ASP.NET Session State values swapping -
we have old asp.net 2.0 web forms application running on customers hardware makes extensive use of session state. website running on old windows 2003 web server (due replaced soon) , configured use sql server session state store.
we have discovered issue appears session data being swapped between sessions when different users hit same page @ same time. these users unrelated, have different session id's , coming different ip addresses.
in particular there 1 variable being swapped. array holding number of different pieces of information , data types (strings, integers , dates). hangover asp roots.
both users have pushed button on same page generating 2 post requests within few milliseconds of each other. our logging has recorded of values session state. response these post requests redirect next page in process.
the logging has recorded 2 requests 200 milliseconds apart next page , has recorded session state information these 2 requests. session state variables correct except values array.
these appear have been swapped. user working array user b started , vice versa.
has seen before?
the system due rewritten/upgraded in coming months need solution interim until can done.
thanks gavin
after many hours of code review found using static field on class, assigning httpcontext , using session static field.
hence random swapping of session state variables depending on when functions called.
Comments
Post a Comment