I don't think requiring cookies is a bad idea.
I think every normal user would have cookies enabled.


On Wed, Jun 4, 2014 at 4:59 PM, George Christman <gchrist...@cardaddy.com>
wrote:

> I'm already using tomcat7. Do you think requiring all users to have cookies
> enabled is a bad idea?
>
>
> On Wed, Jun 4, 2014 at 8:32 AM, Dmitry Gusev <dmitry.gu...@gmail.com>
> wrote:
>
> > I don't think you should migrate your app server to do this, your current
> > server probably supports this feature too!
> > What is it btw?
> >
> > There will be side-effects: users without cookies won't be able to use
> > sessions in your app.
> >
> >
> > On Wed, Jun 4, 2014 at 4:28 PM, George Christman <
> gchrist...@cardaddy.com>
> > wrote:
> >
> > > Thanks Dmitry, so if I understand this correctly, I should be able to
> > just
> > > do the following and it should address the issue without side effects?
> > >
> > > 3. Switch to Tomcat 7 !
> > >
> > > The Servlet 3.0 standard gives you two ways to disable URL session
> > > rewriting. This works in Tomcat 7, Glassfish v3, and any other Servlet
> > > 3.0-compliant servlet container. First, you can add this to your
> web.xml
> > > webapp config:
> > >
> > > <session-config>
> > >      <tracking-mode>COOKIE</tracking-mode>
> > > </session-config>
> > >
> > >
> > > On Wed, Jun 4, 2014 at 6:58 AM, Dmitry Gusev <dmitry.gu...@gmail.com>
> > > wrote:
> > >
> > > > Hi George,
> > > >
> > > > The ID appears in URLs if your app creates session for current user &
> > > this
> > > > user has cookies disabled.
> > > >
> > > > You can either not create a session for guests, or disable session ID
> > in
> > > > URLs in servlet container level,
> > > > here's an example for tomcat:
> > > > https://fralef.me/tomcat-disable-jsessionid-in-url.html
> > > >
> > > >
> > > >
> > > > On Wed, Jun 4, 2014 at 10:48 AM, George Christman <
> > > gchrist...@cardaddy.com
> > > > >
> > > > wrote:
> > > >
> > > > > Hi guys, I'm noticing Google is indexing a lot of pages with the
> > > session
> > > > id
> > > > > appended to the URL, how do I prevent this? Please see link below
> for
> > > > > example.
> > > > >
> > > > >
> > > > >
> > > >
> > >
> >
> https://www.google.com/search?q=site:cardaddy.com&client=firefox-a&hs=qLR&rls=org.mozilla:en-US:official&channel=sb&ei=d8COU_CRDJSmsQT_lIDoDQ&start=80&sa=N&biw=1280&bih=1199
> > > > >
> > > > > --
> > > > > George Christman
> > > > > www.CarDaddy.com
> > > > > P.O. Box 735
> > > > > Johnstown, New York
> > > > >
> > > >
> > > >
> > > >
> > > > --
> > > > Dmitry Gusev
> > > >
> > > > AnjLab Team
> > > > http://anjlab.com
> > > >
> > >
> > >
> > >
> > > --
> > > George Christman
> > > www.CarDaddy.com
> > > P.O. Box 735
> > > Johnstown, New York
> > >
> >
> >
> >
> > --
> > Dmitry Gusev
> >
> > AnjLab Team
> > http://anjlab.com
> >
>
>
>
> --
> George Christman
> www.CarDaddy.com
> P.O. Box 735
> Johnstown, New York
>



-- 
Dmitry Gusev

AnjLab Team
http://anjlab.com

Reply via email to