Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
From: "Stefan Radzom" <sradzom@web.de>
To: "'Tomcat Users List'" <tomcat-user@jakarta.apache.org>
Subject: RE: sessionids through url rewriting
Date: Tue, 29 Jul 2003 22:10:54 +0200
Message-ID: <008f01c3560d$87b78220$64b7fea9@name6msdjw95pe>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
In-Reply-To: <5.1.0.14.2.20030729220548.02bf4120@192.168.0.62>
Importance: Normal
Sender: sradzom@web.de

You don't have to implement that yourself. Just pass every url through
HttpServletResponse.encodeURL(url).

http://jakarta.apache.org/tomcat/tomcat-4.1-doc/servletapi/javax/servlet/=
htt
p/HttpServletResponse.html#encodeURL(java.lang.String)

-Stefan


> -----Original Message-----
> From: Hans Wichman [mailto:hans@trimm.nl]=20
> Sent: Tuesday, July 29, 2003 10:06 PM
> To: Tomcat Users List
> Subject: RE: sessionids through url rewriting
>=20
>=20
> I was afraid you were going to say that ;-(. Guess I will built in a=20
> cookiecheck then...
> At 01:29 PM 7/29/2003 -0600, you wrote:
>=20
> >Since you are passing your session id through URL, the url=20
> string must contain
> >the jsessionid parameter, i.e., you have to encode it.
> >
> >
> >-----Original Message-----
> >From: Hans Wichman [mailto:hans@trimm.nl]
> >Sent: July 29, 2003 11:51 AM
> >To: tomcat-user@jakarta.apache.org
> >Subject: sessionids through url rewriting
> >
> >
> >Hi,
> >I've read in the servlets specs that tomcat must support=20
> session management
> >through url rewriting, but nothing happens when I disable the cookies
> >(testing in netscape 7, since ie 6 sp1 can't disable the cookies).
> >
> >I have one servlet, let's call it /myServlet, which=20
> implements a command
> >like pattern wrapping a result generating application, for=20
> example I call
> >the servlet with
> >1)
> >localhost:8080/myServlet?command0=3Dload&argument0=3D&command1=3Din
> it&argument=3D1&queue
> >length=3D2
> >
> >The servlet parses the command and arguments into command objects and
> >passes them onto an instance of an application which is=20
> stored in each
> >users session (each user has his own instance of the=20
> application), the
> >application processes the request using templates blablahblah and the
> >servlet gets all the generated content using getResult()=20
> dumping it into
> >the output stream of the servlet.
> >
> >Where in this process should the automatic url rewriting=20
> occur? I haven't
> >got a clue....
> >Does my own request (see 1) overwrite any jsessionid that should
> >automatically be added ? Is url rewriting only supported=20
> directly from
> >hyperlinks in a jsp page?
> >
> >Hope anyone can help, I'm using apache tomcat/4.1.24 (and=20
> not 4.1.23 ;-))
> >
> >Hans
> >
> >
> >---------------------------------------------------------------------
> >To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> >For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> >
> >
> >---------------------------------------------------------------------
> >To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> >For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>=20
>=20
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>=20
>=20


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org