Re: Re: urlencoded session html-redirection-bug

[Giorgio Ponza]

So, try this way:



with the single ' after = and before closing " and the ? before the
jsessionid
i tried with some url and works, hope also for you
Regards
Giorgio

- Original Message -
From: "Michael" <[EMAIL PROTECTED]>
To: "Giorgio Ponza" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Wednesday, April 10, 2002 9:55 AM
Subject: Re : Re: urlencoded session html-redirection-bug


> >When you encode the url, the first time the jsessionid is attached to the
> >URL,
> >but if your browser have cookies enabled, a cookie is assigned and the
> >jsessionid parameter
> >is not shown anymore.
>
> thanks for your comment - but this isn't the problem!
> to handle the first-time URLencode after session-creation, I redirect
(302) to the same URL with a QueryStringParameter "FirstAccessSession" - in
this request I now see, if the Session is obtained by cookie or by URL! I do
another redirect to the (now correctly) urlencoded URL (of course without
the "FirstAccessSession"-Parameter). This URL now has the sessionid encoded
in its URL only, if the browser doesn't support cookies!
>
> My problem:
> I have a browser with cookies disabled - a html-redirect like
> 
> is misunderstood by many browsers (NS 4.x, IE5.x, IE6 ...) because of the
second ";" before jsessionid!
> the "signature" of the html-redirect-"function" is (int
delayInSeconds;String redirectURL) separated by a ";"!
> The second ";" makes the browsers believe: here the URLString ends - but
this isn't correct! The browser is redirected to the URL without encoded
sessionid - and so looses its session!!!
>
> so how to make a HTML-redirect with URL-encoded sessionid?
>
> thanks
> michi
>
>
> >
> >- Original Message -
> >From: "Michael" <[EMAIL PROTECTED]>
> >To: <[EMAIL PROTECTED]>
> >Sent: Tuesday, April 09, 2002 7:52 PM
> >Subject: urlencoded session html-redirection-bug
> >
> >> Hallo!
> >>
> >> please help!!!
> >>
> >> when I encode an URL and do something like:
> >>
> >> 
> >>
> >> neither Netscape 4.xx nor InternetExplorer 5.5 handle the ";jsessionid"
> >
> >correct.
> >
> >> they redirect to the URL "/myURL" WITHOUT the ";jsessionid"
> >>
> >> Netscape 6.2 and Opera 6.1 handle this redirection as expected and
concat
> >
> >the ";jsessionid=..." to the URL!
> >
> >> any idea???
> >> I need this feature for NS4 and IE5.5 !!!
> >>
> >> thanks
> >> michi
> >
>
>---
-
> >
> >
> >> --
> >> To unsubscribe:   <mailto:[EMAIL PROTECTED]>
> >> For additional commands: <mailto:[EMAIL PROTECTED]>
> >> Troubles with the list: <mailto:[EMAIL PROTECTED]>
> >
> >--
> >To unsubscribe:   <mailto:[EMAIL PROTECTED]>
> >For additional commands: <mailto:[EMAIL PROTECTED]>
> >Troubles with the list: <mailto:[EMAIL PROTECTED]>
> >






> --
> To unsubscribe:   <mailto:[EMAIL PROTECTED]>
> For additional commands: <mailto:[EMAIL PROTECTED]>
> Troubles with the list: <mailto:[EMAIL PROTECTED]>


--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

Re: AW: Re : Re: urlencoded session html-redirection-bug

[Michael]

Am Mittwoch, 10. April 2002 10:29 schrieben Sie:
> Are there special reasons why you redirect in the html and not
> with response.sendRedirect ?

yes - a response.sendRedirect won't be recognized by the user! I want the 
user to see, that something happened - and after a few seconds he is going to 
be redirected!

> I don't think that there is an easy way to get the meta tag
> working. (Something like writing a filter or using mod_rewrite
> to rewrites /myURL?jsessionid=og9obimzx2 and using a selfmade
> encodeUrl())

mod_rewrite is a good idea!

meanwhile I do the meta-tag-redirect not to 
'response.encodeURL(request.getRequestedURI())'
but to
'request.getRequestedURI() + "?redirectTo=" + 
java.net.URLEncoder.encode(response.encodeURL(request.getRequestURI())'

if I get a parameter named "redirectTo" in my servlet, I do a 
'response.sendRedirect(request.getParameter("redirectTo"))'

thanks
michi


>
> 
>
> > 
> > is misunderstood by many browsers (NS 4.x, IE5.x, IE6 ...)
> > because of the second ";" before jsessionid!
> > the "signature" of the html-redirect-"function" is (int
> > delayInSeconds;String redirectURL) separated by a ";"!
> > The second ";" makes the browsers believe: here the URLString
> > ends - but this isn't correct! The browser is redirected to
> > the URL without encoded sessionid - and so looses its session!!!
>
> 

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

AW: Re : Re: urlencoded session html-redirection-bug

[Ralph Einfeldt]

Are there special reasons why you redirect in the html and not 
with response.sendRedirect ?

