no thats not needed
On 4/19/07, Igor Vaynberg <[EMAIL PROTECTED]> wrote:
gah! i have to start wrapping my emais in
<sarcasm> .... </sarcasm>
-igor
On 4/19/07, Eelco Hillenius < [EMAIL PROTECTED]> wrote:
>
> Sure, if you don't have a common layout etc you use for you Wicket
> pages and you want to reuse in your login page, that's even more
> efficient. You'll have to make it a separate HTML file in a path that
> is not handled by Wicket though, so it's a bit more pain to achieve.
>
> Eelco
>
>
> On 4/19/07, Igor Vaynberg <[EMAIL PROTECTED]> wrote:
> > its even better not to have a wicket page at all
> >
> > a simple loginl.html with
> >
> > <form action="/some/mounted/page" method="post">
> > <input name="uname"/><input name="pwd"/><input type="submit"/>
> > </form>
> >
> > then you just mount a page that processes the submitted values and
> throws a
> > restartresponseexception to some other page.
> >
> > now as users hammer your login page and stare at it for hours it is
> only
> > apache that suffers.
> >
> > taking it to the next level baby!
> >
> > -igor
> >
> >
> >
> > On 4/19/07, Eelco Hillenius <[EMAIL PROTECTED] > wrote:
> > >
> > > > A last question : what does precisely the session.invalidate stuff
> ?
> > > > Indeed, in my application, when checking if the user is logged in,
> I
> > > > just check whether an user is in the current session. As such, to
> > > > "unlog" my user, I just need to do something like
> > > > session.setUser(null). So I wonder what does precisely the
> invalidate
> > > > (and as such whether I really need to do it or not). I checked on
> the
> > > > API already and there is just :"Invalidates this session."
> > >
> > > Invalidate 'unbinds' the session from the backing session store. In
> > > practice, for default configurations, this means that the
> HttpSession
> > > object that is maintained for the client is invalidated (see
> > > HttpSession#invalidate) after the request is done, so that a client
> > > starts with a clean slate.
> > >
> > > Off topic, I think it's good practice to make your login page a
> > > stateless page (using a stateless form), so that users can have that
> > > page in front of them for hours and then sign in without even being
> > > bothered with a session expiry exception. In fact, it's probably
> good
> > > practice to have the whole part of the site where you don't require
> > > users to log in implemented as stateless and/ or bookmarkable pages.
> > > My 2c.
> > >
> > > Eelco
> > >
> > >
> >
> -------------------------------------------------------------------------
> > > This SF.net email is sponsored by DB2 Express
> > > Download DB2 Express C - the FREE version of DB2 express and take
> > > control of your XML. No limits. Just data. Click to get it now.
> > > http://sourceforge.net/powerbar/db2/
> > > _______________________________________________
> > > Wicket-user mailing list
> > > Wicket-user@lists.sourceforge.net
> > > https://lists.sourceforge.net/lists/listinfo/wicket-user
> > >
> >
> >
> >
> -------------------------------------------------------------------------
> > This SF.net email is sponsored by DB2 Express
> > Download DB2 Express C - the FREE version of DB2 express and take
> > control of your XML. No limits. Just data. Click to get it now.
> > http://sourceforge.net/powerbar/db2/
> > _______________________________________________
> > Wicket-user mailing list
> > Wicket-user@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/wicket-user
> >
> >
>
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Wicket-user mailing list
> Wicket-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/wicket-user
>
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Wicket-user mailing list
Wicket-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wicket-user
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Wicket-user mailing list
Wicket-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wicket-user
