Browse by Tags

Related Posts

  • Re: when should a session expire on a typical member based site

    The undocumented "standard" for this has become 20 minutes for your average site. If you've got secure info, say a bank or other site which contains highly sensitive information, this would be shorter, 10 minutes for some or even as little as 5. On yet other sites which have nothing really...
    Posted to State Management (Forum) by bipro on 10-29-2008, 12:00 AM
    Filed under: Session, session end, Session Management, Session object, session state timeout, session time out, session timeout, session.end, Session_End, sessions, HttpModule, IHttpModule, session expires, session state management, SessionState, HttpModules, IIS, Session State
  • Re: S.O.S - Calling all HTTPModule Security Experts!

    The session is only available in an HttpModule between Application_AcquireRequestState and Application_ReleaseRequestState. Prior to the AcquireRequestState, it is not available via HttpContext.Current.Session. (However, in some instances it is available via the Context.Items collection prior to this...
    Posted to HttpHandlers and HttpModules (Forum) by foreachbiscuit on 10-24-2007, 12:00 AM
    Filed under: Session, HttpModule, Application_AcquireRequestState
  • S.O.S - Calling all HTTPModule Security Experts!

    I'm creating a multiple sign-on process using an HTTPModule so I need to be able to keep track of which steps (pages) in the sign-on process the users have successfully completed. That being said, I do have a descent understanding of how these modules work as I've created one in the past to authenticate...
    Posted to HttpHandlers and HttpModules (Forum) by illumna1 on 10-24-2007, 12:00 AM
    Filed under: OnAcquireRequest, OnAuthenticateRequest, Page, Session, HttpModule, Authentication
  • Re: Difficulties figuring out how to initiate download of files after their creation

    Hi JJ, Thanks for your reply. I now have a clearer idea of how I am goiong to tackle this. You are correct that the web is stateless, and therefore, if the user navigates away from the "Download_Request" page, there is nothing I can do to let them download the file, since that particular Request-Response...
    Posted to HttpHandlers and HttpModules (Forum) by kreid on 12-15-2006, 12:00 AM
    Filed under: Session, asp.net 2.0, download, HttpHandler, HttpHandlerFactory, HttpModule, HttpWebRequest, javascript, HttpResponse
  • Why is session state not available in HttpModule?

    In a HttpModule I always get a null pointer exception if I try to access session state. I use the event AcquireRequestState in the pipeline. This seems to be a known issue (cf.: http://forums.asp.net/t/1179337.aspx ). Thank you.
    Posted to HttpHandlers and HttpModules (Forum) by SKT_01 on 12-22-2007, 12:00 AM
    Filed under: Session, HttpModule, AcquireRequestState
Page 1 of 1 (5 items)