会话/会话ID被分配给多个用户 [英] Sessions/Session IDs being assigned to more than one user

问题描述

我希望那里的人能够更新有关会话及其ID的日期信息.

I hope someone out there has some update to date information on sessions and their IDs.

我正在IIS 7上运行，我们看到分配给多个IP地址的会话.

I'm running on IIS 7 and we're seeing Sessions assigned to more than 1 IP address.

我排除了可能是由于用户重置其IP地址(例如拔掉其调制解调器)引起的.

I ruled out the possibility of it being caused by users resetting their IP addresses, for instance by unplugging their modems.

在至少一个实例中，一个用户登录并发现来自另一个用户的数据已保存到他的帐户中(确定数据存储在哪个帐户中的用户ID保留在会话变量中).在另一种情况下，一名员工登录以检查问题，这是由另一个用户进行的.

In at least one instance a user logged in and found data from a different user in had been saved to his account (the user IDs that determine in which account the data is stored are kept in session variables). In another instance an employee logged in to check a problem as was given the session of a different user.

不仅仅是会话变量，而且我在日志中看到会话ID本身与两个不同的IP地址相关联.有一次，超过10％的用户正在发生这种情况.

It's not just the session variables, but I saw in our log the session ID itself is being associated with two different IP addresses. At one point this was happening with over 10% of our users.

我想知道问题是否出在我们的系统中，因为我发现在每种情况下，共享会话ID的IP都在同一ISP上或共享至少一个NameServer.

I'm wondering if the problem is not in our system, because I'm seeing that in each case the IPs sharing a session ID are on the same ISP or share at least one NameServer.

我非常欢迎任何想法，我们越来越绝望了！

I very much welcome any ideas, we're getting desperate!

推荐答案

这是IIS7的缓存问题.在此处阅读更多信息: http://lionsden.co.il/codeden/?p=446

It's a caching issue with IIS7. Read more here: http://lionsden.co.il/codeden/?p=446

这篇关于会话/会话ID被分配给多个用户的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！