Thanks Raj. Explaining a bit more about my problem. I am trying to launch mobile version of my store(developed on ofbiz). Most of mobiles won't support cookies. So, I want to implement my storefront without cookies. As your suggestion OOTB, appending JSESSIONID with every URL is lil bit unsecure. Because, MITM attack chances will be more with this.
*Is there any other solution for switching between http and https smoothly once(first time) logged in without using cookies????*. On Sat, Nov 7, 2009 at 10:17 PM, Raj Saini <[email protected]> wrote: > Hi Hemanth, > > Can you explain a bit more please? What do you mean "when moving". > > Thanks, > > Raj > > > Hemanth Kumar Kanamarlapudi wrote: > >> Hi All, >> >> Even i am facing this same problem of logging out in my ofbiz application >> when moving. Your help is appreciated. >> >> Regards >> Hemanth >> >> ________________________________________ >> From: Raj Saini [[email protected]] >> Sent: 07 November 2009 20:37 >> To: [email protected] >> Subject: Re: switching between http and https without cookies possible in >> ofbiz????? >> >> Kumaraswamy, >> >> If you disbable the cookies every URL must have a jsession id. This >> works fine OOTB when switching one protocol to another and jsessionid is >> appended to the URL. Your's is custom code or you are using OOTB? >> >> Thanks, >> >> Raj >> >> Kumaraswamy nandipati wrote: >> >> >>> Hi All, >>> >>> I am not a tech savvy. Please pull me out of this problem. >>> >>> Problem: I am browsing with "Disable Cookies" option for my ofbiz site. >>> When >>> ever, I switch from http to https it is asking me to login. I saw that >>> ofbiz >>> sets JSESSIONID as a cookie in normal browsing(cookie enabled). >>> >>> Q1) Is this problem only in ofbiz or default from tomcat. I am >>> questioning >>> because ofbiz internally uses tomcat instance??. >>> >>> Q2) Is there any solution for switching between http and https other than >>> cookies??? Because, I want my "cookie-disabled customers" to browse >>> successfully on my site to place order??. >>> >>> >>> >>> >>> >>> >>> >>> >> >> http://www.mindtree.com/email/disclaimer.html >> >> >> > > -- Thanks, Kumaraswamy.N 91-9866805250.
