Hi rrz.
We don't use cookies, but what you mean with URL rewritting?
Javier
Main Topics
Browse All Topics
Loading Advertisement...
Question
How to open a new window with a new session scope?
Hi All
Does any of you know if is it possible to open from a browser a new window to the same Server but with different session as if you did it from the system?
Not sure if I've explained it well, if need more details just ask fot them.
:c))
Javier
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Subscribe now for full access to Experts Exchange and get
Instant Access to this Solution
- Plus...
- 30 Day FREE access, no risk, no obligation
- Collaborate with the world's top tech experts
- Unlimited access to our exclusive solution database
- Never be left without tech help again
Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.
- "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
- "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
- "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.
See what Experts Exchange can do for you.
Got a question?
We've got the answer.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
Need individual assistance?
Our experts are ready to help.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Want to learn from the best?
Read articles from industry experts.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Working on a long term project?
Store your work and research.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
What Makes Experts Exchange Unique?
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Trusted by the world's most respected brands.
Faithfully serving IT professionals since 1996.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Free Tech Articles
-
WARNING: 5 Reasons why you should NEVER fix a computer for free.
It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
-
SCCM OSD Basic troubleshooting
SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
-
Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
-
Create a Win7 Gadget
This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
-
Outlook continually prompting for username and password
There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
-
Backup Exchange 2010 Information Store using Windows Backup
There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...
Cloud Class Webinars
- Avoiding Bugs in Microsoft Access
Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
- Top 10 Best New Features in Visio 2010
Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
- IT Consultant Business Secrets Revealed
Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
- Disaster Recovery and Business Continuity
Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
- Organize Your Visio Diagrams with Containers and Lists
Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
- How to Us Objects, Properties, Events and Methods in Microsoft Access
Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...
Join the Community
Give a Little. Get a Lot.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Answers
>> We don't use cookies
your servlet container does! http is stateless. so the container will have to find a way to maintain a session. there are two means that every servlet container supports (required by spec), cookiee and url rewrite.
cookie is used by default, the container will set a cookie named, for example jsessionid. when you open a new window, they belongs to same browser process, the cookie is shared so you cannot have 2 different sessions with one cookie.
url rewrite requires programming efford, you need to make sure every url you placed in your page are uncoded by response.encodeURI(), which add extra info to the link so container will be able to extract session id from the link to maintain a session. as a side effect, if you don't use encodeURI when you open the new windows, you automatically get a new session.
all above should be described in the book that rrz recommended.
Well the point is that we have an application that creates a session on loging and so on, what we want to do is to be able to open a different session from the same browser like if you open a new browser from the systema and log in again, but normally browsers mantain the same session if you open a new window from it. I thougth about making a call to the system and open a new browser with the URL but I'm not really sure if that canm be done in all systems, I can do it on windows and IE but not sure if will work with linux or NS or Mozilla. That's why I asked the question here.
Javier
Hi Tim.
Thanks for the link, it looks interesting.
>You can't do this on a client's machine...
You can, but this is in Windows and IE don't think it will work in other systems and if the client does not have IE it wont work for sure, you can check the browser that the client uses and try to open a copy of it but....
<html>
<head><title>Open new Browser</title>
<script language="JavaScript">
function openNewBrowser() {
var Shell = new ActiveXObject("WScript.She
Shell.Run("Iexplore.exe http://www.google.com");
}
</script>
</head>
<body>
<script>
openNewBrowser();
</script>
</body>
</html>
Javier
Javier thanks for sharing that windows code.
I tried the code posted by garthman ( pointed to by Tim's link above here).
I couldn't get it to work. I doubt it would ever work. But I would loved to be proven wrong.
Have you considered using application scope and implemneting your own pseudo-sessions ? If you like that idea (hack hack) then I would like to help you in trying to implement it. rrz
Thanks for the points, Javier, but knowledge of how you solved your problem would be more valuable. Specifically I would like to know what you thought of garthman's solution( see link posted by Tim). Also did you find out how to disable cookie session tracking in the tomcat server as suggested by kenneth ? If you want points for your extra time, then I will pass some to you. rrz
Hehe I want no points rrz :c)
Actually I'm not really sure if is solved or not, was a question the ask me here at work and I just posted the question and delivered your good advices, I'll let you know once they tell me how did they've done it.
I just gave the points becose I think it will take some time to them to test all and find out an appropiate solution.
I promise I'll tell you.
Javier
>> Specifically I would like to know what you thought of garthman's solution( see link posted by Tim).
What garthman was posted is correct. actually, you should always encode your internal url if you are going to put up on html page, include links and form action. That way, you'll have your session preserved regardless of whether user agent allows cookie.
I also check the tomcat doc and yes, that's the way to disable cookie session tracking.
>> I'm affraid that Kenneth warns me becose I don't close my questions.
Am I that bad :-(
kenneth, thanks very much for your time here. I know you have been quite busy.
In order to sort this matter out, I put the following two lines on my pages.
fromUrl??<%=request.isRequ
fromCookie??<%=request.isR
Of course the initial response(in either browser) is always
fromUrl??false
fromCookie??false
because the user agent has not joined the session yet and the session is new.
>I also check the tomcat doc and yes, that's the way to disable cookie session tracking.
Yes, I agree. But I could not get the IE6 browser to agree.
In Netscape 7.1 cookie control is finer.
So, I can deny the session cookie and results in second page are
fromUrl??true
fromCookie??false
But in IE6 I could not get those results under any circumstances( but please prove me wrong).
Even using "Advanced Privacy Settings"
and checking both "overriding automatic cookie handling" and "block" all cookies.
The results in IE6 are always
fromUrl??false
fromCookie??true
Please comment. rrz
It works for me. I have tomcat 4.1.18, used the examles context. tested before and after set cookies="false" in server.xml
No setting change in IE6 and it works. You might want to clear IE cookie and test again.
a.jsp:
<% session.setAttribute("test
<a href="<%=response.encodeUR
b.jsp:
test attribute: <%=session.getAttribute("t
fromUrl??<%=request.isRequ
fromCookie??<%=request.isR
<a href="<%=response.encodeUR
>Am I that bad :-(
I'm totally sure you're not.
My colleges are trying to implement the Javascript method I told them, becose they just want to create a new seesion on a special link on their application, as if they set cokies to false on the server they must encode all their URL and that will be too much work since is a production project.
I guess they should figured it out before they started the develop of it but no is to late to make that huge change.
But I think is a good thing to know all this we're talking about, I'm gald I asked this question I've learned a lot.
Thanks again to all of you.
Javier
3 Ways to Join
Business Accounts
- Perfect for organizations
- Multiple users
- Save over 36%
- Create a Business Account
Answer for Membership
- Earn free access
- Showcase your knowledge
- No credit card required
- Sign Up to Answer
Loading Advertisement...
by: rrz@871311Posted on 2004-03-25 at 08:47:44ID: 10678698
Are using cookies or URL rewriting ?
I don't know if you have access to the third edition of Hans Bergsten book "JSP"
but on page 139 he writes about this subject. You might be able to get what you want if you use URL rewriting and avoid using cookies.