-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Al,

Fogleson, Allen wrote:
> -----Original Message-----
> From: Christopher Schultz [mailto:[EMAIL PROTECTED] 
> Sent: Thursday, June 28, 2007 10:48 AM
> To: Struts Users Mailing List
> Subject: Re: Is there any way to avoid session being created
> 
> 
> Fogleson, Allen wrote:
>> I assume you are using JSP? If so... well no there is not. JSP by 
>> default has a contract that a session is always available to it.
> 
>> Boy, is that statement false:
> 
>> <@page session="false" @>
> 
> Uhmmm I said "BY DEFAULT" Unless I am mistaken the default is
> "session='true'"

Sure, but you left out the all-important statement that this behavior
can be turned off. "There is no possible way to do what you are asking."
(oh, except that there is). :(

> IMHO not really the use for a session listener, but if you wanted to
> "debug" your code it is a use.

Well, if you're desperate to find out where sessions are being created,
it's much faster than a review of all the code on which you rely. Your
suggestion was to fix the symptom. Mine was to find the problem.

> But now you need an extensive regression
> suite to hit all your code. Not sure which effort is greater there. :)

Not necessarily. Just run your application (heck, in production, if you
want) and take note of any time a session is created that you didn't
expect. The regression is completely optional. If the application is
already in production, you have nothing to lose (the app can't get any
worse). If this issue is a blocker for release, then you'll have to
regression test anyway.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGg96g9CaO5/Lv0PARAsJjAKDAjv7RKgGva0MFaBr0XDTqAOPQtwCgo+3A
5mZwhCfcZm2EqEebu7CaiXs=
=gs1J
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to