I only invalidate sessions when a logout request is
submitted; the login portion of the system doesn't
invalidate sessions. If a user double-submits a login
post request or login form request, that should be ok,
even if they do so out of order. BTW this is I.E.
5.5.4807.2300.

--- "Sexton, George" <[EMAIL PROTECTED]> wrote:
> There is a bug in IE dealing with re-directs and
> SSL. I forget how it works
> but it went something like this:
> 
> Login page invalidates session.
> User enters user ID and password.
> Login page re-directs to target page
> >>> IE Generates spurious additional request to
> login page which again
> invalidates the session.
> 
> If you have pages that invalidate the session, you
> might want to take a look
> at them.
> 
> Also, if you have a network protocol analyzer like
> Ethereal on Linux
> watching the packet flow can help you sort it out.
> 
> George Sexton
> MH Software, Inc.
> Home of Connect Daily Web Calendar Software
> http://www.mhsoftware.com/connectdaily.htm
> Voice: 303 438 9585
> 
> 
> -----Original Message-----
> From: bob knob [mailto:[EMAIL PROTECTED]]
> Sent: 16 October, 2002 9:36 AM
> To: [EMAIL PROTECTED]
> Subject: Losing session in Internet Explorer 5x
> 
> 
> Hi,
> 
> Am using Tomcat 4.1.1.2.
> 
> My web application uses javascript to open new
> windows
> for certain activities, and on random occasions I
> seem
> to be losing the user session, so that I have to
> re-login (we're using our own authentication system
> that simply stores a userid in HttpSession). Has
> anybody else seen this, and is there anything I can
> do
> about it? It's also been happening with Tomcat 4.0.
> 
> thanx
> 
> __________________________________________________
> Do you Yahoo!?
> Faith Hill - Exclusive Performances, Videos & More
> http://faith.yahoo.com
> 
> --
> To unsubscribe, e-mail:
> <mailto:[EMAIL PROTECTED]>
> For additional commands, e-mail:
> <mailto:[EMAIL PROTECTED]>
> 
> 
> --
> To unsubscribe, e-mail:  
> <mailto:[EMAIL PROTECTED]>
> For additional commands, e-mail:
> <mailto:[EMAIL PROTECTED]>
> 


__________________________________________________
Do you Yahoo!?
Faith Hill - Exclusive Performances, Videos & More
http://faith.yahoo.com

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to