Ask a Question related to ASP.NET Security, Design and Development.
-
Niclas Lindblom #1
Store values in session.item
Hi,
Are there any security issues related with storing data related to the users
session in session.item ? Can i keep data in there with any risk of it being
read from the client side ?
Please advise
Regards
Niclas
Niclas Lindblom Guest
-
How to store property values of custom controls to *.aspx.resx files at design time?
Hi, I am building an web server custom control with a complex string property. The values of his property are very large strings looking like... -
Session DB values?
I am trying to make a shopping cart. Old ones i have created I have stored product id's and prices in a cookie. Where can I find information on... -
Session variables contain no values
Hi everybody. I'm experiencing strange problems with PHP session files: a user submits a form with UID and PWD. The next page checks these... -
How do I store values in table cells
I have created a table that I want to fill with calculated values. I have given ID's to each cell. This must NOT be the way since I can't address... -
[PHP] Store array as Session Variable
$details is an array (just like $company_name was). Try to view print_r($details); and see what you get. ---John Holmes... ----- Original... -
Chris Jackson #2
Re: Store values in session.item
Session information is stored on the server. What is sent to the client is
the session ID. An attacker can hijack the session ID and pose as a given
user, but if you never write this value back to the client, then they still
won't be able to see it.
--
Chris Jackson
Software Engineer
Microsoft MVP - Windows XP
Windows XP Associate Expert
--
More people read the newsgroups than read my email.
Reply to the newsgroup for a faster response.
(Control-G using Outlook Express)
--
"Niclas Lindblom" <lindblom_niclas@hotmail.com> wrote in message
news:ONWl8gAkDHA.2140@TK2MSFTNGP09.phx.gbl...users> Hi,
>
> Are there any security issues related with storing data related to thebeing> session in session.item ? Can i keep data in there with any risk of it> read from the client side ?
>
> Please advise
>
> Regards
>
> Niclas
>
>
Chris Jackson Guest



Reply With Quote

