Make corrections in the code for same. PHP can issue a new session ID on
login. ASP will need a work around as attempting to set a new session ID
would perform a DOS against the user. OWASP has the code for the Classic
ASP issue.
Original issue reported on code.google.com by rdivilb...@gmail.com on 29 Mar 2010 at 10:03
Original issue reported on code.google.com by
rdivilb...@gmail.com
on 29 Mar 2010 at 10:03