Re : Re: urlencoded session html-redirection-bug

2002-04-10 Thread Michael

When you encode the url, the first time the jsessionid is attached to the
URL,
but if your browser have cookies enabled, a cookie is assigned and the
jsessionid parameter
is not shown anymore.
 
thanks for your comment - but this isn't the problem!
to handle the first-time URLencode after session-creation, I redirect (302) to the 
same URL with a QueryStringParameter FirstAccessSession - in this request I now see, 
if the Session is obtained by cookie or by URL! I do another redirect to the (now 
correctly) urlencoded URL (of course without the FirstAccessSession-Parameter). This 
URL now has the sessionid encoded in its URL only, if the browser doesn't support 
cookies!
 
My problem:
I have a browser with cookies disabled - a html-redirect like
meta http-equiv=refresh content=10; URL=/myURL;jsessionid=og9obimzx2
is misunderstood by many browsers (NS 4.x, IE5.x, IE6 ...) because of the second ; 
before jsessionid!
the signature of the html-redirect-function is (int delayInSeconds;String 
redirectURL) separated by a ;!
The second ; makes the browsers believe: here the URLString ends - but this isn't 
correct! The browser is redirected to the URL without encoded sessionid - and so 
looses its session!!!
 
so how to make a HTML-redirect with URL-encoded sessionid?
 
thanks
michi
 
 

- Original Message -
From: Michael [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, April 09, 2002 7:52 PM
Subject: urlencoded session html-redirection-bug

 Hallo!

 please help!!!

 when I encode an URL and do something like:

 meta http-equiv=refresh content=10; URL=/myURL;jsessionid=og9obimzx2

 neither Netscape 4.xx nor InternetExplorer 5.5 handle the ;jsessionid

correct.

 they redirect to the URL /myURL WITHOUT the ;jsessionid

 Netscape 6.2 and Opera 6.1 handle this redirection as expected and concat

the ;jsessionid=... to the URL!

 any idea???
 I need this feature for NS4 and IE5.5 !!!

 thanks
 michi




 --
 To unsubscribe:   mailto:[EMAIL PROTECTED]
 For additional commands: mailto:[EMAIL PROTECTED]
 Troubles with the list: mailto:[EMAIL PROTECTED]

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]


--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]


AW: Re : Re: urlencoded session html-redirection-bug

2002-04-10 Thread Ralph Einfeldt

Are there special reasons why you redirect in the html and not 
with response.sendRedirect ?

I don't think that there is an easy way to get the meta tag
working. (Something like writing a filter or using mod_rewrite 
to rewrites /myURL?jsessionid=og9obimzx2 and using a selfmade 
encodeUrl())

 -Ursprüngliche Nachricht-
 Von: Michael [mailto:[EMAIL PROTECTED]]
 Gesendet: Mittwoch, 10. April 2002 09:55
 An: Giorgio Ponza
 Cc: [EMAIL PROTECTED]
 Betreff: Re : Re: urlencoded session html-redirection-bug

snip/ 
 meta http-equiv=refresh content=10; 
 URL=/myURL;jsessionid=og9obimzx2
 is misunderstood by many browsers (NS 4.x, IE5.x, IE6 ...) 
 because of the second ; before jsessionid!
 the signature of the html-redirect-function is (int 
 delayInSeconds;String redirectURL) separated by a ;!
 The second ; makes the browsers believe: here the URLString 
 ends - but this isn't correct! The browser is redirected to 
 the URL without encoded sessionid - and so looses its session!!!
snip/ 

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Re: AW: Re : Re: urlencoded session html-redirection-bug

2002-04-10 Thread Michael

Am Mittwoch, 10. April 2002 10:29 schrieben Sie:
 Are there special reasons why you redirect in the html and not
 with response.sendRedirect ?

yes - a response.sendRedirect won't be recognized by the user! I want the 
user to see, that something happened - and after a few seconds he is going to 
be redirected!

