session serialization issue? 2006-11-20 - By John Wallace
Back
I am working on my first Tomcat based application and while testing the
application my boss entered some data into some fields. While he was
doing that, I was doing the same thing - entering data into the very
same fields in a different session. Unfortunately my values stored in
session attributes got mixed in with his values in his session
attributes . I don't see how it could have happened. My data should
have been stored in a completely different session and should not have
been visible to his session.
So I came across a bug posting here:
Bugzilla Bug 40114, Session inadvertently "hijacked" by different after
server restart http://issues.apache.org/bugzilla/show_bug.cgi?id=40114
Session serialization in context.xml was commented by default, so
serialization was turned on. User A in the middle of a session when we
restart Tomcat. Upon logging back into the system, she picked up User
B's session information (name, id, etc.)
Tomcat 5.5, JVM 1.5_7
Is this the same issue as described above? What is the best way fix my
problem?
I am using Tomcat 5.5.20 on Suse Linux 10.1 - JVM 1.5.0_09
Thanks,
--
John Wallace | Java / Web Developer
john@(protected) http://firesign.net
-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ------
To start a new topic, e-mail: users@(protected)
To unsubscribe, e-mail: users-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)
|
|
