Hi I found the following methods in Action.java which I think may help to control the session ID. That means if the user submits the page and press the back button and submit the page again it will throw an error.
generateToken(HttpServletRequest request) saveToken(HttpServletRequest request) isTokenValid(HttpServletRequest request) If anybody has used these methods let me know how to use these methods . Thanks, Subhendu -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

