>>> kumar Shanmugam <[EMAIL PROTECTED]> 19-Jul-00 1:15:01
PM >>>

>If cookies are disabled, u can go for either URL rewriting
>or thru form based hide variable.

No you can't. URL re-writing is the only way. A form based variable
can include the session id but you have no way of getting the session
associated with the id (in the latest API).


>In case if ur servlet send the response thru post method,
>then it does not work for url rewriting.

Nonsense.

The spec now REQUIRES that sessions are encoded in an HTTP argument,
as I said before this looks like this:

   http://server:8000/mytservlet;jsessiionid=X

the part after the semicolon is the HTTP argument. This is different
to an HTTP parameter which are encoded like this:

   http://server:8000/myservlet?param1=value1

A url can have both parameters and arguments and arguments can be
transmitted over POST connections as well as GET.

In fact a servlet engine has always been able to POST a session-id,
even when using an HTTP parameter because you can mix POST data and
URL encoded data. eg:

   <form action="http://server:8000/myservlet?sessionid=SESH"
method="POST">
   <input type="text" name="fred">
   <input type="submit" name="send">
   </form>


>But thru hide varaiable it is too difficult to maintain.

I repeat: thru using a hidden form variable it is IMPOSSIBLE to
maintain with the current version of the API because there is no
supported way of getting a session by it's id.



Nic Ferrier

___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

Reply via email to