Re: SessionState vs. request state.

2005-04-15 Thread Craig McClanahan
On 4/15/05, Michael J. <[EMAIL PROTECTED]> wrote: > I prefer to store everything on the server. It gives better control > over data and application state. > > > Brian > > > > I vote for storing information in session variables for > > the simple reason most Admins do not allow Browsers > > writing

RE: SessionState vs. request state.

2005-04-15 Thread Michael J.
I prefer to store everything on the server. It gives better control over data and application state. > Brian > > I vote for storing information in session variables for > the simple reason most Admins do not allow Browsers > writing cookies on the hard drive for fear of introducing > viruses to

Re: SessionState vs. request state.

2005-02-10 Thread Ingo Adler
Authentication information (user is logged in) must be stored on the server side (session or database). It should not be given to the client, because the client could manipulate it (setting isLoggedIn to true). If you store it in the database you should use a non guessable random number as a ke

Re: SessionState vs. request state.

2005-02-10 Thread brenmcguire
For storing user info, using sessions is the best way. Think about not using sessions: you should someway propagate an "ID" of the user between requests. Luckily, J2EE applications store a session ID as a cookie or (if cookies are not enabled) propagates it in URLs. But be cautious using session, d

RE: SessionState vs. request state.

2005-02-09 Thread Martin Gainty
eply-To: "Struts Users Mailing List" To: "Struts Users Mailing List" Subject: SessionState vs. request state. Date: Wed, 9 Feb 2005 17:47:19 -0500 MIME-Version: 1.0 Received: from mail.apache.org ([209.237.227.199]) by MC6-F17.hotmail.com with Microsoft SMTPSVC(6.0.3790.

Re: SessionState vs. request state.

2005-02-09 Thread Eric Lemle
Use the >> [EMAIL PROTECTED] 2/9/2005 3:47:19 PM >>> Hi, I'm planning my approach to a data driven app that I have to write in the near future. I've used struts before in more of a demo-type, proof of concept scenarios, and am no where near and expert, but now need to build a production level s

SessionState vs. request state.

2005-02-09 Thread Brian McGovern
Hi, I'm planning my approach to a data driven app that I have to write in the near future. I've used struts before in more of a demo-type, proof of concept scenarios, and am no where near and expert, but now need to build a production level system. For a web app that needed to display a usern