ASP.NET AJAX Query response leakage

Hi All,

So I have a site using Windows Authentication and an Application Pool using a specific user account for access.

On my page it uses a JavaScript AJAX query to a code behind C# page which spits back data to JavaScript which puts it on the page.

Sometimes (more then exception than the rule) it will spit out results from another users query instead of mine or vice versa.

I am wondering if anyone has experienced this before and what be causing it.
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

John Gates, CISSPSecurity ProfessionalCommented:
Going to need to see the code but my first guess is somehow this is using a global variable and not considering the web session id...

Najam UddinCommented:
Can you write some detail about how data is processed? may be some things from cache is picked or may be from a database table.
@tr57285 - Have you tried monitoring your client traffic using the built-in browser tools for IE, Chrome, FireFox?

You might be able to trace down the source of leak by capturing the browser traffic.

If that doesn't work, try the Fiddler web browser debugging proxy -
Julian HansenCommented:
Open your browser console and take a look at the request that is being sent to the server.

Look at the request headers and data
Look at the response.

This is the first step.

Second - if your C# service is responding to a GET - type the URL (get it from the console debug above) and see what comes back.
If a post - setup a dummy form with the data and post that - repeat to see what is happening.

If the above tests result in the problem then there is something wrong with your server code and you need to look at how you are processing your requests.

If you get 0 failures - then ?

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.