1

I am displaying the session id in the asp page. But it is vulnerable. How can I show the session id by encoding or some other way.

I cant avoid displaying session id in web screen

2 Answers 2

1

First why do you think it's vulnerable other than "shoulder surfing"?

Secondly if you want to the such a thing use another cookie and create a random sessionid by yourself use that as a second check (obviously don't show it).

0

You could gen a new guid for each user and stick that guid in session and then show them that instead of the raw ID. Or, you could show an SHA hash of the session ID.

1
  • @JP I need to display only session id. just let me know what to with this.
    – web dunia
    Apr 9, 2009 at 6:11

Your Answer

Reminder: Answers generated by Artificial Intelligence tools are not allowed on Stack Overflow. Learn more

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.