Pinghua Young wrote:
> Is there any way to get a list of all active sessions?
>
In the servlet API versions up through 2.0, this was possible using
HttpSessionContext. However, this entire class was deprecated, and the
functionality removed, as of version 2.1 of the API due to security concerns.
For example, any servlet in your context could go snooping through all the
user objects you've stored in all your sessions (which might contain sensitive
information), or maliciously remove such objects or invalidate the sessions on
you.
Craig McClanahan
___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".
Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
