About ASP session ID

R

Ray

Hi, all
There is a problem about ASP session ID. ASP session is implemented by storing session id in a session cookie, but I read this cookie in ISAPI Filter, get a string as following:
ASPSESSIONIDQADCQQTS = IAOFCBBCGDGMDGCNJIKPNBAN
But the real session ID is 554851848. (Real sessionID is sessionID property the ASP session object)
Problem is what is relation between them? And how to get real session ID from cookie session ID.
Can somebody help me? Thanks!
 
P

Patrice

I doubt it's easy as it could be used to fake a session (it could be just a
unrelated hash number that allows to retrieve the session including the
sessionid in a hash table).

What is your scenario as this association is done for you server side ?

Patrice

Ray said:
Hi, all
There is a problem about ASP session ID. ASP session is implemented by
storing session id in a session cookie, but I read this cookie in ISAPI
Filter, get a string as following:
ASPSESSIONIDQADCQQTS = IAOFCBBCGDGMDGCNJIKPNBAN
But the real session ID is 554851848. (Real sessionID is sessionID
property the ASP session object)
 
R

Ray

I want to create a ISAPI Filter, and I want to get some data from ASP session object. I can not handle ASP session object in ISAPI Filter, so I will all values in ASP session object write into a file in server, and session ID(real session ID) is Primary Key. That is to say, I will read a record from the file with session ID
If you have a better way to do this, please tell me
Thanks
 
P

Patrice

I'm far from being an ISAPI expert. You may want to try a group such as
microsoft.public.platformsdk.internet.server.isapi-dev instead...

I don't even see how you could access a particular session by computing the
ID. Basically from what I've seen from other APIs I would expect to have
something in the API that would allows to access the whole context of the
request.

If it's not possible (could be as I believe ASP is itself an ISAPI
extension), you could use some other means such as using a cookie ,
rewriting the url (if you can do this with isapi) or using a file.

You have some kind of close interaction between your filter and the final
ASP application that uses the filter ????

Sorry for the poor help.

Patrice

Ray said:
I want to create a ISAPI Filter, and I want to get some data from ASP
session object. I can not handle ASP session object in ISAPI Filter, so I
will all values in ASP session object write into a file in server, and
session ID(real session ID) is Primary Key. That is to say, I will read a
record from the file with session ID.
 
P

Patrice

Have perhaps a lookat :
http://msdn.microsoft.com/library/d.../vcsample/html/vcsamisapifiltersamplemaps.asp
http://msdn.microsoft.com/library/d.../vccore/html/vcconatlsessionstateservices.asp

My understanding is that ATL server classes are provided support for a
number of server functionnality including isapi filters and session state
services (not clear but it looks like the id used to retreive a session is a
string).

Try to confirm in another group if needed as this is quite a wild guess from
my part...

Good luck.

Patrice
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Members online

Forum statistics

Threads
474,151
Messages
2,570,854
Members
47,395
Latest member
GennieGinn

Latest Threads

Top