I don't think that there is an easy way to get the meta tag
working. (Something like writing a filter or using mod_rewrite 
to rewrites /myURL?jsessionid=og9obimzx2 and using a selfmade 
encodeUrl())

> -Ursprüngliche Nachricht-
> Von: Michael [mailto:[EMAIL PROTECTED]]
> Gesendet: Mittwoch, 10. April 2002 09:55
> An: Giorgio Ponza
> Cc: [EMAIL PROTECTED]
> Betreff: Re : Re: urlencoded session html-redirection-bug

 
> 
> is misunderstood by many browsers (NS 4.x, IE5.x, IE6 ...) 
> because of the second ";" before jsessionid!
> the "signature" of the html-redirect-"function" is (int 
> delayInSeconds;String redirectURL) separated by a ";"!
> The second ";" makes the browsers believe: here the URLString 
> ends - but this isn't correct! The browser is redirected to 
> the URL without encoded sessionid - and so looses its session!!!
 

--
To unsubscribe:   <mailto:[EMAIL PROTECTED]>
For additional commands: <mailto:[EMAIL PROTECTED]>
Troubles with the list: <mailto:[EMAIL PROTECTED]>

Re : Re: urlencoded session html-redirection-bug

[Michael]

>When you encode the url, the first time the jsessionid is attached to the
>URL,
>but if your browser have cookies enabled, a cookie is assigned and the
>jsessionid parameter
>is not shown anymore.
 
thanks for your comment - but this isn't the problem!
to handle the first-time URLencode after session-creation, I redirect (302) to the 
same URL with a QueryStringParameter "FirstAccessSession" - in this request I now see, 
if the Session is obtained by cookie or by URL! I do another redirect to the (now 
correctly) urlencoded URL (of course without the "FirstAccessSession"-Parameter). This 
URL now has the sessionid encoded in its URL only, if the browser doesn't support 
cookies!
 
My problem:
I have a browser with cookies disabled - a html-redirect like

is misunderstood by many browsers (NS 4.x, IE5.x, IE6 ...) because of the second ";" 
before jsessionid!
the "signature" of the html-redirect-"function" is (int delayInSeconds;String 
redirectURL) separated by a ";"!
The second ";" makes the browsers believe: here the URLString ends - but this isn't 
correct! The browser is redirected to the URL without encoded sessionid - and so 
looses its session!!!
 
so how to make a HTML-redirect with URL-encoded sessionid?
 
thanks
michi
 
 
>
>- Original Message -
>From: "Michael" <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Sent: Tuesday, April 09, 2002 7:52 PM
>Subject: urlencoded session html-redirection-bug
>
>> Hallo!
>>
>> please help!!!
>>
>> when I encode an URL and do something like:
>>
>> 
>>
>> neither Netscape 4.xx nor InternetExplorer 5.5 handle the ";jsessionid"
>
>correct.
>
>> they redirect to the URL "/myURL" WITHOUT the ";jsessionid"
>>
>> Netscape 6.2 and Opera 6.1 handle this redirection as expected and concat
>
>the ";jsessionid=..." to the URL!
>
>> any idea???
>> I need this feature for NS4 and IE5.5 !!!
>>
>> thanks
>> michi
>
>
>
>
>> --
>> To unsubscribe:   
>> For additional commands: 
>> Troubles with the list: 
>
>--
>To unsubscribe:   
>For additional commands: 
>Troubles with the list: 
>

--
To unsubscribe:   
For additional commands: 
Troubles with the list: 

Re: urlencoded session html-redirection-bug

[Giorgio Ponza]

When you encode the url, the first time the jsessionid is attached to the
URL,
but if your browser have cookies enabled, a cookie is assigned and the
jsessionid parameter
is not shown anymore.
I tried this widh IE5 IE6 an NE4.7 and works. If you disable cookies, you'll
see the URL always
with the jsessionid attached.
Regards
Giorgio

- Original Message -
From: "Michael" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, April 09, 2002 7:52 PM
Subject: urlencoded session html-redirection-bug


> Hallo!
>
> please help!!!
>
> when I encode an URL and do something like:
>
> 
>
> neither Netscape 4.xx nor InternetExplorer 5.5 handle the ";jsessionid"
correct.
> they redirect to the URL "/myURL" WITHOUT the ";jsessionid"
>
> Netscape 6.2 and Opera 6.1 handle this redirection as expected and concat
the ";jsessionid=..." to the URL!
>
> any idea???
> I need this feature for NS4 and IE5.5 !!!
>
> thanks
> michi






> --
> To unsubscribe:   
> For additional commands: 
> Troubles with the list: 


--
To unsubscribe:   
For additional commands: 
Troubles with the list: