Re: Prevent session id from appearing in URL while being indexed by google

2014-06-04 Thread George Christman
Thanks Thiago, looks as if I had SessionState being used in the layout. On Wed, Jun 4, 2014 at 11:46 AM, Thiago H de Paula Figueiredo < thiag...@gmail.com> wrote: > On Wed, 04 Jun 2014 12:11:00 -0300, George Christman < > gchrist...@cardaddy.com> wrote: > > Hi Thiago, I just disabled coolkies w

Re: Prevent session id from appearing in URL while being indexed by google

2014-06-04 Thread Thiago H de Paula Figueiredo
On Wed, 04 Jun 2014 12:11:00 -0300, George Christman wrote: Hi Thiago, I just disabled coolkies within my browser and I'm finding every link is being generated with a session id despite not needing to be logged in. What would cause this? Any page with @Persist or @SessionState being visi

Re: Prevent session id from appearing in URL while being indexed by google

2014-06-04 Thread Dmitry Gusev
George, you can try debugging this by implementing http://docs.oracle.com/javaee/6/api/javax/servlet/http/HttpSessionListener.html Put a breakpoint in sessionCreated and inspect the stack trace. Maybe this will help. On Wed, Jun 4, 2014 at 7:11 PM, George Christman wrote: > Hi Thiago, I just

Re: Prevent session id from appearing in URL while being indexed by google

2014-06-04 Thread George Christman
Hi Thiago, I just disabled coolkies within my browser and I'm finding every link is being generated with a session id despite not needing to be logged in. What would cause this? I'm not sure if this would effect things, but I'm using remember me with tapestry-security, however I'm not logged in to

Re: Prevent session id from appearing in URL while being indexed by google

2014-06-04 Thread Thiago H de Paula Figueiredo
On Wed, 04 Jun 2014 10:16:24 -0300, Dmitry Gusev wrote: I don't think requiring cookies is a bad idea. I think every normal user would have cookies enabled. Some proxies mess up with cookies, causing them to not work. At my work I've got lots of client complaints because of that. I thin

Re: Prevent session id from appearing in URL while being indexed by google

2014-06-04 Thread George Christman
Thanks Dmitry. I'll move forward with that solution. On Wed, Jun 4, 2014 at 9:16 AM, Dmitry Gusev wrote: > I don't think requiring cookies is a bad idea. > I think every normal user would have cookies enabled. > > > On Wed, Jun 4, 2014 at 4:59 PM, George Christman > wrote: > > > I'm already us

Re: Prevent session id from appearing in URL while being indexed by google

2014-06-04 Thread Dmitry Gusev
I don't think requiring cookies is a bad idea. I think every normal user would have cookies enabled. On Wed, Jun 4, 2014 at 4:59 PM, George Christman wrote: > I'm already using tomcat7. Do you think requiring all users to have cookies > enabled is a bad idea? > > > On Wed, Jun 4, 2014 at 8:32 A

Re: Prevent session id from appearing in URL while being indexed by google

2014-06-04 Thread George Christman
I'm already using tomcat7. Do you think requiring all users to have cookies enabled is a bad idea? On Wed, Jun 4, 2014 at 8:32 AM, Dmitry Gusev wrote: > I don't think you should migrate your app server to do this, your current > server probably supports this feature too! > What is it btw? > > T

Re: Prevent session id from appearing in URL while being indexed by google

2014-06-04 Thread Dmitry Gusev
I don't think you should migrate your app server to do this, your current server probably supports this feature too! What is it btw? There will be side-effects: users without cookies won't be able to use sessions in your app. On Wed, Jun 4, 2014 at 4:28 PM, George Christman wrote: > Thanks Dmi

Re: Prevent session id from appearing in URL while being indexed by google

2014-06-04 Thread George Christman
Thanks Dmitry, so if I understand this correctly, I should be able to just do the following and it should address the issue without side effects? 3. Switch to Tomcat 7 ! The Servlet 3.0 standard gives you two ways to disable URL session rewriting. This works in Tomcat 7, Glassfish v3, and any oth

Re: Prevent session id from appearing in URL while being indexed by google

2014-06-04 Thread Dmitry Gusev
Hi George, The ID appears in URLs if your app creates session for current user & this user has cookies disabled. You can either not create a session for guests, or disable session ID in URLs in servlet container level, here's an example for tomcat: https://fralef.me/tomcat-disable-jsessionid-in-u

Prevent session id from appearing in URL while being indexed by google

2014-06-03 Thread George Christman
Hi guys, I'm noticing Google is indexing a lot of pages with the session id appended to the URL, how do I prevent this? Please see link below for example. https://www.google.com/search?q=site:cardaddy.com&client=firefox-a&hs=qLR&rls=org.mozilla:en-US:official&channel=sb&ei=d8COU_CRDJSmsQT_lIDoDQ&s