Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / ASP.NET / Security / December 2004

Tip: Looking for answers? Try searching our database.

Bypassing a session ID?

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
mostro - 22 Dec 2004 14:27 GMT
Hi All,

Example: A webpage exists that allows you to fill out a form and click
submit. The page next page displays the information found from your search
criteria. The form includes information like Fname, Lname, Address and Zip.
I want to programmatically fill out the form and submit the information only
to recieve the final search result page. The problem I am having is that the
page uses a session ID. Is there a way to get around this?

Thanks in advance.
Joerg Jooss - 22 Dec 2004 18:41 GMT
> Hi All,
>
[quoted text clipped - 5 lines]
> The problem I am having is that the page uses a session ID. Is there
> a way to get around this?

Hopefully not ;-)

But why not obtain a session id programmatically as well?

Cheers,

Signature

Joerg Jooss
www.joergjooss.de
news@joergjooss.de

mostro - 23 Dec 2004 16:54 GMT
I guess I will have to do the research. I'm not really a programmer just
trying to design the flow. Got any ideas?

Thanks

>> Hi All,
>>
[quoted text clipped - 11 lines]
>
> Cheers,
Joerg Jooss - 24 Dec 2004 08:52 GMT
> I guess I will have to do the research. I'm not really a programmer
> just trying to design the flow. Got any ideas?

At the end of the day, what you're tring to design is similar to a remote
control for the 3rd party web application. Emulate the web application's
flow for a regular user. If there's a login page, your remote control must
login as well. If there's no login but some kind of entry page that issues
session ids, include that page.

You probably should sit down with a dev and show him the flow of pages you
want to repeat programmatically.

Cheers,

Signature

Joerg Jooss
www.joergjooss.de
news@joergjooss.de


Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.