Re: Bypassing a session ID?

From: mostro (mostro_at_adelphia.net)
Date: 12/23/04 

Date: Thu, 23 Dec 2004 11:54:49 -0500

I guess I will have to do the research. I'm not really a programmer just
trying to design the flow. Got any ideas?

Thanks

"Joerg Jooss" <joerg.jooss@gmx.net> wrote in message
news:uRx5lXF6EHA.260@TK2MSFTNGP10.phx.gbl...
> mostro wrote:
>> Hi All,
>>
>> Example: A webpage exists that allows you to fill out a form and click
>> submit. The page next page displays the information found from your
>> search criteria. The form includes information like Fname, Lname,
>> Address and Zip. I want to programmatically fill out the form and
>> submit the information only to recieve the final search result page.
>> The problem I am having is that the page uses a session ID. Is there
>> a way to get around this?
>
> Hopefully not ;-)
>
> But why not obtain a session id programmatically as well?
>
> Cheers,
>
> --
> Joerg Jooss
> www.joergjooss.de
> news@joergjooss.de
>

Relevant Pages

  • Re: whats the advantages and disadvantages
    ... register_globals isn't a security risk by itself. ... does, however, make it easy for the programmer to do stupid things. ... session variable called "loggedIn." ... there will be a variable called $loggedIn that is automatically ...
    (comp.lang.php)
  • Re: Unbound names in __del__
    ... >>> to hide the whole session thing from the programmer. ... the last reference makes the object eligible to be deleted 'sometime' (if ... dependable cross-implementation method that I know of. ...
    (comp.lang.python)
  • Re: [Full-Disclosure] defense against session hijacking
    ... > security lists about session hijacking in Web applications. ... > good defense for a programmer to store the IP address of the client ... > the client for each subsequent request, ... > method to protect against such an attack? ...
    (Full-Disclosure)
  • Re: ensure a parameter gets passed between pages
    ... programmer had to move between pages. ... If its not transparent or minimal in impact it probably ... windows of the same site they wont corrupt each other's session data. ... what id like is this functionality for my one single HiddenField. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Session problem with ASPX
    ... I am a programmer and I have a question about a ASP.NET peace of code. ... // Retreives the department list from the session instead of the SQL ... Then I click the IE BACK button, do a REFRESH, click yes to the standard ...
    (microsoft.public.dotnet.general)