You might notice that the results of the following code are quite peculiar:
<% Response.Write Session.SessionID & "<BR>" Session.Abandon Response.Write Session.SessionID %> |
While one might expect that, immediately after a session is abandoned, a new session is created, in actuality the first session is not really discarded until the current page goes out of scope... meaning the user will not get a new SessionID until they access another ASP page in your application.