pulling other users session when i hit the refresh

[mrtribe]

We have a .net based system connected to oracle database tables. When 2 or more people are logged on using seperate roles/passwords/userids etc When i hit the refresh button or f5 there are times when another users data shows up. We created a routine to track the session variable and when it changes to their data it also changes to their session variable. I am at a total loss anyone ever seen this?

Dennis Cheyfitz
<snip>

[edited by: Xoc at 6:57 pm (utc) on June 24, 2003]

[sharbel]

Hmmm no, i haven't heard of Session getting mixed up.. are you sure there isnt something that was cast as Application variable? Or do you have anything in the Cache object?

Can you reproduce this with a simple page that Response.Writes the SessionID or something to that effect? What version of the Framework are you running, and what version of IIS?

[txbakers]

The Session object is tied to the browser session that is running. If you have one user on, then log off, then log on as a different user, you do run the risk of accessing the other's data.

To get a true different session you need to have two separate and distinct browsers open (not just a Ctrl-N to get a new Window).

[mrtribe]

yes i have simple read.write that tells me when i get the data after hitting the refresh it is taking the session from the other person logged in. When the first data is brought up it shows my session user name etc and when it does click to new data it takes the other persons session. If i click refree it goes back to my session.

[mrtribe]

Found the issue. Please be careful when caching a page. The contractor put a caching = i second on the page and every time someone hit the page within 1 second of someone else you got their data.

things that make you go MMMMMMMMMMMMMMMMMMMMMMM

[sharbel]

Cool glad you found the problem! I suspected it was something like that... those things can drive you crazy to find the problem.. especially on a big site.