Session ID's - Are these guaranteed unique

[Ben Fidge]

Are IIS session ID's guaranteed to be unique forever, like GUID's. Ie, would
it be safe to assume that a session ID is not ever going to be used again or
recycled? I want to track user activity on a web-site by storing the session
id and activity in a Sql Server database. Oviously if a session Id is used
more than once over a given time period, then the reporting is going to be
inaccurate.

Ben

 

[S. Justin Gengo]

Ben,

I think this article will answer all your questions about session ids:

http://support.microsoft.com/?kbid=899918


--
Sincerely,

S. Justin Gengo, MCP
Web Developer / Programmer

www.aboutfortunate.com

"Out of chaos comes order."
Nietzsche

 

[Juan T. Llibre]

It's guaranteed to be unique, as long as the server is not rebooted.

If the server is rebooted, there's a microscopically
small chance that the same Session ID will be used.

There's an algorithm which changes the Session ID
enumeration sequence with every bootup.

In practice, it's almost assured that the Session IDs
are unique, even across bootups.




Juan T. Llibre
ASP.NET MVP
ASP.NET FAQ : http://asp.net.do/faq/
==========================