How to get session ID in ISAPI Filter

First, you must define what you mean by "session". This is an
application-layer concept that has no meaning at the HTTP Transport layer
that ISAPI operate at. Thus, before you can "get a session ID in ISAPI
filter", YOU must define this concept of "session".

Then, you need to realize that session involves keeping state which
distinguishes one session from another... but HTTP is stateless. One
application-layer protocol to persist state, implemented by web browsers and
web applications, is Cookies. Cookies are implemented via request/response
headers, which is something that ISAPI can manipulate.

ISAPI is a powerful low-level API, so, you must first define what you mean
by "session", then figure out how it is persisted between the client/server
and the appropriate manipulation protocol, and finally, write the ISAPI to
view/modify this state using the proper protocol.

--
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Ray" <anonymous RemoveThis @discussions.microsoft.com> wrote in message
news:73C201AD-48FE-4216-AC9A-5A96F189E4F6@microsoft.com...
Hi, all
At first, I must thank for David Wang's and Mark Weaver's answers. I have
known that the ASP session object can't be used in ISAPI. There is other
problem, please help me.
I want to get a session ID in ISAPI filter, but how to do it? If it is
impossible, how can I judge a session from server to client?
session ID should be sent to server in a HTTP request, but how to get it?
Someone can give me a sample?