How does the session know which user is accessing it? Does it resolves the
user identity by IP address or cookie or IP address plus port number ...
etc?
The problem is in mobile phones in Japan, cookie is not allowed. Also, there
is usually a gateway hiding the server, so all user will have same IP
address ( but they will have different port number) and if session resolve
by IP address only, then users will have access to other users session
object.
Anthony Mak
===========================================================================
To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST".
For digest: mailto [EMAIL PROTECTED] with body: "set JSP-INTEREST DIGEST".
Some relevant FAQs on JSP/Servlets can be found at:
http://java.sun.com/products/jsp/faq.html
http://www.esperanto.org.nz/jsp/jspfaq.html
http://www.jguru.com/jguru/faq/faqpage.jsp?name=JSP
http://www.jguru.com/jguru/faq/faqpage.jsp?name=Servlets
