IIS/IE session variable/cookies being overwritten...

[CalBrit]

Hi,

We are trying to get to the bottom of the following issue, but not sure if this is an IIS/IE problem or a coding problem.


Environment: IE 4.0/5.0/5.5, Windows NT 4.0, iis 4/5(NT+Win2k), multiple sites with one virtual directory each.

Step-by-step action:

1.Open an IE window, enter the website and logon (userid & pwd)
2.The userid is kept in the response.cookies & session variables
3. If the user only stays in one window, the sessions & cookies have the correct values.
4. If the user opens another IE window, logs on as a different user, the ASP sessions & cookies of the first window have the values of the sessions & cookies of the second window with the exception of the ASPSessionID - it never gets overwritten.

The bottom line is if we open one IE window at a time then we are OK. But, what causes the cookies & sessions to be overwriten when the second window is opened ?

Any ideas ?

Thanks in advance,

CalBrit&Co

 

[MNClimber]

I would assume that IE is trying to be smart by noticing that one session is already started so it keeps the same session ID.

Ok, I just wrote a quick page to just display the SessionID.

When I opened a new window, by clicking on the explorer shortcut on my desktop, the sessionID changed. When I went to run and typed in the address, it did not change. When I went to run and typed in iexplore, it changed, and when I went to file-->new-->window it did not change.

So, how are you opening the new window??

Either way though...the cookie will have to be overwritten, the session objects should not be if you in fact start a new session.

Does any of this make sense??

Oh...I should also add, all this is just what I noticed by using the page I just wrote.

Mike

 

[CalBrit]

Thanks Mike,

I tried your suggstions with varoius combinations of opening IE, but to no avail. It seems no matter how you open the browser for our sites, we get the same issue.
We are going to re-write our code to support Netscape, and give that a try.....

Thanks for your help

Simon