Hi,

what is the best way to do session validation? If a session times out, all
objects bounded with this session get deleted. So every JSP or servlet must
check whether a valid session is available. Where should this checking
occur. In JSP Model2 it is easy to do the session validation in the central
controller servlet. But I don't like the big if else queries to determine
the iew page. Somebody posted a solution which handles the session
validation in a super class of all JSPs or servlets. Is that the best way to
solve this problem?

Another problem is if I hit a link and my session is timed out. I have to
reenter my user and password. If I want to continue with my old request, a
mechanism must be available to memorize and forward the old request, Is
there any standard way to handle this problem?


regards
Dapeng

===========================================================================
To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST".
FAQs on JSP can be found at:
 http://java.sun.com/products/jsp/faq.html
 http://www.esperanto.org.nz/jsp/jspfaq.html

Reply via email to