Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 1881

Same session id in different applications of the same app pool

$
0
0

Hello,

I have two ASP.NET projects that are deployed into two different virtual directories and maintain similar authentication logic (share same user database). I was told that if I put both applications into the same application pool they can share session id.

Is it true?

My understanding of that "sharing" is that I can invoke URL of one application (send HTTP request) with a session id of another application and it should work. Am I correct?

In other words one application can access a session object of another application using a session id cookie. 


Viewing all articles
Browse latest Browse all 1881

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>