gah! i have to start wrapping my emais in

<sarcasm> .... </sarcasm>

-igor

On 4/19/07, Eelco Hillenius <[EMAIL PROTECTED]> wrote:

Sure, if you don't have a common layout etc you use for you Wicket
pages and you want to reuse in your login page, that's even more
efficient. You'll have to make it a separate HTML file in a path that
is not handled by Wicket though, so it's a bit more pain to achieve.

Eelco


On 4/19/07, Igor Vaynberg <[EMAIL PROTECTED]> wrote:
> its even better not to have a wicket page at all
>
> a simple loginl.html with
>
> <form action="/some/mounted/page" method="post">
> <input name="uname"/><input name="pwd"/><input type="submit"/>
> </form>
>
> then you just mount a page that processes the submitted values and
throws a
> restartresponseexception to some other page.
>
> now as users hammer your login page and stare at it for hours it is only
> apache that suffers.
>
> taking it to the next level baby!
>
> -igor
>
>
>
> On 4/19/07, Eelco Hillenius <[EMAIL PROTECTED] > wrote:
> >
> > > A last question : what does precisely the session.invalidate stuff ?
> > > Indeed, in my application, when checking if the user is logged in, I
> > > just check whether an user is in the current session. As such, to
> > > "unlog" my user, I just need to do something like
> > > session.setUser(null). So I wonder what does precisely the
invalidate
> > > (and as such whether I really need to do it or not). I checked on
the
> > > API already and there is just :"Invalidates this session."
> >
> > Invalidate 'unbinds' the session from the backing session store. In
> > practice, for default configurations, this means that the HttpSession
> > object that is maintained for the client is invalidated (see
> > HttpSession#invalidate) after the request is done, so that a client
> > starts with a clean slate.
> >
> > Off topic, I think it's good practice to make your login page a
> > stateless page (using a stateless form), so that users can have that
> > page in front of them for hours and then sign in without even being
> > bothered with a session expiry exception. In fact, it's probably good
> > practice to have the whole part of the site where you don't require
> > users to log in implemented as stateless and/ or bookmarkable pages.
> > My 2c.
> >
> > Eelco
> >
> >
>
-------------------------------------------------------------------------
> > This SF.net email is sponsored by DB2 Express
> > Download DB2 Express C - the FREE version of DB2 express and take
> > control of your XML. No limits. Just data. Click to get it now.
> > http://sourceforge.net/powerbar/db2/
> > _______________________________________________
> > Wicket-user mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/wicket-user
> >
>
>
>
-------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Wicket-user mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/wicket-user
>
>

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Wicket-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/wicket-user

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Wicket-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/wicket-user

Reply via email to