Safe random numbers in asp.net

Question

From what I know, Random () is initialized by the current time. If two connections fall within the same second, should I get the same two random numbers? With a large site that may be likely. The lock is bad, so how should I solve it? note: the number is used for the session identifier.

-edit- I am stuck using a long one. Incorrectly truncate 128-bit GUID

Answer 1

First, why do you need to create your own session id? Are you using SessionIDManager ? I would use the Guid.NewGuid () method, as shown in the CreateSessionID example . According to the documentation for Guid.NewGuid () , "The possibility that the value of the new Guid will be equal to all zeros or equal to any other guide is very low.

Answer 2

Instead of using the random number from the call Random(), use Guid.NewGuid () . The probability of duplication is very, very small ...

Using a GUID for a session identifier is a common solution.