How to solve session coverage based on multi-threaded browsers

Application scenarios:

1. Use session for verification.

2. in IE 7, Firefox, and other multi-thread-based browsers, there are dual-purpose users a and B. After logon authentication, a will log on with B when opening another tab, if session is used. session of B when ID is used as the unique authentication key. ID will overwrite a, resulting in loss of user information of.

Solution:

The User ID + session. ID is used as the compound key, and parameters are transmitted using URL.

 

Is there a better solution?