Session cookies are only stored in memory. Since they don't persist between
invocations of the browser, there's no reason to write them to disk. If a
user comes back to your site without shutting down his browser, there's no
reason for him to re-login, since he'll already have a valid session.
(*Chris*)
----- Original Message -----
From: Jeffrey D. Curry <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, March 17, 1999 10:27 AM
Subject: Killing a Session Cookie - Works in IE, fails in Netscape
>When I invalidate my session, I also get the cookie from the request, and
>set it's max age (setMaxAge) to 1 (1 second).
>
>I'm doing this in order to get a unique session ID everytime a user tries
to
>login WITHOUT having closed down the browser. I'm also using this method
to
>tell if a user's session expired or they came to the site for the first
>time.
>
>In IE, the session cookie value is killed. Although, in Netscape, the
>session value does not get deleted. I.E. It reuses the same Session ID
>each time.
>
>I noticed that Netscape is ONLY storing non-session-ending cookies in
>cookies.txt and NOT storing the session id cookie in this file. This
>probably has something to do with my problem. Although, WHERE is this
being
>stored and WHY can't I reset the cookies maxage like in IE?
>
>If I can't, then how do I create a unique session ID when a user's session
>is invalidated and they decide to re-log back on using Netscape WITHOUT
>having shutdown the browser? (whew...)
>
>This is critical. You're help would be appreciated!
>
>___________________________________________________________________________
>To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
>of the message "signoff SERVLET-INTEREST".
>
>Archives: http://archives.java.sun.com/archives/servlet-interest.html
>Resources: http://java.sun.com/products/servlet/external-resources.html
>LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
>
___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".
Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
