another session problem

Expand Post »

I'm having a session problem with jsf. I've googled abut sessions and none of the results answer this question: what happens when a user logs in, copies the link, logs out and pastes the link in the browser? They say that I should validate the user when the page loads and make two forwards: one towards an error page and one towards a success page. But what if the user copies the success page's link? When or where is it's validation? And how can I solve all that without using scriptlets in my jsp pages?

Similar Threads

Session problem in asp in ASP
Session problem in PHP
timeout session problem in JSP
PHP Session Problem in PHP
PHP sessions/$_POST problem. Too Stressed today! in PHP

claudiu_is

Reputation Points: 10

Solved Threads: 1

Light Poster

Offline

40 posts
since Jul 2007

Permalink

Dec 12th, 2007

Re: another session problem

You should be using forward, and not redirect. The user should only ever see the url he originally clicked on then. Also, use filters to perform the authentications, not the JSP itself.

masijade

Moderator

Reputation Points: 1471

Solved Threads: 490

Industrious Poster

Offline

4,043 posts
since Feb 2006

Permalink

Dec 12th, 2007

Re: another session problem

I did say fwd, not redirect

I can't seem to find a complete example of a session based application which states all the steps in order, from the beginning to the end, which part goes where and why.
If anyone knows any, please let me know or if anyone would create one for me here, lots of thanks. It should be for a beginner and it shouldn't assume I can guess large chunks of code in the place of an important operation

claudiu_is

Reputation Points: 10

Solved Threads: 1

Light Poster

Offline

40 posts
since Jul 2007

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.

Previous Thread in JSP Forum Timeline: logout problem

Next Thread in JSP Forum Timeline: JSP sessions in javascript

DaniWeb Message

Cancel Changes

User Name
Password