session management

[gandhi.pathik]

Hi friends

can anyone give me idea regarding how to manage session from user's
login to signout.

also how to handle security issues.

My project is based on java, servlet , jsp and jdbc.

with thanks
pathik s gandhi

 

[Sanjay]

Hi friends

can anyone give me idea regarding how to manage session from user's
login to signout.

Use HttpSession or you can also maintain your own session abstraction
through a session cookie.

Let me assume you are using Servlet

then you can write something like this

public void doGet(HttpServletRequest request, HttpServletResponse
response)
{
HttpSession session = request.getSession(true);
...
//Manage your user identity
}

or

public void doGet(...)
{
Cookie[] cookieList = request.getCookie();
...//search for your cookie
if ("MY_COOKIE_NAME".equals(cookieList[index])
{
//my session is present, now validate to check if this is not
timed out.
}
}

also how to handle security issues.

I am not sure what kind of security you are looking at, by my idea is
to use HTTP S protocol.

My project is based on java, servlet , jsp and jdbc.

with thanks
pathik s gandhi

Sanjay

 

[Sanjay]

Hi friends

can anyone give me idea regarding how to manage session from user's
login to signout.

Use HttpSession or you can also maintain your own session abstraction
through a session cookie.

Let me assume you are using Servlet

then you can write something like this

public void doGet(HttpServletRequest request, HttpServletResponse
response)
{
HttpSession session = request.getSession(true);
...
//Manage your user identity
}

or

public void doGet(...)
{
Cookie[] cookieList = request.getCookie();
...//search for your cookie
if ("MY_COOKIE_NAME".equals(cookieList[index])

this should have been
"MY_COOKIE_NAME".equals(cookieList[index].getName())

 

[gandhi.pathik]

thanks for tips

Regards,
pathik

 

[Roedy Green]

can anyone give me idea regarding how to manage session from user's
login to signout.

also how to handle security issues.

My project is based on java, servlet , jsp and jdbc.

I am digging into that myself. I have documented what I have found so
far at http://mindprod.com/jgloss/passwords.html
and http://mindprod.com/jgloss/authentication.html