Session Fixation in ASP.NET
- by AJM
I'm wondering how to prevent Session fixation in ASP.NET
My approach would to this would normally be to generate and issue a new session id whenever someone logs in. But is this level of control possible in ASP.NET land?