This week's book giveaway is in the OCAJP 8 forum.
We're giving away four copies of OCA Java SE 8 Programmer I Study Guide and have Edward Finegan & Robert Liguori on-line!
See this thread for details.
The moose likes JSP and the fly likes Maintaining sessions Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login

Win a copy of OCA Java SE 8 Programmer I Study Guide this week in the OCAJP 8 forum!
JavaRanch » Java Forums » Java » JSP
Bookmark "Maintaining sessions" Watch "Maintaining sessions" New topic

Maintaining sessions

Sonam Zam

Joined: Apr 18, 2007
Posts: 9
hi friends i have created a web application using netbeans 6.0

When a user loggs in the data is sent from Login page to a servlet which in turn communicates with a bean. if the user id and password are valid the servlet creates a session and sets the attribute as follows

HttpSession session = request.getSession();

And forwarding it to a new jsp called Welcome.jsp . and on Welcome.jsp i am checkin the attribute value from session object.
Now on Welcome.jsp if i press back (on browser) my Login page is displayed. and then if i press forward button (on browser) the Welcome.jsp is displayed even if the user id and password is not entered. How do i handle the sessions?
Syed Saifuddin
Ranch Hand

Joined: Sep 01, 2003
Posts: 130
Hi Sonam Zam

write small java code on the login page that invalidate the whole session.

Thank You & Best Regards,

Syed Saifuddin,
Senior Software Engineer

SAP Oracle AIX & Java Training
I agree. Here's the link:
subject: Maintaining sessions
It's not a secret anymore!