Last post Feb 23, 2012 10:32 AM by Frank Jiang - MSFT
Feb 21, 2012 09:49 AM|jacob s cracker|LINK
I want to use session variables to transmit data from one page to another, e.g the user selects a Customer from a list and I save the ID as session("Customer_ID") for use when finding their orders, contact details etc on other pages.
We've had a number of cases where one set of customer details have been overwritten onto another customer record. I think this is because the session has become 'shared'.
Initially this was found to be when a user had two tabs open on our website at the same time, processing differnt (he thought!) customers. But it's also happened when one user emails the url (containing the session_ID) to another who pastes it while the
initial user/session is still active. Chaos!
So, to the question. When first entering my website I want to find out if the session is already active.
The way I do it at the moment is to set a session variable on my Login page (and don't set it anywhere else in the app). Then I check on each page if this variable exists. If it doesn't it means we have arrived via a 'duplicate' session and I redirect to
a error page.
Any other more elegant ideas?
Feb 21, 2012 10:24 AM|srinanthuram|LINK
Feb 21, 2012 10:27 AM|jacob s cracker|LINK
Thanks, and that's what I do when a user logs off. But the point is that the second user joins the session while the first user is still active.
Feb 23, 2012 10:32 AM|Frank Jiang - MSFT|LINK
Note:When the Abandon method is called, the current Session object is queued for deletion but is not actually deleted until all of the script commands on the current page have been processed.