 I don't think that there is an easy way to get the meta tag
 working. (Something like writing a filter or using mod_rewrite
 to rewrites /myURL?jsessionid=og9obimzx2 and using a selfmade
 encodeUrl())

mod_rewrite is a good idea!

meanwhile I do the meta-tag-redirect not to 
'response.encodeURL(request.getRequestedURI())'
but to
'request.getRequestedURI() + ?redirectTo= + 
java.net.URLEncoder.encode(response.encodeURL(request.getRequestURI())'

if I get a parameter named redirectTo in my servlet, I do a 
'response.sendRedirect(request.getParameter(redirectTo))'

thanks
michi



 snip/

  meta http-equiv=refresh content=10;
  URL=/myURL;jsessionid=og9obimzx2
  is misunderstood by many browsers (NS 4.x, IE5.x, IE6 ...)
  because of the second ; before jsessionid!
  the signature of the html-redirect-function is (int
  delayInSeconds;String redirectURL) separated by a ;!
  The second ; makes the browsers believe: here the URLString
  ends - but this isn't correct! The browser is redirected to
  the URL without encoded sessionid - and so looses its session!!!

 snip/

--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]




Re: Re: urlencoded session html-redirection-bug

2002-04-10 Thread Giorgio Ponza

So, try this way:

meta http-equiv=refresh content=10;
URL='myURL?;jsessionid=og9obimzx2'

with the single ' after = and before closing  and the ? before the
jsessionid
i tried with some url and works, hope also for you
Regards
Giorgio

- Original Message -
From: Michael [EMAIL PROTECTED]
To: Giorgio Ponza [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Wednesday, April 10, 2002 9:55 AM
Subject: Re : Re: urlencoded session html-redirection-bug


 When you encode the url, the first time the jsessionid is attached to the
 URL,
 but if your browser have cookies enabled, a cookie is assigned and the
 jsessionid parameter
 is not shown anymore.

 thanks for your comment - but this isn't the problem!
 to handle the first-time URLencode after session-creation, I redirect
(302) to the same URL with a QueryStringParameter FirstAccessSession - in
this request I now see, if the Session is obtained by cookie or by URL! I do
another redirect to the (now correctly) urlencoded URL (of course without
the FirstAccessSession-Parameter). This URL now has the sessionid encoded
in its URL only, if the browser doesn't support cookies!

 My problem:
 I have a browser with cookies disabled - a html-redirect like
 meta http-equiv=refresh content=10; URL=/myURL;jsessionid=og9obimzx2
 is misunderstood by many browsers (NS 4.x, IE5.x, IE6 ...) because of the
second ; before jsessionid!
 the signature of the html-redirect-function is (int
delayInSeconds;String redirectURL) separated by a ;!
 The second ; makes the browsers believe: here the URLString ends - but
this isn't correct! The browser is redirected to the URL without encoded
sessionid - and so looses its session!!!

 so how to make a HTML-redirect with URL-encoded sessionid?

 thanks
 michi


 
 - Original Message -
 From: Michael [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Tuesday, April 09, 2002 7:52 PM
 Subject: urlencoded session html-redirection-bug
 
  Hallo!
 
  please help!!!
 
  when I encode an URL and do something like:
 
  meta http-equiv=refresh content=10;
URL=/myURL;jsessionid=og9obimzx2
 
  neither Netscape 4.xx nor InternetExplorer 5.5 handle the ;jsessionid
 
 correct.
 
  they redirect to the URL /myURL WITHOUT the ;jsessionid
 
  Netscape 6.2 and Opera 6.1 handle this redirection as expected and
concat
 
 the ;jsessionid=... to the URL!
 
  any idea???
  I need this feature for NS4 and IE5.5 !!!
 
  thanks
  michi
 

---
-
 
 
  --
  To unsubscribe:   mailto:[EMAIL PROTECTED]
  For additional commands: mailto:[EMAIL PROTECTED]
  Troubles with the list: mailto:[EMAIL PROTECTED]
 
 --
 To unsubscribe:   mailto:[EMAIL PROTECTED]
 For additional commands: mailto:[EMAIL PROTECTED]
 Troubles with the list: mailto:[EMAIL PROTECTED]
 






 --
 To unsubscribe:   mailto:[EMAIL PROTECTED]
 For additional commands: mailto:[EMAIL PROTECTED]
 Troubles with the list: mailto:[EMAIL PROTECTED]


--
To unsubscribe:   mailto:[EMAIL PROTECTED]
For additional commands: mailto:[EMAIL PROTECTED]
Troubles with the list: mailto:[EMAIL PROTECTED]