Return-Path: Delivered-To: apmail-jakarta-tomcat-user-archive@apache.org Received: (qmail 78568 invoked from network); 9 Nov 2001 21:02:08 -0000 Received: from unknown (HELO nagoya.betaversion.org) (192.18.49.131) by daedalus.apache.org with SMTP; 9 Nov 2001 21:02:08 -0000 Received: (qmail 19752 invoked by uid 97); 9 Nov 2001 21:01:15 -0000 Delivered-To: qmlist-jakarta-archive-tomcat-user@jakarta.apache.org Received: (qmail 19671 invoked by uid 97); 9 Nov 2001 21:01:12 -0000 Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Subscribe: List-Help: List-Post: List-Id: "Tomcat Users List" Reply-To: "Tomcat Users List" Delivered-To: mailing list tomcat-user@jakarta.apache.org Received: (qmail 14714 invoked from network); 9 Nov 2001 20:57:39 -0000 Date: Fri, 9 Nov 2001 15:57:34 -0500 (EST) From: Matyas William Egyhazy X-X-Sender: To: Tomcat Users List Subject: Re: Retrieve used sessions In-Reply-To: <3BEC21CC.6060307@web.de> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=X-UNKNOWN Content-Transfer-Encoding: QUOTED-PRINTABLE X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N you could use a timeout mechanism. matt On Fri, 9 Nov 2001, Jens [ISO-8859-2] K=FChnberger wrote: > So, if these methods are deprecated, how can I check on server side, if > a user is still logged on? > For example I store all users that are logged in. It's no problem to > delete those who log off , > but how can I check for those who just close the browser? > > Jens > > Matt Egyhazy wrote: > > >these methods are deprecated in later j2ee: > > > >HttpSessionContext.getIds() which used to return a list of current sessi= on > >ids > >HttpSessionContext.getSession(sessionId) which would return a HttpSessio= n > >with the sessionId parameter. > > > >I think these were deprecated because application code could maliciously > >attack other people's sessions (this is a problem for hosting companys t= hat > >use colocated apps). > > > > > >Matt > > > >----- Original Message ----- > >From: "Jens Khnberger" > >To: > >Sent: Friday, November 09, 2001 11:36 AM > >Subject: Retrieve used sessions > > > > > >>Hi, > >> > >>can someone please tell me, if it's possible (and if it is how) to > >>retrieve all sessions or to check if a session is still used. > >> > >>Regards > >> > >>Jens > >> > >> > >> > >>-- > >>To unsubscribe: > >>For additional commands: > >>Troubles with the list: > >> > > > > > >-- > >To unsubscribe: > >For additional commands: > >Troubles with the list: > > > > > > > > -- > To unsubscribe: > For additional commands: > Troubles with the list: > -- To unsubscribe: For additional commands: Troubles with the list: