On Wed, May 14, 2008 at 7:34 PM, Christopher Schultz <[EMAIL PROTECTED]> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > public class SessionKillingRequest > ~ extends HttpServletRequestWrapper > { > ~ public SessionKillingRequest(HttpServletRequest request) > ~ { > ~ super(request); > ~ } > > ~ public HttpSession getSession(boolean create) > ~ { > ~ if(create) > ~ { > ~ new Throwable("Attempted session creation").printStackTrace(); > ~ } > ~ return null; > ~ } > } >
the getSession() call without parameters also creates a new session. regards Leon --------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]