Hacking Session mechanism

clipped from www.codeproject.com InitModules(), all the modules listed under <system.web>/<httpModules> section are initialized, i.e., Init method of each of these HttpModules is called, i.e.. Init method of SessionStateModule is called. In the Init method of SessionStateModule, session state settings are read from <system.web>/<sessionState> section of web.config file of your ASP.NET application, and then it calls another method InitModuleFromConfig. The signature of this method is listed below: private void InitModuleFromConfig(HttpApplication app, Config config, bool configInit); The parameter app represents the instance of HttpApplication class that is being used to serve the HTTP request. InitModuleFromConfig adds various event handlers for session management related events that are raised from InitInternal() method of HttpApplication.