation site (ASP.NET web app) which may have up to hundreds of users at once. I’m almost finished creating the site, but I KNOW I HAVE MADE some mistakes and one of them is using public static variables at codebehind pages instead of using sessions for each user, now when user A changes a setting in a page, USER B also views the page exactly the same way that user A views it!, rather than viewing the page in default state. I have a question:
where should I declare my sessions for each user? when users login, I create a session for each one, and this is the only session that I’ve used so far:

Session.Add("userid" + myReader["ID"].ToString(), "true");

should I create other necessary sessions right here? i.e. at login time? for instance I have declared some public static variables at a page responsible for viewing DB:

        public static string provinceid = "0";//0 means all
    public static string branchid = "0";
    public static string levelid = "0";
    public static string groupid = "0";
    public static string phrase = "";

should I declare one session for each of them at login time? or can I declare them at startup of each page?

thanks

Answer 1

The Session object is unique per user already – you do not need to “create” it.

Using static variables would cause these items to be shared across all threads (so all users). These should probably be converted to session variables.