asp.net - Is there point in using Sessions in this particular case? -
the client opens website through non-web app , gives id , unique security code through query strings. url looks smth this: .../default.aspx?ui=21&sc=b2r#67!kl
for different clients, website has different content. users not more 10 (considering 1 client 1 company has many employees(users) , users of 1 company security code same). 10 users same company have different ids (ui
) same security code (sc
) , on different companies.
so there point in using sessions or sufficient use query string values distinguishing users? why/why not?
suggestion of other, better way of implementation welcome.
i agree having url hold information userid's , security code not idea.
maybe make 'landing page' still pass in information in query string, on page set 2 session variables 1 userid , other security code. redirect default page without query strings. anytime need check variables can through session, , without having querystring showing. thought.
Comments
Post a Comment