 | Mailing List | | Home | | Forum Home | | JBoss - Java Application Server | | Struts - A MVC web framework | | Tomcat - JSP/Servlet container | | iText - An open source PDF Java Library | | JDOM - JDOM XML Parser | | J2EE - A mailing list for Java(tm) 2 Platform, Enterprise Edition | | J2EE Pattern - An interest list for Sun Java Center J2EE Pattern Catalog | | Servlet - A mailing list for discussion about Sun Microsystem's Java Servlet API Technology | | JSP - A mailing list about Java Server Pages specification and reference | |
Struts & Hibernate
|
|
|
| | | Servlet : Session.invalidate | Servlet : Session.invalidate 2003-09-12 - By Dhanasekaran Voimuni
Back
Hi All,
Is it a good practice/idea to call session.invalidate
in the Login Servlet / Login Action class.(if we use struts framework)
Below is the piece of code :
// Get the existing session.
HttpSession session = request.getSession(false);
// Invalidate the existing session.
// Note :
// We may need to invalidate the existing session to ensure that all previous
session data(s) for the user is removed from the context.
// Example : When user login to the application after Session Times out,we may
not
need his previous session data and we need to create a new session for the user
.
if(session!=null) {
session.invalidate();
}
// Create a new session for the user.
session = request.getSession(true);
Thanks in advance.
Dhanasekaran
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"><HTML><HEAD><META
HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8 (See http://utf-8.ora-code.com)"></HEAD><BODY><DIV>
<DIV class=thread-content><FONT size=2>Hi All,</FONT><BR> <BR>Is it a good
practice/idea to call session.invalidate <BR>in the Login Servlet / Login
Action
class.(if we use struts framework)<BR><BR>Below is the piece of code :
<BR><BR>// Get the existing session. <BR>HttpSession session =
request.getSession(false); <BR><BR>// Invalidate the existing session.
<BR><BR>// Note : <BR>// We may need to invalidate the existing session to
ensure that all previous session data(s) for the user is removed from the
context. <BR><BR>// Example : When user login to the application after Session
Times out,we may not <BR>need his previous session data and we need to create a
new session for the user. <BR><BR>if(session!=null) { <BR>session.invalidate();
<BR>} <BR>// Create a new session for the user. <BR>session =
request.getSession(true); <BR><BR>Thanks in advance.
<BR>Dhanasekaran</DIV></DIV></BODY></HTML>
|
|
|