Destroying Session

[shahab]

I have a session how can I destroy it:
Session["username"] = TextBox1.Text.ToString();


if (isUserValid(TextBox1.Text.ToString(),TextBox2.Text.ToString()))
{
TextBox1.Text="";
Response.Redirect("AdminUsers/Main.aspx");

}
else
{
Session.Remove("username");
//Session.Abandon();
What is the differene between clear-Abandon-...?

 

[kahlua001]

Session.Remove removes the item from the particular user's session, session.abandon terminates the session for the user, so anypage requested after will generate a new session id for the user.

 

[shahab]

is there a posibility to overwrite a session (By hackers)?
would u please introduce an artice about session Sec?
tnx