When I invalidate my session, I also get the cookie from the request, and
set it's max age (setMaxAge) to 1 (1 second).
I'm doing this in order to get a unique session ID everytime a user tries to
login WITHOUT having closed down the browser. I'm also using this method to
tell if a user's session expired or they came to the site for the first
time.
In IE, the session cookie value is killed. Although, in Netscape, the
session value does not get deleted. I.E. It reuses the same Session ID
each time.
I noticed that Netscape is ONLY storing non-session-ending cookies in
cookies.txt and NOT storing the session id cookie in this file. This
probably has something to do with my problem. Although, WHERE is this being
stored and WHY can't I reset the cookies maxage like in IE?
If I can't, then how do I create a unique session ID when a user's session
is invalidated and they decide to re-log back on using Netscape WITHOUT
having shutdown the browser? (whew...)
This is critical. You're help would be appreciated!
___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".
Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
