1. Home

Product groups

Support

Clarification on Session ID - WeOnlyDo Discussion board

Clarification on Session ID (wodWebServer / wodWebServer.NET)

by Kishore, Wednesday, December 20, 2023, 17:17 (337 days ago)

Team, we are using the WebServer component for a VB6 project.

I have a couple of queries regarding the session management in the WOD Session, which I hope you can help clarify:

I've noticed that session IDs are generated as soon as the web server is initiated. Could you shed some light on the purpose of this? Typically, I would expect the WOD session ID to be created after successful user authentication, and I'm curious to understand the rationale behind the current approach.

Additionally, I observed that session IDs are being reused. Is this the default behavior, and if so, what measures are in place to prevent any associated security risks? I'm keen to ensure that session IDs are unique for each session, especially after user authentication.

Any insights or guidance on these aspects would be greatly appreciated.
Thanks
Kishore

locked
  1471 views

Clarification on Session ID

by Jasmine, Wednesday, December 20, 2023, 17:28 (337 days ago) @ Kishore

Hi.

Session is created first time you add User.Sessions variable, not before that. It has nothing to do with authentication, which is just one usage of it. You can store many other types of information besides authentication.

As for its uniqueness, it should be unique, since it contains time and session ID inside, both are time-frame unique.

Regards,
Jasmine

locked
  1517 views

I really like these products - they are consistently first rate!

David Witten
WWR Development, Inc.

Thank you very much for the rapid responses. I was a little nervous about dealing with a company that is on a different continent from me. You have proven my concerns to be unfounded.

Robert Pacheco
Surebridge, Inc.

Count us as a satisfied WeOnlyDo customer. We appreciate your terrific support to get the secure Telnet working properly.

Don Fitzpatrick
InterNetworx Systems

Congratulations on an excellent product and first rate support!

Sander Pool
Rhapsody Networks

...with the SFTP interface you produced, everything was so simple to understand, we were able to start coding almost immediately!

Zack Menendez
Mapframe Corporation

Many thanks for your excellent support service. I can see why you have a long list of excellent testimonials on your website.

Martyn Walker
Batmore Technolgies

Your customer service was excellent, and I will look at your products in the future for precisely that reason.

Charles Taylor
InterWeave, Inc.

Thank you so much for your hard work and commitment in producing well thought-out solutions. WeOnlyDo is very committed to customer satisfaction!

Mike McPherson
Nokia Inc.

May I say how nice it is to work with components so complete and self-explanatory that using them in my application is as instinctive as though I wrote them myself?

Michael Barnett
Full Spectrum Telecommunications

...I'm extremely impressed with the product, it represents excellent value for money...

Danny Haworth
Assetdisk