ASP.NET Session State values swapping -


we have old asp.net 2.0 web forms application running on customers hardware makes extensive use of session state. website running on old windows 2003 web server (due replaced soon) , configured use sql server session state store.

we have discovered issue appears session data being swapped between sessions when different users hit same page @ same time. these users unrelated, have different session id's , coming different ip addresses.

in particular there 1 variable being swapped. array holding number of different pieces of information , data types (strings, integers , dates). hangover asp roots.

both users have pushed button on same page generating 2 post requests within few milliseconds of each other. our logging has recorded of values session state. response these post requests redirect next page in process.

the logging has recorded 2 requests 200 milliseconds apart next page , has recorded session state information these 2 requests. session state variables correct except values array.

these appear have been swapped. user working array user b started , vice versa.

has seen before?

the system due rewritten/upgraded in coming months need solution interim until can done.

thanks gavin

after many hours of code review found using static field on class, assigning httpcontext , using session static field.

hence random swapping of session state variables depending on when functions called.


Comments

Popular posts from this blog

php - Admin SDK -- get information about the group -

dns - How To Use Custom Nameserver On Free Cloudflare? -

Python Error - TypeError: input expected at most 1 arguments, got 3 -