title: Which one is better, InProc or SQL Server, for Session State mode in asp.net?
body: <p>I am developing an ASP.NET website. I want to know which one is better in session state mode: InProc or SQL Server? I need to hear about your experiences on this issue.</p>
  
  <p>Another question is about cookieless attribute. Is there any security hole in my site if I set it to true? In all the samples I saw in MSDN site, this attribute was set to false.</p>
  
  <p>And the last question is about Timeout attribute. Does this attribute effect my sessions lifetime when I set it to InProc mode?</p>