Wendy Gibbons wrote:i could use url rewritting (the name from head first) but i was using cookies to get around session timeout.
Session timeout depends on the HttpSession object. Even if URL rewriting is used, the HttpSession object remains accessible as the same way as how you use it when cookies are used.