Jens,
Http sessions are always tricky to manage because the http protocol is
"session-less" in nature. That means every time the user makes a request
using a web browser, a new TCP connection is created and then dropped.
Servlet containers offer session management like most application servers,
but in fact is a very thin layer over the bare hhtp protocol. Usually they
give a cookie to the client browser and use it to track its further
requests.
Obviously this method never can be called robust. The cookie is "owned" by
the client, and you can't change it if the user does not make a new request.
You also should mantain a time table to expire the cookies and avoid
"ethernal" sessions. All these tasks are handled by your servlet container,
and they will not work without careful set-up in server load-balancing
environments.
The simplest and safest way to avoid this problems: drop the cookie crap and
the standard session handling. Start using keys in the URLs and keep the
session context in your database. A well designed session manager will be
able to handle properly the context data for your application and also make
it more portable. An "extra" benefit is to keep away from application
server-specific features so your code is [more] portable.
Saran
----- Original Message -----
From: "Jens-Uwe Eilers" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, July 26, 2000 11:02 AM
Subject: Session without cookies
> Hello,
>
> I need to realize JSP-Sites with Sessions. But when the Client has
> deactivate Cookies I get a new Session on every Site. If the client has
> deactivated Cookies how can I realize this? Or can I realize the Session
> without Cookies.
> Sorry my English is not the best.
> Jens-Uwe
>
>
===========================================================================
> To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff
JSP-INTEREST".
> Some relevant FAQs on JSP/Servlets can be found at:
>
> http://java.sun.com/products/jsp/faq.html
> http://www.esperanto.org.nz/jsp/jspfaq.html
> http://www.jguru.com/jguru/faq/faqpage.jsp?name=JSP
> http://www.jguru.com/jguru/faq/faqpage.jsp?name=Servlets
===========================================================================
To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST".
Some relevant FAQs on JSP/Servlets can be found at:
http://java.sun.com/products/jsp/faq.html
http://www.esperanto.org.nz/jsp/jspfaq.html
http://www.jguru.com/jguru/faq/faqpage.jsp?name=JSP
http://www.jguru.com/jguru/faq/faqpage.jsp?name=Servlets
