Hello,
I built an internal site that uses
JSP's and JavaBeans. I have been instructed to reduce the amount and type of data that I store in the session. Is it true that session data is stored in a text file somewhere that can be accessed? If so, where is this file? Can it only be accessed when the session is alive? Is the data in this file stored in clear text (not encrypted)?
Furthermore, I store data about the user and the information he requested in JavaBeans. How are JavaBeans stored in the session? Are they also in this text file?
Does data stored in JavaBeans impact the size of the session? My instructions are to reduce the size of the session to 2KB/user. Do I need to count the data in the JavaBeans in this size?
Your answers are greatly appreciated! Thanks in advance.