Data Structure - Initialize a static map somewhere (perhaps the Servlet). Verification - For every login, check the map to see if the supplied credentials exist. Clean up - Implement HttpSessionBindingListener to remove the credentials from the map when the Session expires.
On 9/5/06, Pedro Del Gallego <[EMAIL PROTECTED]> wrote:
Hi, I like to avoid to users can run the application in a moment. A user can only have one application running in a moment. Now i manage the session using jsessionid and expire session. <session-config> <session-timeout>10</session-timeout> </session-config> There are a better form to avoid these behavior? Do you now a tutorial or article that explain this topic? Thanks --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]