ISAPI Filter and ASP session object

 > It is not possible for an ISAPI Filter to access ASP Session state.
 >=20
That's entirely correct, but you can do SetHeader("url", ...) from an =
SF_NOTIFY_PREPROC_HEADERS or an SF_NOTIFY_AUTH_COMPLETE filter and =
"redirect" the request to an ASP page that can then access the session. =
You can also add either a custom header or munge the query string so =
that the request URL gets passed to your ASP page. I doubt this is what =
you want though...

 > Why would the filter need to access ASP session state to redirect an =
illegal
 > request?
 >=20
 > What is the criteria that you are choosing to redirect, and why?
 >=20
Perhaps it's an attempt to implement some kind of bizarre security =
layer? e.g. old code:

If Session("youmustbeagoodpersonthen") <> 1 Then
Response.Write "go away"
Response.End
End If

.... and then we want this done automatically from the filter. Obviously =
my solution doesn't help much with this kind of code

If this is the case, try writing out a session cookie of your own and =
then checking that in the filter instead.<!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: ISAPI Filter and ASP session object