NT8.03 session ID allways characters

[Alberto]

even if you check use number for session id
see image

and if you set a character sessionID its allways 30 chars even if you set it to be 8

[attachment deleted by admin]

[kevin plummer]

try to close\re-open your browser. If the cookie already existed with 30 char you will get that result.

[Bruce]

Kevin is right, you probably need to just close your browser (or try another browser).

However;
>>  if you check use number for session id

don't do that.

>> even if you set it to be 8

don't do that.

weakening the sessionid makes you app more vulnerable to a session fixation attack. Take security seriously - in the long run it's a better idea.

cheers
Bruce