session variable data lost or weirdness

[wayne forrest]

I am having some problems with my session variables being lost, currently I think this is only for IE9.
The code seems to work for FireFox/Chrome/Safari/IE8 but not for IE9.


I have noticed that the SESSION IDS' returned are different when I use IE9, whereas with other browsers the ID's are the same.
I think the problem could be in the way that the "Capcha" servlet is called, via a "GET". Whereas the rest of the validation is done via a "POST".


What's wrong with this approach or is there perhaps something I should be doing different ?


Here is the JSP Page snippet: For IE9 the ID produced on Line 2 differs from Line 74 in the second snippet of code.

<%
	System.out.println("ID:"+session.getId()); // this different from line 74 in some browsers ?????
%>

<h1>Please Register</h1>


<form method="post" action="ValidateLogin">
<ul class="form">
	<li> <input type="text" name="name"
		value=<%="\"" + name + "\""%> id="name" />
	</li>

	

	<li><input type="text" name="captcha"
		value="The number below" id="captcha"
	</li>

	<li><img src="Capcha" id="imgCaptcha" /></li>
	
</ul>

<input type="submit" name="submit" value="Register" />
</form>

And the servlet code I got via google slightly modified:

import java.awt.Color;
import java.awt.Font;
import java.awt.GradientPaint;
import java.awt.Graphics2D;
import java.awt.RenderingHints;
import java.awt.image.BufferedImage;
import java.io.*;

import java.util.Random;
import javax.imageio.ImageIO;
import javax.servlet.*;
import javax.servlet.http.*;

public class Capcha extends HttpServlet {

	private static final long serialVersionUID = 1L;

	protected void processRequest(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {

		int width = 280;
		int height = 50; 

		
		char data[][] = {	
							{'4','8','0'},
							{'1','0','2','4'},
							{'2','5','6'}
						};
		
		BufferedImage bufferedImage = new BufferedImage(width, height, BufferedImage.TYPE_INT_RGB);

		Graphics2D g2d = bufferedImage.createGraphics();

		Font font = new Font("Georgia", Font.BOLD, 18);
		g2d.setFont(font);

		RenderingHints rh = new RenderingHints(RenderingHints.KEY_ANTIALIASING, RenderingHints.VALUE_ANTIALIAS_ON);

		rh.put(RenderingHints.KEY_RENDERING, RenderingHints.VALUE_RENDER_QUALITY);

		g2d.setRenderingHints(rh);

		GradientPaint gp = new GradientPaint(0, 0, Color.white, 0, height / 2, Color.LIGHT_GRAY, true);

		g2d.setPaint(gp);
		g2d.fillRect(0, 0, width, height);

		g2d.setColor(new Color(255, 153, 0));

		Random r = new Random();
		int index = Math.abs(r.nextInt()) % 5;

		String captcha = String.copyValueOf(data[index]);
		[b]request.getSession().setAttribute("captcha", captcha);[/b]
		
		int x = 0;
		int y = 0;

		for (int i = 0; i < data[index].length; i++) {
			x += 10 + (Math.abs(r.nextInt()) % 15);
			y = 20 + Math.abs(r.nextInt()) % 20;
			g2d.drawChars(data[index], i, 1, x, y);
		}

		g2d.dispose();

		response.setContentType("image/png");
		OutputStream os = response.getOutputStream();
		ImageIO.write(bufferedImage, "png", os);
		os.close();
	}
	
	protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
		[b]System.out.println("ID:"+request.getSession().getId());[/b] // this is different than the first ID
		System.out.println("GET");
		processRequest(request, response);
	}

	protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
		System.out.println("POST");
		processRequest(request, response);
	}

[wayne forrest]

I am still banging my head at this :

The following seems to persist getServletContext().getAttribute for IE and others.

Still not sure why the session variables are lost.

[wayne forrest]

I have looked at the data:

Comparing Chrome against IE9 using an application called "Fidler".

By looking at the data I noticed that the server/tomcat sends a new cookie JSESSIONID for each URL
in this case one for the JSP page and one for the "Capthca" servlet page.

By inspecting further, almost missed this; I noticed that IE9 did not send the cookie to the server for the second call (Capthca servlet),
and that is why the server(tomcat) issues a new JSESSIONID cookie.

by calls I mean
1) Serve JSP page
2) Serve Captcha page

Still not sure how to fix this though

I am starting to think that this is more of an IE9 and Tomcat issue

System.out.println("JSP ID:"+session.getId());

Gives a new ID for each page refresh in IE9, WHY ???

[wayne forrest]

Finally,

starting to make *SOME* sense with IE9,

what I did not mention was that I have a static html page that is served from TOMCAT, index.html,
and this page has a link to the JSP page.

the link was set to use my LAN IP, 192.168.0.X

And when I test the JSP PAGE I always went to

http://localhost:8080/MyApplication/index.html

and clicked the link (http://192.168.0.x:8080/MyApplication/login.jsp)


Changing localhost to the actual IP: 192.168.0.x made this WORK !!! I find this strange....