Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. Web Development
  3. ASP.NET
  4. IE 7 same session id being used in multiple tabs

IE 7 same session id being used in multiple tabs

Scheduled Pinned Locked Moved ASP.NET
javascriptsecurityhelpquestion
7 Posts 3 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • S Offline
    S Offline
    Sundar_R
    wrote on last edited by
    #1

    Hi, When my application is opened in multiple tabs in the same browser, same session id is being used. Is theres a way in which we can restrict multiple tabs being opened in the browser from my javascript ? As a work around i tried using cookieless session,it does solve the problem,but since the session id is displayed in the url it is considered as a security threat by our client. Do we have any mechanisms by which we have encrypt or hide the URL with session id in it ? Thanks in advance, R.Sundar.

    L N 2 Replies Last reply
    0
    • S Sundar_R

      Hi, When my application is opened in multiple tabs in the same browser, same session id is being used. Is theres a way in which we can restrict multiple tabs being opened in the browser from my javascript ? As a work around i tried using cookieless session,it does solve the problem,but since the session id is displayed in the url it is considered as a security threat by our client. Do we have any mechanisms by which we have encrypt or hide the URL with session id in it ? Thanks in advance, R.Sundar.

      L Offline
      L Offline
      Lost User
      wrote on last edited by
      #2

      Hi you cannot hide Query String, but you can encrypt it in your application for security purpose. Please refer to article http://nayyeri.net/blog/how-to-encrypt-query-string-parameters-in-asp.net/[^] You can encrypt the Query String using Cryptography Services of .NET

      S 1 Reply Last reply
      0
      • L Lost User

        Hi you cannot hide Query String, but you can encrypt it in your application for security purpose. Please refer to article http://nayyeri.net/blog/how-to-encrypt-query-string-parameters-in-asp.net/[^] You can encrypt the Query String using Cryptography Services of .NET

        S Offline
        S Offline
        Sundar_R
        wrote on last edited by
        #3

        Hi, When we make the session cookieless,i cant find the sessionid in querystring. In the address bar i can see the sessionid appended in the virtual path itself like this [^] Thanks, R.Sundar.

        L 1 Reply Last reply
        0
        • S Sundar_R

          Hi, When my application is opened in multiple tabs in the same browser, same session id is being used. Is theres a way in which we can restrict multiple tabs being opened in the browser from my javascript ? As a work around i tried using cookieless session,it does solve the problem,but since the session id is displayed in the url it is considered as a security threat by our client. Do we have any mechanisms by which we have encrypt or hide the URL with session id in it ? Thanks in advance, R.Sundar.

          N Offline
          N Offline
          N a v a n e e t h
          wrote on last edited by
          #4

          Member 2437558 wrote:

          Is theres a way in which we can restrict multiple tabs being opened in the browser from my javascript ?

          No. It is browser controlled. BTW, what's wrong in sharing session in multiple tabs?

          Navaneeth How to use google | Ask smart questions

          S 1 Reply Last reply
          0
          • N N a v a n e e t h

            Member 2437558 wrote:

            Is theres a way in which we can restrict multiple tabs being opened in the browser from my javascript ?

            No. It is browser controlled. BTW, what's wrong in sharing session in multiple tabs?

            Navaneeth How to use google | Ask smart questions

            S Offline
            S Offline
            Sundar_R
            wrote on last edited by
            #5

            I am stroing most of the fields in the session object. Traversing back and forth in the application i am restoring the fields from the session object. So when the application is opened in multiple tabs fields changed in other tabs are being reflected in all other tabs. I am sure many people would have came across this issue.

            N 1 Reply Last reply
            0
            • S Sundar_R

              I am stroing most of the fields in the session object. Traversing back and forth in the application i am restoring the fields from the session object. So when the application is opened in multiple tabs fields changed in other tabs are being reflected in all other tabs. I am sure many people would have came across this issue.

              N Offline
              N Offline
              N a v a n e e t h
              wrote on last edited by
              #6

              There is no way to control how browser tab works. As I said, it is completly controlled by the browser. All you can do is, open the pages in a popup window and I believe you can't add a tab there.

              Navaneeth How to use google | Ask smart questions

              1 Reply Last reply
              0
              • S Sundar_R

                Hi, When we make the session cookieless,i cant find the sessionid in querystring. In the address bar i can see the sessionid appended in the virtual path itself like this [^] Thanks, R.Sundar.

                L Offline
                L Offline
                Lost User
                wrote on last edited by
                #7

                There is no way to control this issue

                1 Reply Last reply
                0
                Reply
                • Reply as topic
                Log in to reply
                • Oldest to Newest
                • Newest to Oldest
                • Most Votes


                • Login

                • Don't have an account? Register

                • Login or register to search.
                • First post
                  Last post
                0
                • Categories
                • Recent
                • Tags
                • Popular
                • World
                • Users
                • Groups