Can a session be rigged?

Question

I need to check all my asp code to prevent SQL injection.

Should I also check the session object?

How can a session be captured?

Thanks!

Answer 1

Session can be captured. If I remember correctly, Classic ASP only supports cookie-based session identifiers. If someone was able to steal this cookie (wired contact), he can get the same session as a legitimate user.

? . , , , "" ( ), . - Session, .

Answer 2

SQL, SQL- . - . cookie HTTPS. ( ) ().

Answer 3

, . , , : " ?" , sql-.

, , sql- , sql. sql- , , , SQL-.

, , sql-.

Answer 4

. cookie. , . , SQL-, .