-----Original Message----- From: Brown, James [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 09, 2005 4:30 PM To: user@struts.apache.org Subject: session race / transfer issue
We have encountered a problem in which it appears (from user's description, transaction records, web application logs, and web server access logs), that user sessions are being transferred from one user to another. <--- snipped ---> We have inspected our web application code (all jsp, javascript, and java) and to our knowledge we are handling session creation, invalidation and access properly. In addition, we are using the html taglib and/or explicit encodeURL calls to insure URL rewriting is being enforced. <--- snipped ---> -- James the last time we have encountered such a problem it turned out to be something homemade within the application. The had stored that kind of data in a Action-instance variable. hop you find that bugger. Good luck Alexander --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]