Hi all happy holiday


I recently find some site is asking user to login from https
and then auto redirect to http after sucessful login.
there is no url param found in the url thereafter . how the persistant
cession is passed . where it is hold?





for example onlinenic.com. i wonder where the cession is hold ?
there is no cookie found in user side. weather it is hold in memory?



while hotmail is slightly different, when redirect to http, the url field will shows some parameter which may contain the

session infos so if there is no parameter in the url field. how the persistant sesssion is passed? i have searched goggle with keywords persistant session and no reference found. maybe i use inrelevant keyword

Could you someone light me and provide some tutorial infos?

Thanks

Hi,

Are you sure it's not done in a cookie? Try downloading Firebird and the live http headers plugin and you can see exactly what is passed between server/client.

Cheers,

Alex
--
Gossamer Threads Inc.

Thanks alex. i will take you advise and take a try.



Thanks