Comments by sector_9 (Top 10 by date)

i created another simple java program and 2 simple asp pages to demonstrate my problem aside from the original project I'm doing , i uploaded the java application source code and the asp.net code to sector9.somee.com/v2_1.rar and sector9.somee.com/sector9.somee.com
you can also access the host I'm using its on somee.com username:sector9 password:123456789
that project I uploaded and currently deployed on the host work perfect on my machine in debug mode (ASP.net development server ) but when i deploy it it doesnt work ! it enter a redirect loop, the java program simply request the default.aspx and from it capture the session id then request the default2.aspx (by providing the session id in the url) , this work fine but when deployed it doesnt work at all !

i looked the problem and it appears to be that the asp.net server create a volatile validation cookie at the client side on creating the session for the first time , that cookie contain the session id , also any cookie created by the asp has a session id , i used the web.conf file to stop the asp server from using that cookie
<sessionstate
cookieless="true"
="">
that solved the problem and the system works good but when i published the website online i get an error caused by infinite redirection loop , i even tried using a simple page as you said but even that page doesnt open it goes in an infinite loop of redirection

I found out that When you create a new session (that is, the first time you write to a Session variable), ASP.NET sets a volatile cookie on the client that contains the session token. On all subsequent requests, and as long as the server session and the client cookie have not expired, ASP.NET can look at this cookie and find the right session.
i still have to find a way around this in the client I'm creating ( java program not web page ) ..help please

thank you for the reply , but what I'm trying to do isnt a java page and an asp page , its a java program and an asp web page(s) ,yes its true that the session is saved at the server so in my case the asb server , the problem is that its lost also in the asp server , the session is created but when the redirect method is called , and the default to page is loading the session object appears to be null!

thank for the reply ... true , i know its extremely not secure , the point here isn't security its that the session terminate at the asp server ,i know i can make a simple asp page , but what i want is to maintain a session between the client (java ) and the server asp .