>> I think untill you call the method getSession() you do not
>> create a session.
>> So just do not call this method.

>Looks like this isn't true.  We don't call getSession
>anywere in our code and still the cookie appears every
>time the application is used.

You do call it - if you use JSP and you don't explicitly turn off
session creation on the JSP page then the page will automatically call
this method for you.

Sorry - there's nothing you can do about it except turning it off on
every JSP page.

Well - there is one thing: have all your requests go to a servlet and
have the servlet include() the JSP pages - since include()d pages
cannot alter headers your page should not be able to create the
cookie.

I've never tried that - but it should work.


Nic

___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

Reply via email to