What is the difference between Session.Abandon() and Session.Clear()

前端 未结 10 951
陌清茗
陌清茗 2020-11-28 03:36

What is the difference between destroying a session and removing its values? Can you please provide an example demonstrating this?

I searched for this question, but

10条回答
  •  遥遥无期
    2020-11-28 04:01

    Existence of sessionid can cause the session fixation attack that is one of the point in PCI compliance. To remove the sessionid and overcome the session fixation attack, read this solution - How to avoid the Session fixation vulnerability in ASP.NET?.

提交回复
热议问题