2 ms·
I wouldn't call the "session" concept an ASP favourite - it's the industry standard for any backend web framework to use a user session where the session key is
by herpderperator 4y ago
I wouldn't call the "session" concept an ASP favourite - it's the industry standard for any backend web framework to use a user session where the session key is stored as a random cookie value and the actual key-value pairs are stored on the backend somewhere.
- xnorswap 4y agoThat's fair, I associate it as an ASP favourite to mess it up and cause all sorts of security holes with it! Probably just a lot more inexperienced developers treating it like a magic authenticated bag without enough warnings about improper use in the documentation. Also a very easy "go to" store via global variable in ASP made it especially easy to use it as a go-to solution for anything that you couldn't be bothered to properly store.