View Single Post
  #14 (permalink)  
Old 03-04-03, 00:13
Bunce Bunce is offline
Registered User
 
Join Date: Jul 2002
Location: Australia
Posts: 147
Quote:
Originally posted by rhs98
Offtopic; is it possible to access session x's variables from session y? (no not application variable or 'out like that)
Not that I know of, would be a security risk. I assume that the 'ticket' that it sends contains server identification as well, so only that specific server can access it.

Even withink the server, it finds a way to uniquely identify session, for the same user.. When you open a new browser instance, on the same site, you're actually creating a new session, so it has to differentiate that as well.

I recall a KB article about sharing *cookies*, and a related security problem, but nothing about sessions.

Cheers,
Andrew
__________________
There have been many posts made throughout the world.
This was one of them.
Reply With Quote