.Net2.0 中Session储存位置多了几个选项
<sessionState
mode="[Off|InProc|StateServer|SQLServer|Custom]"
timeout="number of minutes"
cookieName="session identifier cookie name"
cookieless=
"[true|false|AutoDetect|UseCookies|UseUri|UseDeviceProfile]"
regenerateExpiredSessionId="[True|False]"
sqlConnectionString="sql connection string"
sqlCommandTimeout="number of seconds"
allowCustomSqlDatabase="[True|False]"
useHostingIdentity="[True|False]"
stateConnectionString="tcpip=server:port"
stateNetworkTimeout="number of seconds"
customProvider="custom provider name">
<providers>...</providers>
</sessionState>
.Net2.0中 新增加了几个 cookieless 选项:
AutoDetect
ASP.NET determines whether the requesting browser or device supports cookies. If the requesting browser or device supports cookies then AutoDetect uses cookies to persist user data; otherwise, an identifier is used in the query string. If the browser or device supports the use of cookies but cookies are currently disabled, cookies are still used by the requesting feature.
UseCookies
Cookies are used to persist user data regardless of whether the browser or device supports cookies.
UseDeviceProfile
ASP.NET determines whether to use cookies based on System.Web.HttpBrowserCapabilities setting. If the setting indicates that the browser or device supports cookies, cookies are used; otherwise, an identifier is used in the query string.
UseUri
The calling feature uses the query string to store an identifier regardless of whether the browser or device supports cookies.
我的问题如下:
选择UseCookies 的时候, 如果客户端cookie可用,那么保存在cookie中的是:
A:) 一个SessionID
B:) 所有的Session值
如果客户端Cookie不可用,那么Session是不是保存在HTTP协议的Head中?