dotnet security: Change ASP .NET Session Id -- dotnet security

Change ASP .NET Session Id

Jan Monsch
8/29/2005 11:55:03 PM

dotnet security:

In order to prevent Session Fixation attacks I would like to know how it is
programatically possible to change the session id?

The idea is that after a successful authentication during login a new

Re: Change ASP .NET Session Id

Nicole Calinoiu
8/30/2005 10:32:20 AM

Have you tried calling the HttpSessionState.Abandon method to end the
original session? (A new session will be automatically created once the old
one is dropped.)

[quoted text, click to view]