tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Len Popp" <len.p...@gmail.com>
Subject Re: Turning off jsessionid
Date Fri, 26 Oct 2007 17:03:06 GMT
On 10/26/07, Christopher Schultz <chris@christopherschultz.net> wrote:
> Ken,
>
> Ken Bowen wrote:
> > Is there a way to tell Tomcat to never rewrite urls?  I.e., to never add
> > jsessid ?
>
> Do you want to completely disable sessions, or just always require cookies?

If the site doesn't need to use sessions at all, make sure the app
never calls request.getSession() and put <%@page session="false"%> in
all the JSPs.

> This post from July 2004 includes a suggestion for a workaround when you
> /really/ don't want url rewriting to ever occur:
>
> http://mail-archives.apache.org/mod_mbox/tomcat-users/200407.mbox/%3C4106C206.2020702@fiskars.com%3E

and here's another link with code snippets:
http://mail-archives.apache.org/mod_mbox/struts-user/200311.mbox/%3c3FBA8A39.8010907@fiskars.com%3e

Keep in mind that if you go this route, your site will require users
to have session cookies enabled.

> I'm not sure why you'd ever want to do this, though. I'd love to hear
> your reason for doing it, though.

Actually, you have heard a reason for it before. :-)
http://mail-archives.apache.org/mod_mbox/tomcat-users/200612.mbox/browser
-- 
Len

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message