Session variables are lost if you use FRAMESET

I recently launched a portal and all things went smoothly only until the vendor all of a sudden used a frameset to contain the original website url without my knowledge. This resulted in user unable to login and use the portal totally! Reason being session variables are lost when frameset is used.

The below Microsoft KB has a neat resolution. I recommend the resolution on adding a custom HTTP header.

You can use the IIS Management Snap-In (inetmgr) to add to a static file. Follow these steps to add this header to a static file:

1. Click Start, click Run, and then type inetmgr.
2. In the left navigation page, click the appropriate file or directory in your Web site to which you want to add the header, right-click the file, and then click Properties.
3. Click the HTTP Headers tab.
4. In the Custom HTTP Headers group box, click Add.
5. Type P3P for the header name, and then for the compact policy string, type CP=..., where "..." is the appropriate code for your compact policy.

http://support.microsoft.com/default.aspx?scid=kb;en-us;323752