This week's book giveaway is in the OO, Patterns, UML and Refactoring forum. We're giving away four copies of Refactoring for Software Design Smells: Managing Technical Debt and have Girish Suryanarayana, Ganesh Samarthyam & Tushar Sharma on-line! See this thread for details.
is calling invalidate() method on that session object the only way a user can be logged out if "he chooses" to be so? declaring session timeouts in xml,servlets are one way, but they are fixed,static. what's the solution for indeterminate dynamic session periods, periods whose length are determined by the user.