-----Original Message-----
From: Brown, James [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, February 09, 2005 4:30 PM
To: user@struts.apache.org
Subject: session race / transfer issue

We have encountered a problem in which it appears (from user's
description, transaction records, web application logs, and web server
access logs), that user sessions are being transferred from one user to
another.
 
<--- snipped --->
 
We have inspected our web application code (all jsp, javascript, and
java) and to our knowledge we are handling session creation,
invalidation and access properly.  In addition, we are using the html
taglib and/or explicit encodeURL calls to insure URL rewriting is being
enforced.
 
<--- snipped --->



-- James 

the last time we have encountered such a problem it turned out to be something 
homemade within the application. The had stored that kind of data in a 
Action-instance variable.

hop you find that bugger. Good luck
Alexander

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to