Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
We have a web appliaction where we are nonintoxicating users in a log in form, after log in, we are keeping the user info ( user info, user id, …) in a session state, now under pressure, sometimes and very rarely we get from clients that they are logging in with their user name, but after login they found themselves with some boy else’s name, and reading their data, as if they are reading other user’s session. Could this be the issue?
The only way I could see that happening is if they somehow shared the same session ID, which would probably only happen if you’re managing session state in SQL server. If you’re using standard InProc session state, that would be highly unlikely.