I've always heard a lot of people say that SESSION is non-performance and that it was not advisable to use SESSION in .NET applications, but so far I have not found anything I can use in place of SESSION.
What could I use instead of the SESSION?
Better options for SESSION?
0
asked by anonymous 18.04.2017 / 18:39
1 answer
0
Everything always depends. Now with ASP, depending on the architecture, you can traffic information in other ways that do not use session, such as viewbag, viewdata ... You need to know what to store and for how long.
Abuse of the session can cause you problems such as memory overflow, for example, which will cause the pool to stop, depending on the server settings. As for performance issues, it may not be very performative, since uses the resources of the server and there everything is in competition, with other applications too, maybe ... but, this is information without ownership, on my part.
In particular, I use cookies to store a lot of data, of course: encrypted and always with HTTPOnly, so your server has access to this information and it is not available for capture by js, avoiding XSS.
You can read more about httpOnly cookies here: link
Or have other points of view here: Which is safer: session or cookie?
(=
18.04.2017 / 19:00