Regenerate Session ID

ASP.NET does not directly support functionality to regenerate a session ID. There is a not-so-quick and dirty way to do it by setting the ASPNET_SessionID value to the empty string and redirecting it so that the value is regenerated.

https://web.archive.org/web/20100213012740/http://keepitlocked.net/archive/2007/12/26/preventing-session-fixation-through-session-id-regeneration-in-java-and-asp-net.aspx

https://stackoverflow.com/questions/1419340/how-to-change-session-id-after-login-in-asp-net#:~:text=ASP.NET%20does%20not%20directly,that%20the%20value%20is%20regenerated.

https://docs.microsoft.com/en-us/collaborate/connect-redirect?FeedbackID=143361&wa=wsignin1.0&siteid=210

1 Reply

Know the answer? Post it — somebody with the same question will find it here.

Vishal Yelve4y ago
ASP.NET does not directly support functionality to regenerate a session ID. There is a not-so-quick and dirty way to do it by setting the ASPNET_SessionID value to the empty string and redirecting it so that the value is regenerated.

https://web.archive.org/web/20100213012740/http://keepitlocked.net/archive/2007/12/26/preventing-session-fixation-through-session-id-regeneration-in-java-and-asp-net.aspx

https://stackoverflow.com/questions/1419340/how-to-change-session-id-after-login-in-asp-net#:~:text=ASP.NET%20does%20not%20directly,that%20the%20value%20is%20regenerated.

https://docs.microsoft.com/en-us/collaborate/connect-redirect?FeedbackID=143361&wa=wsignin1.0&siteid=210