Hello,
I am doing web based projects in dotnet. Currently I am implementing
security using session variables. I keep current user id and user type
in session and authenticate user from these session variables (say
Session["UserId"],Session["UserName"] and Session["UserType"]) I do
authentications.
Please guide me how it is insecure ? I heard such security can be
broken and applications can be hacked very easily, like it is possible
to get session id and directly connect to that session id etc.
Please guide me on this
thanks
...
Go to the complete details ...