How to remove Session ID displayed in URL - resolved

(1 post) (1 voice)


Reply to this Topic Start new Topic

Custom Search

  1. C_K
    C_K
    Distinguished
    Moderator
    Score: 157

    Recently I came across a strange issue while I browse my web applications first page i.e. Login.aspx page.
    When I browse for it, it displayed session id in my URL which was not allowing me to login.

    I was expecting following URL:
    http://10.10.10.105:1001/MyWebApp/app/frmlogin.aspx

    But I was getting following URL in my browser.
    http://10.10.10.105:1001/MyWebApp/(S(1krbhyiq251obbiu3xphtgub))/app/frmlogin.aspx

    where (S(1krbhyiq251obbiu3xphtgub)) was session ID which was displayed in browser.

    This was due to Session ID displayed in URL which happens when you turn on cookie less session. In case of cookie less session, session ID is displayed/stored in your application URL.

    This can be removed by adding following settings to your web.config file under system.web tag.

    <sessionState mode="InProc" cookieless="false" timeout="30"/>

    here only property <stong>cookieless="false" is important, others may change according to your application.

    Posted 4 months ago #

Post a Comment

You must log in to post.