>>> kumar Shanmugam <[EMAIL PROTECTED]> 19-Jul-00 1:15:01 PM >>> >If cookies are disabled, u can go for either URL rewriting >or thru form based hide variable. No you can't. URL re-writing is the only way. A form based variable can include the session id but you have no way of getting the session associated with the id (in the latest API). >In case if ur servlet send the response thru post method, >then it does not work for url rewriting. Nonsense. The spec now REQUIRES that sessions are encoded in an HTTP argument, as I said before this looks like this: http://server:8000/mytservlet;jsessiionid=X the part after the semicolon is the HTTP argument. This is different to an HTTP parameter which are encoded like this: http://server:8000/myservlet?param1=value1 A url can have both parameters and arguments and arguments can be transmitted over POST connections as well as GET. In fact a servlet engine has always been able to POST a session-id, even when using an HTTP parameter because you can mix POST data and URL encoded data. eg: <form action="http://server:8000/myservlet?sessionid=SESH" method="POST"> <input type="text" name="fred"> <input type="submit" name="send"> </form> >But thru hide varaiable it is too difficult to maintain. I repeat: thru using a hidden form variable it is IMPOSSIBLE to maintain with the current version of the API because there is no supported way of getting a session by it's id. Nic Ferrier ___________________________________________________________________________ To unsubscribe, send email to [EMAIL PROTECTED] and include in the body of the message "signoff SERVLET-INTEREST". Archives: http://archives.java.sun.com/archives/servlet-interest.html Resources: http://java.sun.com/products/servlet/external-resources.html LISTSERV Help: http://www.lsoft.com/manuals/user/user.html