• Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other Pie Elite all forums
this forum made possible by our volunteer staff, including ...
Marshals:
  • Tim Cooke
  • Campbell Ritchie
  • paul wheaton
  • Ron McLeod
  • Devaka Cooray
Sheriffs:
  • Jeanne Boyarsky
  • Liutauras Vilda
  • Paul Clapham
Saloon Keepers:
  • Tim Holloway
  • Carey Brown
  • Piet Souris
Bartenders:

@@@SESSIONID

 
Ranch Hand
Posts: 36
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
I do not know if I post the message to the right place.

I am now maintaining a big business site. Google crawler indexed hundreds of the pages of our web site. For every page URL, there is a string like "@@@SESSIONID=*********" appended at the end of the URL. @ represents a specific character


For example: for page
http://www.aa.com/products/12345.details
the indexed page becomes
http://www.aa.com/products/12345.details;@@@SESSIONID=########

My question is
What is @@@SESSIONID? and how does it work?Is it possible that it takes the snapshot of the sensitive information, such as user profile and account number?

Thanks in advance
 
Ranch Hand
Posts: 15304
6
Mac OS X IntelliJ IDE Chrome
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
I *think* that is a .NET thing so I am not entirely sure. However, if it's anything like Java's jsessionid it's just a way of dealing with cookieless sessions so the server can remember what session data goes with what request.
 
Kevin manoj
Ranch Hand
Posts: 36
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
The only different I found is as follow:

The original page:
<!-- ABValue: true -->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<script>var s_eVar22="true"</script>

The indexed page

<!-- ABValue: false -->
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<script>var s_eVar22="false"</script>
 
author
Posts: 15385
6
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Has nothing to do with the clientside code. It has to do with the way your server is set up to handle sessions.

Eric
 
Kevin manoj
Ranch Hand
Posts: 36
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
I found out that s_eVar22 variable is for omniture measurement. So it has nothing to do with Google crawler.

My question still persists. Our web site did not process GEMSSIONID and there is a ";" between page URL and "GEMSSIONID" string.

I never see such strange URLs before.
 
Gregg Bolinger
Ranch Hand
Posts: 15304
6
Mac OS X IntelliJ IDE Chrome
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator

Originally posted by Kevin manoj:
I never see such strange URLs before.



You need to get out more. Seriously though, what else are you wanting to know? Eric and I both told you it's how the server is handling sessions. If you want more detailed info than that I suggest you track down what server side technology the site is using and go from there. This site is for Java. I know Java. I don't that that's Java.
 
Consider Paul's rocket mass heater.
reply
    Bookmark Topic Watch Topic
  • New Topic