I developed a project with jboss4 as app server,but there a problem:
I can visit the project pages after jboss4 started,but when I shutdown the
jboss4 server and restart it, the session for the pages which I have visited is
still validate, that is I needn't login again and the user information is still
available.this feature is useful when developing,but may have security problem
when release project.
Can anybody tell me how to turn off the feature ?
View the original post :
http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3871865#3871865
Reply to the post :
http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3871865
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
JBoss-Development mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/jboss-development
