Session

1).What is state management?

State management is the process that maintain state and page information over multiple requests for the same or different pages.

2).Http is stateless, What does this mean?

Stateless protocol is a communications protocol that treats each request as an independent transaction that is unrelated to any previous request
so that the communication consists of independent pairs of requests and responses.

3).What is Session?

Http is stateless, means when we open a webpage and fill some information and then move to next page then the data which we have entered will lost.It happed do to Http protocol stateless nature. So here session come into existence, Session provide us the way of storing data in server memory. So you can store your page data into server memory and retrieve it back during page postbacks.

4).What are the Advantage and disadvantage of Session?

Advantages:

1.    Session provide us the way of maintain user state/data.

2.    It is very easy to implement.

3.    session  store any kind of object in it. :eg, datatabe, dataset.. etc

4.    By using session we don't need to worry about data collesp, because it store every client data separately.

5.    Session is secure and transparent from the user.

Disadvantages:

1.    Performance overhead in case of large volumes of data/user, because session data is stored in server memory.

2.    Overhead involved in serializing and de-serializing session data, because in the case of StateServer and SQLServer session modes, we need to serialize the objects before storing them.

5).What is Session ID in Asp.net?

Asp.Net use 120 bit identifier to track each session. This is secure enough and can't be reverse engineered. When client communicate with server, only session id is transmitted, between them. When client request for data, ASP.NET looks on to session ID and retrieves corresponding data.

6).By default where the sessions ID's are stored ?

By default, the unique identifier for a session is stored in a non-expiring session cookie in the browser. You can specify that session identifiers not be stored in a cookie by setting the cookieless attribute to true in the sessionState configuration element. We can also configure our application to store it in the url by specifying a "cookieless" session


7).Where does session stored if cookie is disabled on client’s machine?

If you want to disable the use of cookies in your ASP.NET application and still make use of session state, you can configure your application to store the session identifier in the URL instead of a cookie by setting the cookieless attribute of the sessionState configuration element to true, or to UseUri, in the Web.config file for your application. The following code example shows a Web.config file that configures session state to use cookieless session identifiers.

<configuration>
  <system.web>
    <sessionState
      cookieless="true"
      regenerateExpiredSessionId="true"
      timeout="50" />
  </system.web>
</configuration>


8).Can you describe all the property set in web.config under session state?


<configuration>
  <sessionstate
      mode="inproc"
      cookieless="false"
      timeout="20"
      sqlconnectionstring="data source=127.0.0.1;user id=<userid>;password=<password>"
      server="127.0.0.1"
      port="8080"/>
</configuration>

Mode: The mode setting supports three options: inproc, sqlserver, and stateserver.

As stated earlier, ASP.NET supports two modes: in process and out of process.

There are also two options for out-of-process state management: memory based (stateserver), and SQL Server based (sqlserver). We'll discuss implementing these options shortly.

1.    Cookieless: The cookieless option for ASP.NET is configured with this simple Boolean setting.

2.    Timeout: This option controls the length of time a session is considered valid. The session timeout is a sliding value; on each request the timeout period is set to the current time plus the timeout value

3.    Sqlconnectionstring: The sqlconnectionstring identifies the database connection string that names the database used for mode sqlserver.

4.    Server: In the out-of-process mode stateserver, it names the server that is running the required Windows NT service: ASPState.

5.    Port: The port setting, which accompanies the server setting, identifies the port number that corresponds to the server setting for mode stateserver.

9).What are Session Events?

There are two types of session events available in ASP.NET:

1.    Session_Start

2.    Session_End

You can handle both these events in the global.asax file of your web application. When a new session initiates, the session_start event is raised, and the Session_End event raised when a session is abandoned or expires.

10).How you can disable session?

 If we set session Mode="off" in web.config, session will be disabled in the application. For this, we need to configure web.config the following way:

<configuration>
  <sessionstate  Mode="off"/>
</configuration>