[OT] Re: Handling Session Objects

2007-08-08 Thread Dave Newton
--- Sawan <[EMAIL PROTECTED]> wrote: > But still I am seeing ";jsessionid=XXX" in the url. > > Please suggest me for any possibility for this. - On the first request the server has no way of knowing if you have cookies enabled. - Server configuration doesn't know if your browser has cookies ena

Re: Handling Session Objects

2007-08-07 Thread Sawan
Thanks a lot Dave for the detail explanation. I have checked the META-INF/context.xml of my web application for cookies and found that it does not have cookies attribute. It means I have cookie enabled session. http://jf.omnis.ch/log/archives/2004/12/disabling-session-cookie-in-tomcat.html

Re: Handling Session Objects

2007-08-07 Thread Dave Newton
--- Sawan <[EMAIL PROTECTED]> wrote: >> Don't type it in / paste it when you test on the >> other machine. > Can you please explain me in detail. That what is > "\", What I don't type in "\", etc. ... "\", which I assume is a misspelling of "/" (the character I used) is used to separate two words

Re: Handling Session Objects

2007-08-07 Thread Sawan
>Don't type it in / paste it when you test on the other >machine. Can you please explain me in detail. That what is "\", What I don't type in "\", etc. Thanks and regards Sawan newton.dave wrote: > > --- Sawan <[EMAIL PROTECTED]> wrote: >> If the problem is due to addition of jsessionid then

Re: Handling Session Objects

2007-08-07 Thread Dave Newton
--- Sawan <[EMAIL PROTECTED]> wrote: > If the problem is due to addition of jsessionid then > I really wants to remove it from my url. Don't type it in / paste it when you test on the other machine. d.

Re: Handling Session Objects

2007-08-06 Thread Sawan
Hi Laurie, Yes, my url includes session id, as suggested by Dale. But I am not adding it manually and also don't know from where it is coming. If the problem is only due to addition of session id with the url, then please suggest me to remove it from the URL. Thanks & Regards Sawan Laurie Harp

Re: Handling Session Objects

2007-08-06 Thread Sawan
Hi Dale, Yes, my url includes ";jsessionid=...", but I am not adding it in my program manually and don't know from where it is coming..? If the problem is due to addition of ";jsessionid=..." then I really wants to remove it from my url. Please suggest me any solution to remove ";jsessionid=..."

Re: Handling Session Objects

2007-08-06 Thread Laurie Harper
Well, I can think of at least two possibilities: 1) the URL you're copying includes a session ID, as suggested by Dale 2) the URL you're copying includes request parameters for user name and password What is the exact URL you're copying? What do the relevant action mappings, JSPs and Java cl

Re: Handling Session Objects

2007-08-06 Thread Dale Newfield
Sawan wrote: Now if anyone copy and paste the url on another machine's browser, then How can he/she will get the user name and password there..? If that url includes ";jsessionid=..." then sure, they've just had their session hijacked, including all the information you put in that session. -

Re: Handling Session Objects

2007-08-05 Thread Sawan
Thanks buddy for your reply, Very firstly I am sorry for provide the confusing code here. I am not putting the same data into each session and I am sure that I am getting the same instance of that data , not just separate copies of the same data. Actually I have a Login.jsp page and on click S

Re: Handling Session Objects

2007-08-03 Thread Laurie Harper
Firstly, you're unconditionally putting the same data into each session, so are you sure you're getting the same *instance* of that data, not just separate copies of the same data? Actions should be instantiated for each request, so if your code is as simple as you've presented and you really