>Best Suggestion is: > >1)Over Ride ActionServlet and place session expire code(redirect login page >or some other stuff). This will work for if the user clicks any buttons, >action events. > >2) Now we need to handle page refreshes (i.e JSPs) > >write a simple jsp, which consist simple logic check session, if session is >null redirect to login page or some stuff. >Include this jsp, where ever you required. But Ashok -- this is exactly what we have. What do you do if request.getSession(false) does NOT return null as advertised when the session has actually expired? I don't think moving the logic elsewhere will help, and I don't really care that much about re-factoring etc.
In short, I think this is a bug! and I'd be happy to hear how you've solved it if you've experienced it. Thanks. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]