I am using session variables to login users.
Theres no possible way a user could create there own session variable or alter the value is there?
I am pretty sure this is impossible but want to make sure..
Alex
Printable View
I am using session variables to login users.
Theres no possible way a user could create there own session variable or alter the value is there?
I am pretty sure this is impossible but want to make sure..
Alex
As far as I know, a user cannot change the value of the session variable
I suppose in some weird circumstance the user might be able to change their temporary cookie that IIS relies on to implement sessions (IIS 5 doesn't need cookies), but they would just (i think) change the GUID that they receive and not the actual values of the session variables