3

This is a simple question... yet I have spent some time poking around online to no avail.

In ASP classic (which I am unfortunately stuck with), I need to know the range of possible values returned by getting session.sessionid. I can print it just fine but without a better idea of how it works (besides the obvious incrementation), I don't trust testing to determine it.

Any information/resources/leads at all would be appreciated. Thanks!

Melina
  • 68
  • 5

1 Answers1

3

Session IDs are created bij the server. Thus, session.sessionid gives you the ID generated by the server.

session.sessionid always gives you a series of 9 digits. As you can read in the sources below, the Session ID is always generated the same way (32 bit long integer, which gets encrypted).

Take a look at this resource. The linked document in the article is an interesting read.

And another article.

Guido Gautier
  • 1,237
  • 9
  • 13