----------------------------------------------------------------
BEFORE YOU POST, search the faq at <http://java.apache.org/faq/>
WHEN YOU POST, include all relevant version numbers, log files,
and configuration files.  Don't make us guess your problem!!!
----------------------------------------------------------------

i'm using the jsdk-build-in session tracking api and have a problem using 
URL-rewriting with POST-requests.
when i pass the session-id of a valid session like this:

<form action="/path_to_my_servlet" method=post">
        <input type="hidden" name="JServSessionIdmyZone" value="123xyz"
        ... other parameters  ...
        <input type="submit" name="submit">
</form>

jserv won't recognise it and invokes a news session.

everything works fine with cookies, with GET and even with a strange 
combination of GET and POST:

<form action="/path_to_my_servlet?JServSessionIdmyZone=123xyz" method=post">
        ... other parameters  ...
        <input type="submit" name="submit">
</form>

the problem occurs when i disable cookies at the server side and also if 
it's only the client who recjects cookies.
it's not a problem of passing the session-id as a hidden parameter. i can 
read out the (then old) session-id with getParameter() without any problem.

so it seems that jserv's implementation of the session tracking api 
recognises session-ids in the header (cookies) and in the URL (GET) but not 
in the body of a request (POST).

i tried this with jserv 1.1 / sun jdk 1.2 / mandrake 7 and also with jserv 
1.1 / blackdown jdk 1.7 on a SuSE. i had no problem when  testing the same 
servlets with jrun (on linux and on nt). (well i had problems, but others ;-)

the reason for doing URL-rewriting in combination with POST is that i want 
to hide the use of session-tracking from the usual user as far as possible.

markus kemmerling


--
--------------------------------------------------------------
Please read the FAQ! <http://java.apache.org/faq/>
To subscribe:        [EMAIL PROTECTED]
To unsubscribe:      [EMAIL PROTECTED]
Archives and Other:  <http://java.apache.org/main/mail.html>
Problems?:           [EMAIL PROTECTED]

Reply via email to