[jboss-user] [Tomcat, HTTPD, Servlets & JSP] - Re: Is it possible to create a new Session ID using session.

You can't create a new SessionID when you have received a SessionID in the request. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4101252#4101252 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4101252 __

[jboss-user] [Tomcat, HTTPD, Servlets & JSP] - Re: Is it possible to create a new Session ID using session.

Thank you for reply. I could understand it is impossible to create a new SessionID under JBoss. Are there any recommendation way to prevent Session Fixation Attack under JBoss? If there are any recommendation way, could you please teach it to me ? Thank you. View the original post : http://