Most secure way to generate a random session ID for a cookie?

Posted by ensnare on Stack Overflow See other posts from Stack Overflow or by ensnare
Published on 2010-03-29T22:42:53Z Indexed on 2010/03/29 22:43 UTC
Read the original article Hit count: 211

Filed under:

sessions

|

cookies

|

python

I'm writing my own sessions controller that issues a unique id to a user once logged in, and then verifies and authenticates that unique id at every page load. What is the most secure way to generate such an id? Should the unique id be completely random? Is there any downside to including the user id as part of the unique id?

© Stack Overflow or respective owner

Related posts about sessions

SQLAuthority News – Speaking Sessions at TechEd India – 3 Sessions – 1 Panel Discussion

as seen on SQL Authority - Search for 'SQL Authority'
Microsoft Tech-Ed India 2010 is considered as the major Technology event of the year for various IT professionals and developers. This event will feature a comprehensive forum in order to learn, connect, explore, and evolve the current technologies we have today. I would recommend this event to… >>> More
SQLAuthority News Speaking Sessions at TechEd India 3 Sessions 1 Panel Discussion

as seen on Dot net Slackers - Search for 'Dot net Slackers'
Microsoft Tech-Ed India 2010 is considered as the major Technology event of the year for various IT professionals and developers. This event will feature a comprehensive forum in order to learn, connect, explore, and evolve the current technologies we have today. I would recommend this event to you… >>> More
CherryPy sessions for same domain, different port

as seen on Stack Overflow - Search for 'Stack Overflow'
Consider the script below. It will launch two subprocesses, each one a CherryPy app (hit Ctrl+C or whatever the KeyboardInterrupt combo is on your system to end them both). If you run it with CP 3.0 (taking care to change the 3.0/3.1 specific lines in "StartServer"), then visit: http://localhost:15002/… >>> More
Want to go to DevConnections for Free? Speak at DotNetNuke Connections

as seen on ASP.net Weblogs - Search for 'ASP.net Weblogs'
So every year in November (for the past 3 years at least!) DotNetNuke has been part of the DevConnections conference in Las Vegas, Nevada. This year (2010) will be no different as DotNetNuke Connections is back ( This year’s conference is scheduled for 11/1-11/4/2010 ) and guess what? I… >>> More
The Deadline Cometh

as seen on Oracle Blogs - Search for 'Oracle Blogs'
Only Two More Days to Suggest a Session. We've received 2,906 votes for presentations since the launch of the Suggest a Session program. Have you voted? Have you suggested a presentation for Oracle OpenWorld 2010 or Oracle Develop 2010? If "yes," you've done well. If "no," you still have a chance… >>> More

Related posts about cookies

ASP.NET Cookies

as seen on ASP.net Weblogs - Search for 'ASP.net Weblogs'
Cookies are domain specific and cannot be used across different network domains. The only domain that can read a cookie is the domain that sets it. It does not matter what domain name you set.Cookies are used to store small pieces of information on a client machine. A cookie can store only up to 4… >>> More
How to read/write cookies in asp.net

as seen on Samir ASP.NET with C# Technology - Search for 'Samir ASP.NET with C# Technology'
Writing Cookies Response.Cookies["userName"].Value = "patrick"; Response.Cookies["userName"].Expires = DateTime.Now.AddDays(1); HttpCookie aCookie = new HttpCookie("lastVisit"); aCookie.Value = DateTime.Now.ToString(); aCookie.Expires = DateTime.Now.AddDays(1); Response.Cookies.Add(aCookie); Reading… >>> More
Javascript cookies vs php cookies

as seen on Stack Overflow - Search for 'Stack Overflow'
Is there a difference between javascript cookies and php cookies? >>> More
Clearing C#'s WebBrowser control's cookies for all sites WITHOUT clearing for IE itself

as seen on Stack Overflow - Search for 'Stack Overflow'
Hail StackOverflow! The short version of what I'm trying to do is in the title. Here's the long version. I have a bit of a complex problem which I'm sure I will receive a lot of guesses as a response to. In order to keep the well-intended but unfortunately useless guesses to a minimum, let me first… >>> More
How to add multiple cookies to Response in WCF / REST service

as seen on Stack Overflow - Search for 'Stack Overflow'
I have access to WebOperationContext and can add one cookie by doing this: WebOperationContext.Current.OutgoingResponse.Headers.Add("Set-Cookie: foo_a=bar_a"); However if I call that several times, e.g.: WebOperationContext.Current.OutgoingResponse.Headers.Add("Set-Cookie: foo_a=bar_a"); WebOperationContext… >>> More