In a web application I created shared array where the various sessions can read and write data.
Should I treat sessions as separate threads and then use systems such as semaphore to access the array?
Session events already run in threads, so yes, you should protect your resources.