It sounds to me like the app is using servlet instance variables instead of method variables for holding the userid.
-----Original Message----- From: A mailing list about Java Server Pages specification and reference [mailto:[EMAIL PROTECTED] Behalf Of Ritesh Gupta Sent: Wednesday, May 19, 2004 3:58 AM To: [EMAIL PROTECTED] Subject: Re: session duplication Are you running your app in some kind of proxy env ? Maybe your proxy server is not handling the requests properly. Ritesh > -----Original Message----- > From: A mailing list about Java Server Pages specification and reference > [mailto:[EMAIL PROTECTED] Behalf Of Dwi Pamiluto Nugroho > Sent: Wednesday, May 19, 2004 12:39 PM > To: [EMAIL PROTECTED] > Subject: session duplication > > > Hi All .. I got a serious problem. I use cookie and session id to check > user loged in to the systen > Once I login, I get another person userid that not mine. > Example : I login as dnu, but after login authentication is success > (passed) another name (say : sbody) appeared at my PC. This problem also > occurred at the other PC. > > What the problem is this ? Does anybody ever get this problem ? > Information : I use OC4J as web server .. > > thanks .. > > dnugroho. > > ================================================================== > ========= > To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff > JSP-INTEREST". > For digest: mailto [EMAIL PROTECTED] with body: "set > JSP-INTEREST DIGEST". > > Some relevant archives, FAQs and Forums on JSPs can be found at: > > http://java.sun.com/products/jsp > http://archives.java.sun.com/jsp-interest.html > http://forums.java.sun.com > http://www.jspinsider.com =========================================================================== To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST". For digest: mailto [EMAIL PROTECTED] with body: "set JSP-INTEREST DIGEST". Some relevant archives, FAQs and Forums on JSPs can be found at: http://java.sun.com/products/jsp http://archives.java.sun.com/jsp-interest.html http://forums.java.sun.com http://www.jspinsider.com The information contained in this e-mail may be confidential and is intended solely for the use of the named addressee. Access, copying or re-use of the e-mail or any information contained therein by any other person is not authorized. If you are not the intended recipient please notify us immediately by returning the e-mail to the originator.(A) =========================================================================== To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST". For digest: mailto [EMAIL PROTECTED] with body: "set JSP-INTEREST DIGEST". Some relevant archives, FAQs and Forums on JSPs can be found at: http://java.sun.com/products/jsp http://archives.java.sun.com/jsp-interest.html http://forums.java.sun.com http://www.jspinsider.com
