wood burning stoves
The moose likes JSP and the fly likes Maintaining sessions Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Java » JSP
Bookmark "Maintaining sessions" Watch "Maintaining sessions" New topic

Maintaining sessions

Sonam Zam

Joined: Apr 18, 2007
Posts: 9
hi friends i have created a web application using netbeans 6.0

When a user loggs in the data is sent from Login page to a servlet which in turn communicates with a bean. if the user id and password are valid the servlet creates a session and sets the attribute as follows

HttpSession session = request.getSession();

And forwarding it to a new jsp called Welcome.jsp . and on Welcome.jsp i am checkin the attribute value from session object.
Now on Welcome.jsp if i press back (on browser) my Login page is displayed. and then if i press forward button (on browser) the Welcome.jsp is displayed even if the user id and password is not entered. How do i handle the sessions?
Syed Saifuddin
Ranch Hand

Joined: Sep 01, 2003
Posts: 130
Hi Sonam Zam

write small java code on the login page that invalidate the whole session.

Thank You & Best Regards,

Syed Saifuddin,
Senior Software Engineer

SAP Oracle AIX & Java Training
I agree. Here's the link: http://aspose.com/file-tools
subject: Maintaining sessions
jQuery in Action, 3rd edition