Is keeping a login hash and password secure in a session?

Question

What is the best way to save the SHA1 username and login for an intranet application?

Is a session a relatively secure way to store information such as multi-domain information, username and password? I save them asSession["data"] = customObject()

Does any additional step need to be taken to ensure the security of this data? Is there a potential security problem or hole that could be compromised? Some kind of injection session? Should I use some privatekey process to lock / open session data for reading?

Answer 1

. , . (, ASP.net). , IMHO, , .

- , inProc, sqlserver, . .

, URL-, SHA1 . SHA256, .

, . - . , .

Answer 2

, . InProc, , . SQL, , , - . - , .