I have tried to implement the HttpSessionListerner solution. I have a slight problem. In the HttpSessionListener.destroy method I need to get a session scoped "user" state object.
This "user" state object is then removed from the list of currently logged users. It works fine except I get an IllegalStateException warning. I guess that's because when reaching the destroy method, the session has already been invalidated. How to avoid this warning ? --------------------------------- New Yahoo! Messenger with Voice. Call regular phones from your PC and save big.