What is the difference between cookies and session?

Answer Posted / ajay

State Management in APS.NET is managed by two ways:
Client-Side or Server-Side

Client-Side:Cookies,HiddenFields,ViewState and Query
Strings.
Serve-Side:Application,Session and Database.

COOKIE:
A cookie is a small amount of data stored either in a text
file on the client's file system or in-memory in the client
browser session. Cookies are mainly used for tracking data
settings. Let’s take an example: say we want to customize a
welcome web page, when the user request the default web
page, the application first to detect if the user has
logined before, we can retrieve the user informatin from
cookies:
[c#]
if (Request.Cookies[“username”]!=null)
lbMessage.text=”Dear “+Request.Cookies[“username”].Value+”,
Welcome shopping here!”;
else
lbMessage.text=”Welcome shopping here!”;

If you want to store client’s information, you can use the
following code:
[c#]
Response.Cookies[“username’].Value=username;

So next time when the user request the web page, you can
easily recongnize the user again.

SESSION:
Session object can be used for storing session-specific
information that needs to be maintained between server
round trips and between requests for pages. Session object
is per-client basis, which means different clients generate
different session object.The ideal data to store in session-
state variables is short-lived, sensitive data that is
specific to an individual session.

Each active ASP.NET session is identified and tracked using
a 120-bit SessionID string containing URL-legal ASCII
characters. SessionID values are generated using an
algorithm that guarantees uniqueness so that sessions do
not collide, and SessionID’s randomness makes it harder to
guess the session ID of an existing session.
SessionIDs are communicated across client-server requests
either by an HTTP cookie or a modified URL, depending on
how you set the application's configuration settings.

Every web application must have a configuration file named
web.config, it is a XML-Based file, there is a section
name ‘sessionState’, the following is an example:

<sessionState mode="InProc"
stateConnectionString="tcpip=127.0.0.1:42424"
sqlConnectionString="data source=127.0.0.1;user
id=sa;password=" cookieless="false" timeout="20" />

‘cookieless’ option can be ‘true’ or ‘false’. When it
is ‘false’(default value), ASP.NET will use HTTP cookie to
identify users. When it is ‘true’, ASP.NET will randomly
generate a unique number and put it just right ahead of the
requested file, this number is used to identify users
[c#]
//to store information
Session[“myname”]=”Mike”;
//to retrieve information
myname=Session[“myname”];

this is briefly about cookies and sessions in ASP.NET

Is This Answer Correct ?    12 Yes 2 No



Post New Answer       View All Answers


Please Help Members By Posting Answers For Below Questions

What is an argument in c#?

473


What is the use of dll file in c#?

469


Can extension methods access private members?

514


What is a method c#?

476


What is the difference between “out” and “ref” parameters in c#?

514






Can abstract class instantiated c#?

506


What is hashmap in c#?

480


Can we override main method in c#?

484


Can we inherit sealed class in c#?

471


Explain when should you call the garbage collector in .net?

488


1. Describe page life cycle?

1581


I want to print "Hello" even before main() is executed. How will you achieve that?

519


What standard types does c# use?

512


Can you declare a class or a struct as constant?

549


What is thread and explain states of a thread in c#?

482