Sessions

Summary In previous programming projects, I have used the ISessionStateItemCollection object to override the session state collection object built into HttpContext.Current.  In this blog post I’m going to demo a bug in Microsoft’s sample code used to show how to create a custom SessionStateItemCollection. Where to Find the Sample Code Microsoft provides a lot of … Read moreISessionStateItemCollection interface

Summary In my last post, I talked about how to override the id generator of the HttpContext.Current.Session.  In this post I’m going to show how to override the methods that affect the cookie itself. The ISessionIDManager Interface In order to get at the methods required to manipulate the cookie, you’ll need to implement the ISessionIDManager … Read moreCreating Your Own Custom Session ID (Part 2)

Summary In this blog post I’m going to talk about the ID manager used by the .Net HttpContext.Current.Session and how to customize the ID that is generated to create a more secure ID. Session ID The session ID that is created when you use the Session object is contained in a cookie named ASP.NET_SessionId by … Read moreCreating Your Own Custom Session ID

Summary In this post I’m going to demonstrate how to generate a safe token for a custom session module. The Session Token When a user logs into a website, there needs to be a way to keep track of who the person is after the authentication occurs. One method is to give the user a … Read moreGenerating a Custom Session Token