Hi all, Couple o' questions: 1) What is the different in zone.properties between session.timeout and session.checkFrequency. 2) I have implemented a login system (wonder who hasn't 8) ). All data is stored in a database. I am using the session id to map from a session to a user. The problem is, that when I update the main user class, all session data goes out the window. Which means that if I update a class and users are logged in, they are all suddenly logged out. I've seen in mentioned, but only in passing, that this can be by-passed by saving the session data in a db. I imagine that I need to somehow bypass the getSession(false); call with a call that checks for a cookie that is the session id. If that doesn't exist, then create the session. If it does, use it for the information. Hmm, think I just answered my own question. 8) Ok, here is the question. Am I on the right track? Maybe I don't even really need the to use the Session class? I'm only using out of convenience at this point. Regards, Doug -- Those without imagination will struggle day in and day out to survive. Those with imagination will fail until they find success. ---------------------------------------------------------------- To subscribe: [EMAIL PROTECTED] To unsubscribe: [EMAIL PROTECTED] Archives and Other: <http://java.apache.org/main/mail.html/> Problems?: [EMAIL PROTECTED]