Assembly: System.Web (in system.web.dll)
The session identifier to validate.
Return Valuetrue if the session identifier is valid; otherwise, false.
This method is not intended to be called from application code.
The Validate method verifies that the supplied id is a 24-character string consisting of lowercase characters from a to z and numbers from 0 to 5 and that the maximum length of the session ID does not exceed 80 characters.
The GetSessionID method calls the Validate method when retrieving a session identifier from an HTTP request, to ensure that the supplied session identifier is properly formatted.Notes to Inheritors: You can supply a custom session identifier to be used by ASP.NET session state by creating a class that inherits the SessionIDManager class and overriding the CreateSessionID and Validate methods with your own custom implementation. Even when you create a custom session identifier, the session ID is limited to 80 characters by the SessionIDManager class.
To use the custom class demonstrated in this example, replace the
SessionID HTTP module in your Web.config file with your custom class, as shown in the following example.
<httpModules> <remove name="SessionID" /> <add name="SessionID" type="Samples.AspNet.Session.GuidSessionIDManager" /> </httpModules>