> there is no practical solution as long you can't distinguish
> betwen "active" sessions and sessions no more used and waiting to timeout)
I once read a solution in this mailinglist to invalidate
sessions once a user closed his browser.
You had to add a very small applet in every page.
When the user closes his browser, the applet calls its
stop-method. In this method you could call a servlet
that invalidates the user.
However, I never tested this approach and I don't find
the article in the (very, very, very slow) archives of
the mailing list.
--
-------------------------------------------------------------------
Bruno Lowagie Academisch Rekencentrum Universiteit Gent
Tel : 09/264.48.14 e-mail : [EMAIL PROTECTED]
-------------------------------------------------------------------
___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".
Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
